This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2425B0AA790212BF2E4D5F5A24F14BD1AAB7A0B5261D3EB7F7A8A2A125E640/0/323830333a666464303a3a2f33322d3332203d3e20323734313939.roa
File:                     323830333a666464303a3a2f33322d3332203d3e20323734313939.roa (raw, json)
Hash identifier:          aZ17CT1Lv9Nujv/FlOmBtWAlBaecz8yH1vuIAMiL9a0=
Subject key identifier:   59:C4:60:3D:3D:50:83:F3:AE:79:DF:BD:84:C7:38:D6:E3:18:32:8D
Certificate issuer:       /CN=6C263ED5D58F178398DE004EAD76659920701A09
Certificate serial:       65D3B297F5A72518AC485FF0CAAB210AF8C55F8E
Authority key identifier: 6C:26:3E:D5:D5:8F:17:83:98:DE:00:4E:AD:76:65:99:20:70:1A:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C263ED5D58F178398DE004EAD76659920701A09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2425B0AA790212BF2E4D5F5A24F14BD1AAB7A0B5261D3EB7F7A8A2A125E640/0/323830333a666464303a3a2f33322d3332203d3e20323734313939.roa
Signing time:             Fri 23 Jan 2026 00:00:00 +0000
ROA not before:           Thu 22 Jan 2026 23:55:00 +0000
ROA not after:            Fri 22 Jan 2027 00:00:00 +0000
asID:                     274199
IP address blocks:        2803:fdd0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2425B0AA790212BF2E4D5F5A24F14BD1AAB7A0B5261D3EB7F7A8A2A125E640/0/6C263ED5D58F178398DE004EAD76659920701A09.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2425B0AA790212BF2E4D5F5A24F14BD1AAB7A0B5261D3EB7F7A8A2A125E640/0/6C263ED5D58F178398DE004EAD76659920701A09.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C263ED5D58F178398DE004EAD76659920701A09.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d3:b2:97:f5:a7:25:18:ac:48:5f:f0:ca:ab:21:0a:f8:c5:5f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C263ED5D58F178398DE004EAD76659920701A09
        Validity
            Not Before: Jan 22 23:55:00 2026 GMT
            Not After : Jan 22 00:00:00 2027 GMT
        Subject: CN=59C4603D3D5083F3AE79DFBD84C738D6E318328D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:f9:02:bb:20:3b:30:ae:e9:9d:fe:90:77:
                    22:c3:ec:c4:98:99:7c:fa:7e:62:c6:36:5b:15:34:
                    08:b7:c2:73:d6:bb:96:07:3a:bc:ea:50:33:06:86:
                    f8:12:0b:b3:07:27:96:0f:1c:ad:37:ca:e1:b1:8f:
                    2e:b9:18:f1:99:2c:44:55:55:12:99:f4:af:36:ac:
                    ec:8a:d2:1c:cc:d2:a4:a1:3d:92:f7:b5:45:35:2c:
                    f7:c1:4b:3f:2f:0a:ad:d0:f5:67:bd:2f:60:83:ea:
                    d7:0c:00:f0:b5:bf:93:03:06:06:36:91:e9:f2:26:
                    b5:ba:bc:5a:5b:9d:90:c4:83:67:5f:55:54:10:63:
                    bc:b6:d2:75:8f:b1:99:b4:bc:e7:5d:2d:27:88:20:
                    8e:43:52:be:ec:c6:3d:93:9b:7c:3c:72:f2:1e:b6:
                    d1:ba:8b:45:02:a9:89:04:c7:72:60:a8:c3:8d:56:
                    7b:5f:5e:e1:4a:05:ce:ab:dc:eb:b1:05:db:47:15:
                    ad:7d:5b:f5:01:c8:26:22:18:fe:86:7d:ee:b8:e7:
                    4d:21:d4:0a:d1:1f:ae:af:4b:3f:28:7a:28:ce:43:
                    54:de:77:57:3e:22:4d:9e:fb:5f:d2:ad:e8:f3:9a:
                    b0:67:da:d0:a7:47:fc:56:91:07:83:fe:9c:63:4c:
                    1c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C4:60:3D:3D:50:83:F3:AE:79:DF:BD:84:C7:38:D6:E3:18:32:8D
            X509v3 Authority Key Identifier:
                keyid:6C:26:3E:D5:D5:8F:17:83:98:DE:00:4E:AD:76:65:99:20:70:1A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2425B0AA790212BF2E4D5F5A24F14BD1AAB7A0B5261D3EB7F7A8A2A125E640/0/6C263ED5D58F178398DE004EAD76659920701A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C263ED5D58F178398DE004EAD76659920701A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2425B0AA790212BF2E4D5F5A24F14BD1AAB7A0B5261D3EB7F7A8A2A125E640/0/323830333a666464303a3a2f33322d3332203d3e20323734313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fdd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:86:dd:f7:e4:29:70:8e:55:7e:fe:87:20:2c:e6:4d:4f:d4:
         12:e5:90:2a:b7:be:92:f2:25:7e:ae:e5:62:05:2f:c0:6e:fe:
         9c:2b:47:60:4d:8a:7f:e3:63:42:80:80:53:5f:73:a7:f8:9b:
         bf:57:ef:3c:9c:34:b4:c6:12:6d:7e:c3:e5:0b:07:2e:11:6e:
         79:55:a2:c1:6a:50:c2:bc:80:74:bb:93:20:d0:1f:78:21:11:
         1c:3a:bb:69:e8:ce:4c:41:6f:c5:4c:a4:a7:ff:c2:e5:34:f8:
         e5:31:8d:ad:a1:ce:a6:f0:ab:8b:6c:b2:19:71:2d:e0:f3:68:
         71:b4:37:7a:0f:45:2e:a7:b3:54:76:09:dc:57:24:86:f3:46:
         d3:5d:21:08:7f:8e:e7:8f:27:36:03:59:ff:a1:85:20:b8:f3:
         71:42:6d:7f:ac:a0:6d:11:53:da:ce:80:9d:0d:1d:6e:0a:de:
         d2:8f:60:e5:c1:f9:6f:54:21:b6:e5:99:56:05:09:32:eb:7d:
         b2:db:2b:cf:35:b3:9d:12:32:cb:e9:18:50:b1:b9:3b:25:3f:
         5c:dd:3e:03:ac:90:df:6c:cd:03:d1:7f:df:0c:c7:f7:ed:4e:
         d5:16:54:c9:03:c1:3a:e8:5c:77:e4:59:b1:aa:44:ac:1f:b2:
         72:a2:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:15:53 2026 by rpki-client