This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/323830333a636332303a3a2f33322d3332203d3e20323634363638.roa
File:                     323830333a636332303a3a2f33322d3332203d3e20323634363638.roa (raw, json)
Hash identifier:          uwx2b0B3CdOzP23fw9z4AQbaDEHev5FtbkYnvq4Q9Bs=
Subject key identifier:   65:34:9F:D2:85:C4:2F:0C:46:B2:90:8A:39:99:D1:D7:A3:C9:54:48
Certificate issuer:       /CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
Certificate serial:       5B13C816BA6A7586870577A4D4E81FE7EF4A8FE7
Authority key identifier: DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/323830333a636332303a3a2f33322d3332203d3e20323634363638.roa
Signing time:             Tue 06 Jan 2026 19:31:29 +0000
ROA not before:           Tue 06 Jan 2026 19:26:29 +0000
ROA not after:            Tue 05 Jan 2027 19:31:29 +0000
asID:                     264668
IP address blocks:        2803:cc20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:13:c8:16:ba:6a:75:86:87:05:77:a4:d4:e8:1f:e7:ef:4a:8f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
        Validity
            Not Before: Jan  6 19:26:29 2026 GMT
            Not After : Jan  5 19:31:29 2027 GMT
        Subject: CN=65349FD285C42F0C46B2908A3999D1D7A3C95448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:00:61:97:e5:75:64:74:f5:8d:4e:c5:03:
                    1a:91:36:5c:3e:b2:f6:c5:1d:f5:00:45:1d:c7:32:
                    b3:89:20:9e:36:8c:0f:46:48:07:43:cb:68:df:b1:
                    7c:7e:cf:95:f5:54:d8:6b:80:de:5a:fd:60:c6:1e:
                    cc:fb:c6:c4:c1:77:44:c6:92:f1:16:0b:49:d0:5e:
                    3b:c0:3e:ff:37:bc:bd:dc:53:00:8a:cc:09:43:cf:
                    73:44:b7:83:1e:98:38:6a:d4:fa:60:ed:28:8a:49:
                    9f:a0:3a:6d:1b:90:fa:d3:a7:95:91:d8:4d:d1:8e:
                    d8:a6:3e:91:2a:fe:48:4a:92:00:81:58:cb:3f:88:
                    67:14:ad:7f:8a:a0:d1:9c:71:88:12:a7:ca:4a:d8:
                    39:6b:73:81:f4:b0:3e:1f:cc:1e:eb:53:26:8e:71:
                    a7:ab:07:cc:a0:98:b3:b0:49:e0:7a:d9:a0:bc:a9:
                    85:e2:18:39:bd:60:18:3c:9b:ee:d6:d6:1e:2b:50:
                    44:b7:15:6f:9c:e6:5d:90:b2:86:34:83:69:0f:40:
                    fd:b9:ab:24:d7:04:cb:8f:41:35:d6:da:32:20:69:
                    d7:28:47:4f:48:da:6a:08:5a:bf:b4:f6:51:48:52:
                    da:6d:d4:64:a0:52:d7:f0:b9:24:97:1e:65:dd:bb:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:34:9F:D2:85:C4:2F:0C:46:B2:90:8A:39:99:D1:D7:A3:C9:54:48
            X509v3 Authority Key Identifier:
                keyid:DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/323830333a636332303a3a2f33322d3332203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:b2:fc:7b:30:d4:dd:92:42:3d:15:c8:98:fd:b3:1b:db:16:
         69:4b:02:d6:2d:71:13:7f:8f:93:14:bc:7b:e8:b1:54:79:a3:
         7a:41:8a:9c:58:a9:ef:c8:fe:14:94:7d:0b:82:92:03:08:ef:
         f5:69:b4:e9:7e:7f:df:fd:02:4b:24:99:89:2a:6c:f4:0a:71:
         c7:40:58:bc:d0:83:7e:61:a5:34:f1:fc:b0:d6:39:c3:c9:23:
         f0:80:81:8c:e0:e5:57:e6:bc:fe:ec:78:ab:85:a9:1a:4b:ef:
         70:aa:b9:2f:10:74:32:de:15:18:a2:18:9f:9a:f0:17:17:7a:
         8c:7c:5b:be:40:1b:9c:ca:04:a8:5a:67:dc:35:45:c6:0f:15:
         83:c3:60:3f:4c:08:b5:8f:05:df:b3:85:3b:3c:97:eb:e8:9e:
         9c:aa:20:33:19:e8:21:e7:25:f1:1c:cd:15:ed:e4:20:8c:29:
         87:08:08:8c:a8:75:9b:fa:8d:44:e8:a0:2c:da:fc:fd:c7:cc:
         00:e6:eb:c9:3a:fe:80:25:c4:f2:93:46:13:9c:3c:62:e7:6b:
         77:fd:dc:38:89:b9:6b:53:a3:16:5a:5d:75:e4:49:20:b6:61:
         cc:66:61:3f:28:1b:4d:7d:36:58:91:73:49:b8:fe:4b:13:cb:
         f7:71:c1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:27 2026 by rpki-client