This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313630303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a313630303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          mOgZEgqjf6nNvYA+xbcaGIn131taiOxmxZHWBKdKemM=
Subject key identifier:   AA:EC:09:F1:11:B3:21:29:2A:F0:EA:55:03:8C:C4:C5:89:81:B8:A9
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       25FDB81F9511058516F3161B1B97FFCBE1820F7B
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313630303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Sat 22 Nov 2025 00:53:26 +0000
ROA not before:           Sat 22 Nov 2025 00:48:26 +0000
ROA not after:            Sat 21 Nov 2026 00:53:26 +0000
asID:                     273123
IP address blocks:        2803:450:1600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fd:b8:1f:95:11:05:85:16:f3:16:1b:1b:97:ff:cb:e1:82:0f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Nov 22 00:48:26 2025 GMT
            Not After : Nov 21 00:53:26 2026 GMT
        Subject: CN=AAEC09F111B321292AF0EA55038CC4C58981B8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:21:d3:69:6f:18:64:b9:58:30:7d:3f:25:1b:
                    71:83:0b:d1:80:1c:a7:2a:7a:f1:da:a5:f4:d8:b7:
                    f3:2c:43:72:43:71:9c:0d:63:71:ec:af:43:ea:56:
                    9c:8e:75:52:4e:34:35:6f:eb:11:07:5b:f7:70:fd:
                    56:c1:7a:6b:0b:71:ba:10:57:34:02:f1:99:e2:1e:
                    42:ce:00:58:95:c7:8b:90:80:e3:5b:73:8e:64:c4:
                    5a:eb:04:df:41:d6:29:b1:eb:9c:ce:91:69:7e:fa:
                    03:6f:c6:47:61:50:09:49:a5:1f:7a:cb:00:20:ca:
                    6f:20:5e:58:50:40:34:46:c8:d1:4f:21:52:57:85:
                    55:de:ab:2c:98:c4:37:a8:af:f1:21:54:6b:96:36:
                    04:85:84:85:18:c2:0b:70:f7:c8:9e:fb:73:f2:37:
                    ce:51:0a:b8:54:c9:46:d8:09:bc:cf:eb:90:66:de:
                    90:f7:7b:bd:5c:c4:75:79:5b:b8:63:63:c3:8d:45:
                    6c:84:cf:1f:bc:87:2c:53:6e:e5:f6:7f:09:db:e3:
                    ac:bd:a5:18:fe:e4:af:14:a8:7f:db:94:b2:c4:81:
                    80:41:d3:2a:04:05:22:d3:e4:bb:c5:57:c3:c8:ac:
                    f0:07:35:9f:4f:48:0f:c8:cb:ef:88:8c:9c:28:73:
                    55:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EC:09:F1:11:B3:21:29:2A:F0:EA:55:03:8C:C4:C5:89:81:B8:A9
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313630303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:16:dd:cd:ea:e4:69:39:98:c5:6b:67:1e:8a:7b:45:f3:43:
         df:79:5c:a0:2e:08:d8:87:94:28:ba:0b:91:14:bb:fb:b8:8a:
         73:0c:c7:ed:59:b7:ac:15:46:c4:a8:4f:a0:c4:0b:a8:85:cb:
         fb:22:c5:b0:f3:82:7c:9c:0d:8e:22:38:b5:99:0f:41:8b:16:
         d3:e9:39:ea:ff:7c:01:04:15:46:e9:a4:20:b7:b2:2f:9c:dd:
         9f:b9:12:c4:2b:e3:95:67:1d:08:9e:3b:4a:06:ee:19:41:a0:
         ec:88:4b:d0:7d:33:c5:30:a6:c2:f9:90:9b:45:89:b5:97:dc:
         f5:9f:01:a0:05:15:f2:26:21:9f:f9:cc:46:a2:13:c1:91:bc:
         2a:da:51:b7:c9:b8:f4:5b:f4:5b:44:c3:f5:4b:41:14:a8:0c:
         ea:b9:fd:13:7c:5d:43:15:ad:2c:95:e1:b3:ad:db:50:be:e7:
         05:dc:9d:4a:7c:1e:c5:49:e3:a0:69:6c:e3:6b:d6:2a:26:0a:
         de:da:43:f2:bc:e4:66:1d:33:cf:d8:aa:5b:65:5f:10:11:e6:
         8f:bf:e6:3d:19:b5:8e:0c:e9:d5:60:aa:6a:ec:7e:d8:c6:98:
         8f:79:a6:d2:9f:df:0a:18:39:39:88:e4:0e:87:a6:b2:06:3b:
         22:d1:c2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 15:19:10 2025 by rpki-client