This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313730303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a313730303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          FXYnQSdnTAr8p4iodQRZhNzEZd5/bThzI5nCDnNQEbg=
Subject key identifier:   EC:9C:A8:1D:6B:D6:E9:9B:3C:BD:BB:95:DE:F3:CF:99:FF:49:B7:41
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       1596ABCB20A72AA20A16324A5B05FFFC323A59C5
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313730303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Sat 22 Nov 2025 00:53:24 +0000
ROA not before:           Sat 22 Nov 2025 00:48:24 +0000
ROA not after:            Sat 21 Nov 2026 00:53:24 +0000
asID:                     273123
IP address blocks:        2803:450:1700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:96:ab:cb:20:a7:2a:a2:0a:16:32:4a:5b:05:ff:fc:32:3a:59:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Nov 22 00:48:24 2025 GMT
            Not After : Nov 21 00:53:24 2026 GMT
        Subject: CN=EC9CA81D6BD6E99B3CBDBB95DEF3CF99FF49B741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:4b:5a:55:c2:b7:ff:5e:28:da:e5:93:98:
                    6f:44:5d:64:ab:82:f3:62:78:a4:48:02:17:bc:43:
                    af:81:a2:e3:9e:d0:e8:ab:b5:9d:40:57:77:a5:80:
                    29:be:4a:70:01:6c:ba:c7:27:89:29:57:32:25:a5:
                    ed:ff:1e:45:f4:50:68:d9:b3:bf:8b:83:23:d2:ce:
                    92:41:49:ac:d5:73:9c:b2:1f:d4:96:bf:6e:69:1c:
                    70:52:22:9f:be:3d:99:bf:ba:af:43:41:98:70:53:
                    7c:ad:28:6a:e9:4b:82:9a:94:08:a5:bb:2f:70:c7:
                    1b:5d:cc:9d:fe:9c:d2:d8:ca:41:80:08:45:25:f6:
                    e8:a3:16:b1:3e:32:56:1f:58:33:3f:d5:1e:dc:14:
                    20:fd:9c:bb:86:96:d2:f3:fc:9c:a9:0d:9b:da:02:
                    d1:f3:e0:35:f9:52:e9:42:c9:7d:64:18:57:c8:de:
                    54:1e:e1:76:6e:cf:e1:c2:1f:f3:8d:1d:6f:b4:41:
                    fb:ea:e2:92:cb:15:e1:4d:b4:f5:ff:05:36:a3:00:
                    79:1c:e8:9e:6a:8f:f8:88:58:cd:4c:fd:68:6c:e1:
                    0a:11:a4:72:bd:dd:85:18:5d:31:72:b4:77:42:3c:
                    d7:14:8f:e9:dc:7d:a1:80:d6:c8:15:37:c3:c6:e3:
                    1a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9C:A8:1D:6B:D6:E9:9B:3C:BD:BB:95:DE:F3:CF:99:FF:49:B7:41
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313730303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:aa:3c:f9:7d:b0:b4:1c:8e:a9:46:04:eb:d3:e0:c0:90:94:
         d4:32:51:87:ab:51:47:6b:b8:06:74:bf:91:9d:31:b1:4b:10:
         44:cf:d4:10:30:b5:aa:ae:9d:9b:52:09:04:71:28:db:44:19:
         76:7d:bc:47:32:34:98:d2:46:e7:de:ac:6a:0d:12:dd:5d:e2:
         ee:51:7a:b2:5b:79:6f:f1:2e:52:a1:dd:ab:56:4a:34:5f:98:
         b4:04:b9:30:e7:a8:bc:37:0a:b4:e1:37:9c:fd:66:4c:c8:a4:
         d3:c1:46:a6:40:68:d9:ec:a3:fa:d1:c6:2d:38:34:56:6d:cb:
         dd:ca:de:73:94:3e:cf:3d:cf:af:16:ed:21:00:2b:a0:a1:a7:
         45:57:a2:38:37:8f:1d:77:cf:ad:8f:87:1c:8b:88:f2:2f:39:
         cc:15:3d:a1:fe:bc:7d:25:de:51:dd:4c:b0:bd:e3:0f:ab:d2:
         15:15:53:1c:4f:77:ba:96:e1:9f:9b:19:8d:e3:50:c3:40:e9:
         32:29:57:07:98:4b:1e:b6:2f:03:2f:be:c2:03:cb:24:10:36:
         7f:a9:09:85:1f:cd:a6:b9:f9:da:c2:1f:5e:3f:c9:73:40:6d:
         63:f4:26:18:97:53:3d:e9:da:20:dd:01:6d:a0:34:11:45:63:
         20:35:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 15:19:08 2025 by rpki-client