This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/323830333a316530303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a316530303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          K0gP7+n7lxfwQZ4rAfKVqB8fCuvvQ4Hnc+8zDezk0WA=
Subject key identifier:   A8:ED:75:29:5A:AB:AA:7B:F9:B5:C3:0F:12:0D:78:ED:A9:C7:EC:6B
Certificate issuer:       /CN=0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE
Certificate serial:       04A26812F7F2249AD1F5AB21FC850958A28AE0F3
Authority key identifier: 0E:D6:B6:73:F8:63:9E:1B:FA:76:C3:D0:C7:C8:6D:57:5A:E0:F0:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/323830333a316530303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:27:57 +0000
ROA not before:           Tue 06 Jan 2026 19:22:57 +0000
ROA not after:            Tue 05 Jan 2027 19:27:57 +0000
asID:                     52468
IP address blocks:        2803:1e00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a2:68:12:f7:f2:24:9a:d1:f5:ab:21:fc:85:09:58:a2:8a:e0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE
        Validity
            Not Before: Jan  6 19:22:57 2026 GMT
            Not After : Jan  5 19:27:57 2027 GMT
        Subject: CN=A8ED75295AABAA7BF9B5C30F120D78EDA9C7EC6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:72:9e:21:af:dc:27:bb:64:69:14:62:01:
                    7a:1f:81:20:59:f6:9b:32:63:76:9d:7b:5f:4d:21:
                    fe:0a:d1:a0:31:b0:c9:8a:d6:aa:6a:55:d8:ed:d7:
                    22:22:c4:15:5c:54:d9:df:a2:c6:04:6d:90:38:c9:
                    5f:ae:c6:c5:80:47:ec:2a:e9:1b:ca:63:6e:e3:0a:
                    cf:b0:3c:1f:b6:eb:69:af:40:01:67:8f:4f:fa:d0:
                    15:bb:33:a5:c2:d8:44:ab:99:1c:25:23:59:a9:ae:
                    59:6a:42:fe:b2:79:06:29:2b:58:fd:17:7c:a6:26:
                    06:70:1c:90:f7:a6:f2:b2:b7:a3:91:2e:fd:b0:26:
                    c3:55:5c:e5:3a:6d:5f:c4:5c:1e:9d:8f:b4:a3:f8:
                    7f:08:38:62:1d:f9:62:e6:ba:43:a4:fc:a4:17:ac:
                    a2:ce:58:67:37:7d:86:06:5b:ad:98:ff:73:77:a0:
                    2b:f1:20:0a:d1:e2:41:82:1f:9c:82:02:63:81:6b:
                    12:a2:c3:f4:28:5e:d8:8d:7c:c9:27:be:e6:7a:60:
                    bc:c0:af:be:8f:bd:91:6d:03:11:35:44:c8:18:ab:
                    04:d6:1a:b1:7f:64:82:d2:5d:c5:52:78:6e:01:2d:
                    11:d7:ae:c0:7d:4f:48:4d:5a:6e:5d:2d:3b:bf:97:
                    a0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:ED:75:29:5A:AB:AA:7B:F9:B5:C3:0F:12:0D:78:ED:A9:C7:EC:6B
            X509v3 Authority Key Identifier:
                keyid:0E:D6:B6:73:F8:63:9E:1B:FA:76:C3:D0:C7:C8:6D:57:5A:E0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/323830333a316530303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:be:c1:ec:9f:d0:f1:79:3d:db:39:f4:35:34:42:2f:d3:7c:
         6e:39:80:bf:0a:ac:d4:46:81:8d:d7:ca:65:dd:43:45:a4:49:
         25:55:c1:7b:cb:fc:76:85:ab:fb:67:9a:9f:c6:ae:54:62:4e:
         f6:46:3e:e6:7f:4c:d7:64:23:cb:8b:42:9e:ee:c0:6c:80:7c:
         6b:b7:10:2c:d5:24:7c:52:c3:22:43:e4:1e:0e:6c:64:77:42:
         20:3d:e7:ad:28:bd:54:b8:7c:c7:1b:96:1a:4d:5e:2a:7f:c3:
         02:a8:d8:93:86:1e:04:83:11:7d:eb:dd:58:ee:23:34:92:0e:
         0d:b0:b6:33:44:ee:1c:10:2e:88:a3:c8:5d:75:a7:b9:5f:9f:
         d6:4a:30:c5:44:07:65:df:5d:f9:dd:ed:ea:0a:b1:5f:19:be:
         dc:86:78:fb:c1:f7:9f:8f:66:16:44:c0:7e:65:e0:9e:9e:33:
         63:79:c5:7c:d1:97:4c:9c:1a:05:9d:b5:15:95:b6:dc:e2:7d:
         8e:bf:9a:e3:b5:49:58:f7:fa:fe:33:29:c7:d5:7b:db:b2:88:
         f0:0f:a9:de:8c:53:31:12:02:f3:60:e3:f0:97:82:04:73:38:
         03:63:a4:ed:55:3e:dd:b0:ec:5c:fe:54:89:9d:dd:37:62:a7:
         76:1e:51:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:53:55 2026 by rpki-client