This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6528E447E6D53334F0FCCBAE253493920178F8EB5CA7EAE50BEE6475D26DA485/0/323830313a63343a39373a3a2f34382d3438203d3e20323730323036.roa
File:                     323830313a63343a39373a3a2f34382d3438203d3e20323730323036.roa (raw, json)
Hash identifier:          VzVoKOrTYEIqL7fQWZo93zTlKkJikSsv9gLvBKoYom4=
Subject key identifier:   01:7A:7D:2A:93:87:0D:71:D0:41:19:71:4B:2B:4C:E3:D7:73:C1:F9
Certificate issuer:       /CN=A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04
Certificate serial:       33008CD2421F5DEB0630740547863AD5AE106694
Authority key identifier: A6:20:0A:6B:E7:53:F8:A9:AE:D7:D3:AD:EE:8B:10:DC:EC:68:1C:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6528E447E6D53334F0FCCBAE253493920178F8EB5CA7EAE50BEE6475D26DA485/0/323830313a63343a39373a3a2f34382d3438203d3e20323730323036.roa
Signing time:             Thu 13 Nov 2025 21:52:32 +0000
ROA not before:           Thu 13 Nov 2025 21:47:32 +0000
ROA not after:            Thu 12 Nov 2026 21:52:32 +0000
asID:                     270206
IP address blocks:        2801:c4:97::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6528E447E6D53334F0FCCBAE253493920178F8EB5CA7EAE50BEE6475D26DA485/0/A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6528E447E6D53334F0FCCBAE253493920178F8EB5CA7EAE50BEE6475D26DA485/0/A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 16:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:8c:d2:42:1f:5d:eb:06:30:74:05:47:86:3a:d5:ae:10:66:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04
        Validity
            Not Before: Nov 13 21:47:32 2025 GMT
            Not After : Nov 12 21:52:32 2026 GMT
        Subject: CN=017A7D2A93870D71D04119714B2B4CE3D773C1F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:66:14:3a:86:d9:87:96:d8:b7:29:70:dc:ef:
                    70:38:b8:38:26:ec:10:d0:1c:05:4b:b3:dd:27:a5:
                    3c:bb:4e:75:12:42:4a:c3:b9:be:2a:9c:c0:48:26:
                    cf:88:06:27:50:3d:d2:29:fb:83:00:db:94:54:9b:
                    4a:74:ee:5b:c3:fc:dc:58:aa:51:56:d2:27:58:f2:
                    13:8a:e0:89:c5:22:0e:67:cd:05:03:30:71:f2:4c:
                    d1:6f:74:8c:58:a8:f9:2b:01:31:5d:8a:3d:ea:35:
                    2c:b7:fd:da:3e:ec:c9:2e:6b:4c:bd:c8:37:17:be:
                    01:fb:54:88:ef:9d:ff:38:a0:76:62:01:e6:0d:91:
                    1f:e2:9d:85:69:60:89:47:c5:ea:bb:6b:03:a9:25:
                    3a:01:62:39:6d:78:b9:56:e4:69:01:45:9e:97:dd:
                    80:e6:aa:ca:31:c5:d2:24:da:aa:23:e6:11:15:67:
                    5d:45:89:14:17:fc:f1:98:e5:a7:e5:4b:57:86:2a:
                    be:4f:30:94:5f:b0:d3:a3:4d:b3:dc:45:4c:fe:98:
                    1e:ec:26:75:d5:26:55:fd:31:ea:80:ca:5a:c5:85:
                    a3:cc:42:e2:be:8e:71:e4:64:89:f1:b1:83:0b:ad:
                    5e:4d:52:38:e6:8e:3d:72:15:c8:b5:1a:d4:52:75:
                    c8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7A:7D:2A:93:87:0D:71:D0:41:19:71:4B:2B:4C:E3:D7:73:C1:F9
            X509v3 Authority Key Identifier:
                keyid:A6:20:0A:6B:E7:53:F8:A9:AE:D7:D3:AD:EE:8B:10:DC:EC:68:1C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6528E447E6D53334F0FCCBAE253493920178F8EB5CA7EAE50BEE6475D26DA485/0/A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6200A6BE753F8A9AED7D3ADEE8B10DCEC681C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6528E447E6D53334F0FCCBAE253493920178F8EB5CA7EAE50BEE6475D26DA485/0/323830313a63343a39373a3a2f34382d3438203d3e20323730323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:97::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:cd:1b:83:48:a8:4c:d1:4a:8a:a8:83:b0:ac:8c:83:8c:6d:
         a2:93:6e:ff:61:df:73:35:4d:5b:93:96:9c:37:fa:3d:91:60:
         42:53:59:15:77:a2:7c:9e:48:45:7d:90:fe:92:4c:c4:72:c8:
         2f:49:6f:b1:d9:8d:0e:d5:7f:f3:14:af:10:97:89:4e:24:68:
         e3:88:72:a8:22:aa:ea:da:0e:3f:2b:a5:ad:2c:9e:75:31:7a:
         5b:4c:c4:a7:48:e4:c3:96:bb:8d:1a:dd:1d:80:25:7c:f5:95:
         a4:6c:62:59:32:0c:d9:37:d7:0c:b8:d9:87:bd:5a:ac:7b:38:
         dc:ad:f4:4f:51:61:7e:70:b9:df:7e:bc:af:85:f5:fc:78:e8:
         68:82:4f:f6:95:9f:5d:f6:ce:09:99:8c:c1:2d:2d:d8:76:20:
         7c:83:b8:80:32:6c:fe:d2:46:1d:5e:d1:09:64:7d:16:94:66:
         ea:bd:d0:cd:a9:56:53:af:6f:3a:4a:76:47:57:3c:0a:74:0f:
         18:de:fe:6f:d9:44:27:70:03:a3:a5:44:2e:6a:d3:46:92:41:
         4b:ca:a6:f7:c6:19:97:c3:aa:c2:c5:36:15:86:48:3b:6d:13:
         7d:72:99:dd:28:d8:14:73:94:b5:21:e4:e6:f3:2e:46:b4:7b:
         6e:01:1b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:03:39 2025 by rpki-client