This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/323830333a323463303a3a2f33322d3438203d3e20323634373936.roa
File:                     323830333a323463303a3a2f33322d3438203d3e20323634373936.roa (raw, json)
Hash identifier:          iPP6G5Haitt1pvy/VOPR5quitXhNID++9p1VN4exiwI=
Subject key identifier:   AD:C3:B0:0A:DD:A3:E5:E2:E2:F7:88:DF:5D:58:8B:AE:A6:C9:A9:8D
Certificate issuer:       /CN=7ED9ACC4C7390FB2C083BA37C144A9057A422D2D
Certificate serial:       6DC9379831BA3EC06F1F903F6DBEDE05C07770A5
Authority key identifier: 7E:D9:AC:C4:C7:39:0F:B2:C0:83:BA:37:C1:44:A9:05:7A:42:2D:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/323830333a323463303a3a2f33322d3438203d3e20323634373936.roa
Signing time:             Tue 06 Jan 2026 19:03:27 +0000
ROA not before:           Tue 06 Jan 2026 18:58:27 +0000
ROA not after:            Tue 05 Jan 2027 19:03:27 +0000
asID:                     264796
IP address blocks:        2803:24c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c9:37:98:31:ba:3e:c0:6f:1f:90:3f:6d:be:de:05:c0:77:70:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED9ACC4C7390FB2C083BA37C144A9057A422D2D
        Validity
            Not Before: Jan  6 18:58:27 2026 GMT
            Not After : Jan  5 19:03:27 2027 GMT
        Subject: CN=ADC3B00ADDA3E5E2E2F788DF5D588BAEA6C9A98D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:17:44:cf:51:39:b2:45:25:6d:17:3a:b5:
                    57:fd:15:e0:96:2a:d2:39:a4:50:8e:97:d6:95:24:
                    04:64:84:70:32:79:93:a0:09:45:bd:a9:76:36:ff:
                    69:1e:de:95:a3:15:94:e2:e2:05:43:de:35:fb:bf:
                    1d:20:93:04:8d:8e:84:de:e8:07:2e:18:1f:a4:16:
                    23:3d:e6:45:65:c9:82:58:4c:b9:8a:66:ac:85:ea:
                    cf:5a:a7:e8:0e:fe:e7:c1:ad:0d:f4:d0:04:86:69:
                    31:c4:37:cd:4c:49:04:ea:e1:9b:8f:78:ad:9e:27:
                    76:25:a1:5e:f9:5e:1d:a8:af:07:02:3d:27:af:d2:
                    2a:82:76:27:37:c3:f1:cc:8d:01:85:09:67:0e:b5:
                    89:3a:1c:a9:40:04:4d:6c:44:70:b7:19:ab:c7:05:
                    31:57:b4:1c:84:08:17:aa:bd:d2:10:30:4d:8d:d8:
                    e9:16:cc:cb:95:e7:e1:63:06:b8:b3:3c:d6:67:05:
                    44:64:ed:da:06:79:bd:f9:69:b0:04:e4:97:e0:41:
                    9a:7a:ef:9f:d7:34:39:a8:11:52:71:bf:64:73:63:
                    40:a7:07:ad:14:39:a0:de:9e:13:70:18:d5:c2:8f:
                    6d:e4:52:b8:36:78:c9:94:c3:05:f6:46:4c:6d:3a:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C3:B0:0A:DD:A3:E5:E2:E2:F7:88:DF:5D:58:8B:AE:A6:C9:A9:8D
            X509v3 Authority Key Identifier:
                keyid:7E:D9:AC:C4:C7:39:0F:B2:C0:83:BA:37:C1:44:A9:05:7A:42:2D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/323830333a323463303a3a2f33322d3438203d3e20323634373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:24c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:46:27:7d:7e:a7:1b:a0:83:99:dd:a4:a8:1b:65:47:ec:47:
         70:ff:79:95:3f:9d:5f:5e:03:6a:e9:91:4d:08:fe:5f:5e:fc:
         42:87:68:48:a4:a2:58:1c:61:22:de:c3:d3:ec:e5:8a:ea:e9:
         c6:d3:07:43:cc:bf:41:83:c7:d6:cd:f3:ea:95:f5:1d:8e:69:
         fb:0b:62:d7:17:f1:93:4a:d8:02:08:c4:cd:ca:a3:76:e6:02:
         ff:2b:ed:fd:e7:4b:04:52:78:ce:57:4c:37:55:91:ed:88:25:
         5e:2b:ce:f8:41:aa:b0:3b:c9:76:5d:1f:29:a3:1b:5a:77:f7:
         ab:d2:14:df:7b:d1:f9:ef:6d:90:57:5d:18:c5:be:8e:71:e3:
         e4:79:69:57:e3:30:b4:66:ba:17:0b:f5:74:e0:fd:ee:b6:a9:
         c1:ec:b6:4f:d3:ec:3b:0e:ef:84:e4:80:7b:bc:70:7b:d0:c3:
         c2:87:7b:91:09:1d:a0:a0:88:b7:a8:54:a0:66:d1:d1:c7:5e:
         f8:84:bd:aa:b7:e9:d9:a5:1f:79:1c:3b:22:bb:ea:bb:2d:3d:
         c5:1f:af:df:bb:b1:e4:a5:ac:c2:4a:43:19:a8:3e:be:05:12:
         7d:8e:a4:1e:56:8c:80:a8:67:82:b7:f2:66:9b:9e:48:24:97:
         cd:c7:bd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:03:16 2026 by rpki-client