This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/323830333a323835303a3a2f33322d3438203d3e20323733313131.roa
File:                     323830333a323835303a3a2f33322d3438203d3e20323733313131.roa (raw, json)
Hash identifier:          nm1/JV+H51+tPU6WsvB6c1Y+U18+q926bawGupsbi4Q=
Subject key identifier:   C3:9B:9E:F7:FE:E6:DB:40:B4:96:F8:41:6B:B3:BA:D4:22:A7:B5:5B
Certificate issuer:       /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial:       05A1C8B4DB3DAF1F6172F236D81117FF42696209
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/323830333a323835303a3a2f33322d3438203d3e20323733313131.roa
Signing time:             Tue 06 Jan 2026 20:56:50 +0000
ROA not before:           Tue 06 Jan 2026 20:51:50 +0000
ROA not after:            Tue 05 Jan 2027 20:56:50 +0000
asID:                     273111
IP address blocks:        2803:2850::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a1:c8:b4:db:3d:af:1f:61:72:f2:36:d8:11:17:ff:42:69:62:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
        Validity
            Not Before: Jan  6 20:51:50 2026 GMT
            Not After : Jan  5 20:56:50 2027 GMT
        Subject: CN=C39B9EF7FEE6DB40B496F8416BB3BAD422A7B55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:52:96:a3:d2:be:eb:5b:79:96:ad:0d:9f:b1:
                    90:f6:72:84:7a:29:08:e9:e5:24:80:ee:f6:03:99:
                    84:45:34:92:42:ea:78:bb:0b:d9:b8:cd:39:de:9c:
                    9d:d2:7b:ab:4b:18:d9:5e:20:e4:6a:9a:62:91:3c:
                    4e:cf:9c:64:b6:12:e1:17:21:26:e6:e8:fd:99:7b:
                    dc:64:14:af:25:ba:57:a1:c7:6d:8c:9b:7b:9c:99:
                    21:39:b5:8a:a5:0a:e7:97:4e:8a:6e:c9:6b:c6:35:
                    77:51:95:c7:00:cb:1e:3a:98:46:05:30:4c:d5:5d:
                    53:d8:74:e9:34:80:b6:78:76:73:a8:99:8f:61:fa:
                    b5:6a:91:77:db:0b:7e:a1:57:6b:f3:c5:48:7e:1c:
                    3c:ed:71:6d:51:f9:9b:ee:3b:81:4d:fb:06:0a:15:
                    98:d5:5a:77:a8:4b:9c:93:f0:d3:bb:00:88:f9:65:
                    89:aa:e2:f0:70:be:1d:89:fc:0b:32:de:79:30:36:
                    39:d6:78:07:aa:f0:8b:5a:36:d1:00:03:f9:aa:c3:
                    c8:b4:5b:64:c1:3c:09:6b:b1:be:21:6d:02:82:86:
                    34:51:e3:d4:5b:22:30:c3:a9:d4:3b:df:3c:8f:ff:
                    b3:a5:cc:d0:e3:6d:7a:45:d6:d2:57:6f:a2:15:32:
                    34:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9B:9E:F7:FE:E6:DB:40:B4:96:F8:41:6B:B3:BA:D4:22:A7:B5:5B
            X509v3 Authority Key Identifier:
                keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/323830333a323835303a3a2f33322d3438203d3e20323733313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2850::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:96:75:26:9b:79:0f:02:fa:55:19:c7:ba:77:34:13:d1:31:
