This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e203131383330.roa
File:                     323830303a643330303a3a2f32392d3438203d3e203131383330.roa (raw, json)
Hash identifier:          Ny54WNR82uilL+mggnJ39m5e36UVRfLdCxAwm+FDphc=
Subject key identifier:   EB:7A:6E:29:4B:BF:81:36:D3:28:F8:B7:86:5F:2C:89:5C:D7:B3:33
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       7BEDE9B821CBD0C903FE49A884C2C36B0888E90D
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e203131383330.roa
Signing time:             Tue 06 Jan 2026 19:30:42 +0000
ROA not before:           Tue 06 Jan 2026 19:25:42 +0000
ROA not after:            Tue 05 Jan 2027 19:30:42 +0000
asID:                     11830
IP address blocks:        2800:d300::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ed:e9:b8:21:cb:d0:c9:03:fe:49:a8:84:c2:c3:6b:08:88:e9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Jan  6 19:25:42 2026 GMT
            Not After : Jan  5 19:30:42 2027 GMT
        Subject: CN=EB7A6E294BBF8136D328F8B7865F2C895CD7B333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5b:95:35:59:29:68:68:37:0a:ab:30:50:60:
                    b3:6c:c1:76:54:a7:0c:9c:3d:6e:1d:4c:7b:b7:9b:
                    80:85:64:f8:8c:f5:25:bc:eb:31:f7:4d:f8:13:f8:
                    9a:69:03:ec:8d:5b:e9:91:c2:5a:fd:d2:f4:0a:10:
                    86:d5:ef:76:cd:d0:cc:ac:a8:ab:73:7d:04:7e:88:
                    49:97:9e:a7:2d:00:2b:27:21:53:a3:36:58:7f:43:
                    b8:df:89:ac:d2:40:1b:f3:0a:5f:b7:33:e2:90:55:
                    27:e1:7d:5d:5d:f0:3d:eb:e7:a1:4a:3c:17:2d:27:
                    de:e9:4c:2e:6c:a1:93:39:8b:fe:54:55:42:25:0d:
                    1e:1a:3a:2f:a2:df:19:62:9f:3b:31:6a:4a:54:ab:
                    d6:5a:85:cd:9a:c9:ee:3a:e9:e4:dd:5e:23:45:bb:
                    62:0c:56:3b:7f:b3:3a:8b:48:74:e2:3e:ec:4a:c3:
                    48:85:41:ad:7d:52:20:75:45:1e:81:38:77:55:ca:
                    e3:0f:74:1a:70:fb:4c:06:90:ff:63:93:c0:ab:ec:
                    76:48:e9:69:01:0d:1e:56:a5:6e:d8:69:b5:b8:8c:
                    02:4e:a9:84:4c:9e:02:f5:b4:35:45:4f:04:38:23:
                    17:e3:1a:f4:0d:25:25:1a:df:06:9d:6f:98:4b:b6:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7A:6E:29:4B:BF:81:36:D3:28:F8:B7:86:5F:2C:89:5C:D7:B3:33
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:d300::/29

    Signature Algorithm: sha256WithRSAEncryption
         41:95:49:9f:e1:b8:c7:8b:d3:e8:fd:7b:bc:f2:f0:01:b4:42:
         ba:76:7e:f9:39:9d:78:2b:16:bb:65:28:34:e6:6c:d0:28:91:
         eb:59:ef:79:ae:c4:5c:b6:41:e3:2b:c7:a6:a6:c9:62:be:a5:
         41:4e:2e:25:75:a7:ab:c5:48:41:2a:83:4e:31:fd:cb:02:ac:
         0f:92:c2:d8:0a:29:c9:fd:32:c7:98:1f:a6:c7:43:c2:8e:1f:
         1f:18:11:c8:22:ee:52:f7:9f:36:05:e3:5d:87:39:8a:9b:23:
         f2:f8:a0:3e:87:39:31:26:fc:bd:93:3d:5e:d9:ee:f6:c7:22:
         89:fc:7a:6d:bb:7b:49:bf:fb:75:e8:99:ee:f6:00:07:11:f8:
         f6:8f:0a:0b:39:66:48:04:53:50:d1:e9:8f:3b:58:2a:f5:23:
         e5:da:3f:5a:5d:27:ed:7c:ec:31:64:b6:77:b6:8c:ec:a9:07:
         8e:1f:78:32:33:fb:84:cf:25:ac:ea:26:3f:57:d6:5c:66:ca:
         1f:f8:32:fe:56:b5:4b:12:4f:50:b0:1f:ee:d1:2c:8c:86:00:
         ab:23:4b:d6:21:62:b4:de:64:a0:1f:31:9f:97:df:d6:83:49:
         1c:aa:27:cd:ea:3f:86:29:2b:6e:49:10:7c:d5:9d:2d:eb:3b:
         ad:87:02:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:41:24 2026 by rpki-client