This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/366DC252A9E24FE7578D2F2918639475A59FA6BE88ECE9011AFA080E5D990EF4/0/323830333a376139303a3a2f33322d3438203d3e20323732383836.roa
File:                     323830333a376139303a3a2f33322d3438203d3e20323732383836.roa (raw, json)
Hash identifier:          6+JSq9VwDmVv4TrPppOloLMv+lvk1yIYklpWfs8PVJA=
Subject key identifier:   33:EE:13:0E:31:44:C7:E6:C1:F8:6E:56:61:97:66:7A:B4:AC:1E:31
Certificate issuer:       /CN=EE7D6E5021DEEB7C36518742F6D237F750B6E9A6
Certificate serial:       6FDF5D92FFF2381E7A5289133240DC4AF4EEF92E
Authority key identifier: EE:7D:6E:50:21:DE:EB:7C:36:51:87:42:F6:D2:37:F7:50:B6:E9:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE7D6E5021DEEB7C36518742F6D237F750B6E9A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/366DC252A9E24FE7578D2F2918639475A59FA6BE88ECE9011AFA080E5D990EF4/0/323830333a376139303a3a2f33322d3438203d3e20323732383836.roa
Signing time:             Tue 06 Jan 2026 19:09:51 +0000
ROA not before:           Tue 06 Jan 2026 19:04:51 +0000
ROA not after:            Tue 05 Jan 2027 19:09:51 +0000
asID:                     272886
IP address blocks:        2803:7a90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/366DC252A9E24FE7578D2F2918639475A59FA6BE88ECE9011AFA080E5D990EF4/0/EE7D6E5021DEEB7C36518742F6D237F750B6E9A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/366DC252A9E24FE7578D2F2918639475A59FA6BE88ECE9011AFA080E5D990EF4/0/EE7D6E5021DEEB7C36518742F6D237F750B6E9A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE7D6E5021DEEB7C36518742F6D237F750B6E9A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:df:5d:92:ff:f2:38:1e:7a:52:89:13:32:40:dc:4a:f4:ee:f9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE7D6E5021DEEB7C36518742F6D237F750B6E9A6
        Validity
            Not Before: Jan  6 19:04:51 2026 GMT
            Not After : Jan  5 19:09:51 2027 GMT
        Subject: CN=33EE130E3144C7E6C1F86E566197667AB4AC1E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:76:4e:df:a5:6a:e3:e6:19:87:f5:6b:8f:
                    5e:32:c3:c7:ce:ca:a5:85:da:bf:43:b5:77:5d:bc:
                    34:64:c2:9e:2d:a9:db:05:0a:09:92:74:9b:b1:db:
                    b8:5a:5b:0c:b8:1b:e3:ab:e9:69:be:07:0d:8b:f6:
                    5b:f2:74:da:c4:c1:23:45:9c:0b:2e:e8:e0:f8:f6:
                    e6:0c:30:a4:f9:c5:8e:e3:66:1b:26:1d:c9:28:61:
                    ce:9d:46:5e:bf:4c:99:09:bd:4b:bd:da:dc:2f:dc:
                    ea:8d:ae:76:5e:08:41:9c:bd:dd:8a:57:75:e3:86:
                    9d:79:20:08:ef:65:d2:a1:7e:d8:a7:32:ae:13:e3:
                    de:6b:93:52:4b:76:0b:cd:61:34:b4:48:d0:f8:a2:
                    3c:3a:27:06:71:ff:f3:6c:35:08:9d:a5:51:b3:db:
                    24:d7:c1:44:52:66:84:db:48:19:5f:8c:a4:56:c6:
                    6f:fe:7f:1d:1d:59:b8:34:c0:ec:89:30:9d:07:fe:
                    9f:25:b5:45:d9:4c:83:98:c7:e9:4e:bf:af:b9:5c:
                    d1:23:57:bc:cf:a3:2c:d5:c3:1d:6c:ab:dc:f0:89:
                    b9:b3:ae:c8:f5:57:ac:21:5c:c3:cd:18:8d:ff:82:
                    7e:b2:9e:d8:0b:76:11:97:77:49:da:e2:53:23:72:
                    cc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EE:13:0E:31:44:C7:E6:C1:F8:6E:56:61:97:66:7A:B4:AC:1E:31
            X509v3 Authority Key Identifier:
                keyid:EE:7D:6E:50:21:DE:EB:7C:36:51:87:42:F6:D2:37:F7:50:B6:E9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/366DC252A9E24FE7578D2F2918639475A59FA6BE88ECE9011AFA080E5D990EF4/0/EE7D6E5021DEEB7C36518742F6D237F750B6E9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE7D6E5021DEEB7C36518742F6D237F750B6E9A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/366DC252A9E24FE7578D2F2918639475A59FA6BE88ECE9011AFA080E5D990EF4/0/323830333a376139303a3a2f33322d3438203d3e20323732383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:4d:da:6c:5c:91:2f:9d:0f:dd:8c:ff:d3:05:4c:48:6c:
         f7:e3:e2:f6:e9:75:25:4f:3c:c4:e6:ef:af:4e:82:51:18:9f:
         75:f6:66:ca:77:5d:1a:9d:fb:45:27:39:47:75:dc:03:95:a6:
         ae:65:40:3b:13:58:2b:6a:08:81:34:75:6d:65:3c:e9:8d:e6:
         b7:f5:db:2f:87:32:2e:bd:51:2a:55:82:14:19:a1:6c:a5:43:
         0c:85:44:e5:19:77:66:fe:6d:cb:66:64:4e:a9:9c:3a:c4:85:
         d8:bf:56:e8:e5:2b:a9:34:da:65:7d:ae:62:eb:7f:a1:08:78:
         32:dd:fc:b3:36:9d:90:7d:0d:04:52:b5:34:a3:80:42:73:f0:
         28:de:4c:4e:4e:07:67:8b:25:c7:1b:18:ba:4b:26:00:20:e4:
         d2:63:3e:72:44:35:b3:62:ef:03:e0:2c:9a:9f:8a:e3:f6:e1:
         da:cd:11:25:e3:65:42:dd:cd:00:1b:71:b0:70:87:47:c3:19:
         69:e4:5b:0c:ba:0c:9d:7f:74:fa:6f:f0:66:71:94:f1:c0:f1:
         c0:95:df:67:56:9a:8b:92:81:22:46:bc:16:8b:bb:b9:82:be:
         31:52:c9:8a:b4:59:d8:ef:2f:71:75:cc:25:fe:ae:04:6a:53:
         a7:8b:e2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:48 2026 by rpki-client