         a9:d7:f8:d6:72:51:43:59:9f:a5:66:10:76:75:72:c1:f0:1e:
         8a:dc:7a:e8:b1:ce:65:c8:57:a6:5b:0c:03:4b:0d:1e:9d:51:
         f5:03:ff:f9:f5:bd:59:eb:0a:eb:98:e3:50:b2:5e:2f:19:a6:
         38:88:73:9f:d0:72:8a:5a:08:07:e3:af:39:53:ba:47:bb:e8:
         5a:31:8d:03:97:a9:1e:84:58:6b:7b:89:d2:26:70:2c:12:a7:
         fd:e4:ab:8a:72:1f:2e:73:ca:b8:2a:a6:35:34:2b:77:b3:d6:
         8b:b7:db:b9:dc:61:0d:eb:12:8e:9d:bf:24:b3:f4:9a:bb:3c:
         01:65:15:9e:d2:bc:9c:b7:25:6d:91:f2:04:aa:db:1b:c1:2f:
         de:7c:8e:c0:fc:a2:5c:14:c9:0f:5e:78:7e:92:53:2e:b7:70:
         e5:8f:3c:1c:b7:3d:02:0f:50:a2:3d:01:16:9b:a1:3a:16:82:
         90:4d:90:07:77:16:f5:f4:1a:64:aa:e4:6a:8a:a8:a9:46:e7:
         19:fe:31:51:8e:6c:67:24:46:5f:6d:95:d7:19:83:25:b4:ef:
         19:17:dc:8d:08:0c:7d:66:17:71:03:89:4b:74:5e:8b:61:4b:
         7c:df:22:22
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUBaHItNs9rx9hcvI22BEX/0JpYgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCNEQ4Q0Y3QzUzRjg5M0ZBODFBMUUxMTE1QkM4RTAy
NjdGOTg0NTAeFw0yNjAxMDYyMDUxNTBaFw0yNzAxMDUyMDU2NTBaMDMxMTAvBgNV
BAMTKEMzOUI5RUY3RkVFNkRCNDBCNDk2Rjg0MTZCQjNCQUQ0MjJBN0I1NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgUpaj0r7rW3mWrQ2fsZD2coR6
KQjp5SSA7vYDmYRFNJJC6ni7C9m4zTnenJ3Se6tLGNleIORqmmKRPE7PnGS2EuEX
ISbm6P2Ze9xkFK8lulehx22Mm3ucmSE5tYqlCueXTopuyWvGNXdRlccAyx46mEYF
MEzVXVPYdOk0gLZ4dnOomY9h+rVqkXfbC36hV2vzxUh+HDztcW1R+ZvuO4FN+wYK
FZjVWneoS5yT8NO7AIj5ZYmq4vBwvh2J/Asy3nkwNjnWeAeq8ItaNtEAA/mqw8i0
W2TBPAlrsb4hbQKChjRR49RbIjDDqdQ73zyP/7OlzNDjbXpF1tJXb6IVMjQBAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUw5ue9/7m20C0lvhBa7O61CKntVswHwYDVR0j
BBgwFoAU2LTYz3xT+JP6gaHhEVvI4CZ/mEUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GM0VCMTA4N0M4QjRCQjNDQTU2NzhFNDFGNDUzOEJBQTgz
NkRGMEQxRjBDOEVFMzIzNTk2NTRERkQyQjVFODk0LzAvRDhCNEQ4Q0Y3QzUzRjg5
M0ZBODFBMUUxMTE1QkM4RTAyNjdGOTg0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEI0RDhDRjdDNTNGODkzRkE4
MUExRTExMTVCQzhFMDI2N0Y5ODQ1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjNFQjEwODdDOEI0QkIzQ0E1Njc4RTQxRjQ1MzhCQUE4MzZERjBEMUYw
QzhFRTMyMzU5NjU0REZEMkI1RTg5NC8wLzMyMzgzMDMzM2EzMjM4MzUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzMxMzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDKFAw
DQYJKoZIhvcNAQELBQADggEBADOWdSabeQ8C+lUZx7p3NBPRManX+NZyUUNZn6Vm
EHZ1csHwHorceuixzmXIV6ZbDANLDR6dUfUD//n1vVnrCuuY41CyXi8ZpjiIc5/Q
copaCAfjrzlTuke76FoxjQOXqR6EWGt7idImcCwSp/3kq4pyHy5zyrgqpjU0K3ez
1ou327ncYQ3rEo6dvySz9Jq7PAFlFZ7SvJy3JW2R8gSq2xvBL958jsD8olwUyQ9e
eH6SUy63cOWPPBy3PQIPUKI9ARaboToWgpBNkAd3FvX0GmSq5GqKqKlG5xn+MVGO
bGckRl9tldcZgyW07xkX3I0IDH1mF3EDiUt0XothS3zfIiI=
-----END CERTIFICATE-----
Generated at Mon Jan 12 02:38:33 2026 by rpki-client