This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/323830333a326434303a3a2f33322d3332203d3e20323634373037.roa
File:                     323830333a326434303a3a2f33322d3332203d3e20323634373037.roa (raw, json)
Hash identifier:          ZLIDvsvTHNcMmzgzWVwFmuPBHEwsNk5VDwA2JwQKGyA=
Subject key identifier:   A9:07:4F:63:C5:3A:B2:20:54:4F:E0:7E:1F:12:58:43:0C:C2:F1:71
Certificate issuer:       /CN=B1566632B5442CF0C87AB7D54C504E27671A3935
Certificate serial:       19DE675B03BD288685B832691D13310BDAA3D0F9
Authority key identifier: B1:56:66:32:B5:44:2C:F0:C8:7A:B7:D5:4C:50:4E:27:67:1A:39:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1566632B5442CF0C87AB7D54C504E27671A3935.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/323830333a326434303a3a2f33322d3332203d3e20323634373037.roa
Signing time:             Tue 06 Jan 2026 19:34:04 +0000
ROA not before:           Tue 06 Jan 2026 19:29:04 +0000
ROA not after:            Tue 05 Jan 2027 19:34:04 +0000
asID:                     264707
IP address blocks:        2803:2d40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/B1566632B5442CF0C87AB7D54C504E27671A3935.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/B1566632B5442CF0C87AB7D54C504E27671A3935.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1566632B5442CF0C87AB7D54C504E27671A3935.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:de:67:5b:03:bd:28:86:85:b8:32:69:1d:13:31:0b:da:a3:d0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1566632B5442CF0C87AB7D54C504E27671A3935
        Validity
            Not Before: Jan  6 19:29:04 2026 GMT
            Not After : Jan  5 19:34:04 2027 GMT
        Subject: CN=A9074F63C53AB220544FE07E1F1258430CC2F171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:2c:4c:64:a0:7b:27:c7:95:37:6a:dc:b7:
                    a7:ea:87:56:14:57:b3:77:2d:42:0e:b8:aa:89:a2:
                    0e:eb:a8:eb:e5:67:6c:68:ab:d1:93:5d:a9:a0:6b:
                    84:b9:eb:59:5b:95:20:61:2e:8e:50:fb:39:7b:92:
                    32:ca:fb:f4:b0:0b:f2:73:e2:25:53:82:1d:c2:1d:
                    88:b3:82:db:09:d3:51:11:9a:d0:2e:32:5d:20:b1:
                    c1:c2:7d:db:cf:b4:b8:be:2b:bc:ab:69:55:2b:4a:
                    43:c0:84:2f:a7:8d:f9:a6:30:41:c7:eb:5f:3a:94:
                    0d:ee:84:5b:a1:29:27:0c:cd:0f:d8:89:f9:bb:ef:
                    31:d4:28:81:5d:e7:2c:db:1e:72:0f:71:b0:eb:81:
                    af:d5:00:7f:38:d6:b1:65:f7:3d:2c:8b:c9:b5:22:
                    ae:4f:69:76:a4:e4:90:c1:2d:61:d2:e0:a0:9e:f8:
                    7f:5e:a5:97:fa:ff:72:37:ad:11:e1:11:7a:32:02:
                    18:9b:08:c9:4d:c0:c1:e7:63:01:bf:6c:ac:a0:78:
                    3f:14:ad:25:cc:95:1d:0c:17:91:b9:cb:41:fb:5c:
                    07:dd:8c:24:11:5d:12:d1:6c:e2:3f:ae:68:a8:88:
                    d7:2d:4b:f3:54:65:f3:a1:22:dc:ef:3f:e6:bc:f5:
                    b3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:07:4F:63:C5:3A:B2:20:54:4F:E0:7E:1F:12:58:43:0C:C2:F1:71
            X509v3 Authority Key Identifier:
                keyid:B1:56:66:32:B5:44:2C:F0:C8:7A:B7:D5:4C:50:4E:27:67:1A:39:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/B1566632B5442CF0C87AB7D54C504E27671A3935.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1566632B5442CF0C87AB7D54C504E27671A3935.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/323830333a326434303a3a2f33322d3332203d3e20323634373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:f5:0f:7e:e3:7e:ab:73:ac:91:9e:4f:53:59:5c:01:b2:fb:
         2b:07:46:6f:3b:7c:a6:ec:ba:4f:24:6f:99:a8:6c:3c:9c:73:
         75:92:d1:30:5f:dc:ff:4c:d4:ea:56:dc:b5:18:38:59:23:54:
         b5:65:4b:68:1e:2d:44:58:fa:c6:af:34:c2:95:e3:c8:65:b7:
         9d:53:31:d0:59:71:7a:cc:02:d4:95:5f:ee:0c:8b:e6:92:9a:
         96:81:12:1e:cc:0a:79:5d:f3:b1:15:40:b5:71:8f:9d:9b:b7:
         b7:a4:19:04:93:85:e7:21:c1:e2:3e:55:ff:10:47:8f:6d:2c:
         d2:64:0d:6e:61:58:89:9e:09:68:41:1e:f2:93:61:d4:61:65:
         c8:e8:95:60:c0:fa:d2:b4:70:45:2d:91:67:4d:b9:69:78:50:
         2b:6d:f3:26:fd:83:e9:39:99:eb:a6:82:57:0f:ac:9e:b3:5a:
         63:89:86:42:ad:46:ff:a3:6e:aa:77:32:1f:5b:01:b0:0f:d7:
         f9:85:20:5c:1c:10:96:c9:12:9d:66:5a:c9:56:63:a2:43:0e:
         d5:9c:0e:19:6e:44:60:ce:41:81:ef:8d:86:7b:31:18:f0:fb:
         1e:9b:15:15:a4:21:a7:db:9b:cd:59:a0:5b:26:9a:75:49:91:
         15:19:8c:4d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUGd5nWwO9KIaFuDJpHRMxC9qj0PkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE1NjY2MzJCNTQ0MkNGMEM4N0FCN0Q1NEM1MDRFMjc2
NzFBMzkzNTAeFw0yNjAxMDYxOTI5MDRaFw0yNzAxMDUxOTM0MDRaMDMxMTAvBgNV
BAMTKEE5MDc0RjYzQzUzQUIyMjA1NDRGRTA3RTFGMTI1ODQzMENDMkYxNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTkyxMZKB7J8eVN2rct6fqh1YU
V7N3LUIOuKqJog7rqOvlZ2xoq9GTXamga4S561lblSBhLo5Q+zl7kjLK+/SwC/Jz
4iVTgh3CHYizgtsJ01ERmtAuMl0gscHCfdvPtLi+K7yraVUrSkPAhC+njfmmMEHH
6186lA3uhFuhKScMzQ/Yifm77zHUKIFd5yzbHnIPcbDrga/VAH841rFl9z0si8m1
Iq5PaXak5JDBLWHS4KCe+H9epZf6/3I3rRHhEXoyAhibCMlNwMHnYwG/bKygeD8U
rSXMlR0MF5G5y0H7XAfdjCQRXRLRbOI/rmioiNctS/NUZfOhItzvP+a89bNzAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUqQdPY8U6siBUT+B+HxJYQwzC8XEwHwYDVR0j
BBgwFoAUsVZmMrVELPDIerfVTFBOJ2caOTUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMUQ5MzM5RDNBRTIyOTkxM0Y0RjMwMzM2NDlCQTA3NDk4
N0I0NDBDMjAwRkQ4OTAzMERBRTNENjlGNUU2RjlGLzAvQjE1NjY2MzJCNTQ0MkNG
MEM4N0FCN0Q1NEM1MDRFMjc2NzFBMzkzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTU2NjYzMkI1NDQyQ0YwQzg3
QUI3RDU0QzUwNEUyNzY3MUEzOTM1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDFEOTMzOUQzQUUyMjk5MTNGNEYzMDMzNjQ5QkEwNzQ5ODdCNDQwQzIw
MEZEODkwMzBEQUUzRDY5RjVFNkY5Ri8wLzMyMzgzMDMzM2EzMjY0MzQzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDM3MzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDLUAw
DQYJKoZIhvcNAQELBQADggEBACr1D37jfqtzrJGeT1NZXAGy+ysHRm87fKbsuk8k
b5mobDycc3WS0TBf3P9M1OpW3LUYOFkjVLVlS2geLURY+savNMKV48hlt51TMdBZ
cXrMAtSVX+4Mi+aSmpaBEh7MCnld87EVQLVxj52bt7ekGQSThechweI+Vf8QR49t
LNJkDW5hWImeCWhBHvKTYdRhZcjolWDA+tK0cEUtkWdNuWl4UCtt8yb9g+k5meum
glcPrJ6zWmOJhkKtRv+jbqp3Mh9bAbAP1/mFIFwcEJbJEp1mWslWY6JDDtWcDhlu
RGDOQYHvjYZ7MRjw+x6bFRWkIafbm81ZoFsmmnVJkRUZjE0=
-----END CERTIFICATE-----
Generated at Mon Jan 12 16:23:33 2026 by rpki-client