This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313830303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a313830303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          mzLHoblODNzU/ZgSYdYnEj59ITfnIvd6cDiOJyLWdFA=
Subject key identifier:   E7:48:4D:1E:99:70:C7:15:9E:D5:15:9B:02:11:7B:26:8B:27:DD:7D
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       2668A851BF6B7B40ED8F6F7A6B624A816BDF4484
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313830303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Sat 22 Nov 2025 00:53:25 +0000
ROA not before:           Sat 22 Nov 2025 00:48:25 +0000
ROA not after:            Sat 21 Nov 2026 00:53:25 +0000
asID:                     273123
IP address blocks:        2803:450:1800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:68:a8:51:bf:6b:7b:40:ed:8f:6f:7a:6b:62:4a:81:6b:df:44:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Nov 22 00:48:25 2025 GMT
            Not After : Nov 21 00:53:25 2026 GMT
        Subject: CN=E7484D1E9970C7159ED5159B02117B268B27DD7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:27:55:09:de:3d:02:90:49:01:ea:64:a3:ea:
                    3a:7b:03:ba:a5:d3:07:c3:b2:e2:a4:d8:eb:3a:6c:
                    11:fc:35:74:54:1e:1f:e0:3f:10:14:5b:35:bc:f6:
                    49:8f:89:6f:72:18:03:1d:e1:83:51:5e:06:c7:17:
                    9a:90:21:e9:1b:e5:71:d5:86:09:b6:ab:8c:66:6a:
                    f4:1f:25:13:df:89:48:a7:12:9f:08:25:07:91:b6:
                    33:ce:c4:fc:50:2e:a2:dd:ed:d8:31:b3:33:56:01:
                    d7:b6:d9:8a:1c:3b:27:3f:01:10:cd:13:5b:8d:cc:
                    86:b4:e4:79:bd:8c:1d:57:13:e3:fd:1e:44:02:de:
                    72:47:9d:ce:74:23:32:68:04:14:2c:6b:f1:9e:da:
                    2a:71:6b:36:45:eb:76:09:09:4b:13:e6:84:7e:ca:
                    c0:1e:06:af:79:a7:7b:59:80:90:94:01:8f:d4:df:
                    57:fc:a8:94:51:a7:74:4b:00:06:b3:fa:92:ff:7b:
                    fa:5a:71:35:7e:87:8d:29:a4:06:fa:9e:b7:c2:a9:
                    3f:96:38:ab:e9:3f:dc:39:a6:70:6f:b5:d3:be:65:
                    e9:70:2b:07:d6:6b:6a:b4:cf:18:d4:20:73:e4:e3:
                    66:52:1e:8f:ae:a7:3d:85:7a:ea:72:55:ea:f6:be:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:48:4D:1E:99:70:C7:15:9E:D5:15:9B:02:11:7B:26:8B:27:DD:7D
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313830303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:58:77:8a:aa:3b:09:12:d1:f4:a8:9d:62:88:2f:1e:4a:e4:
         4c:5a:85:c2:74:53:fa:ba:44:2a:3c:d9:33:47:02:bb:0f:f6:
         d3:60:c6:d8:25:33:ee:1c:fe:60:84:e0:05:50:95:12:37:62:
         cb:52:d1:b9:18:4b:69:0b:41:3f:73:f5:43:1c:fd:82:89:dd:
         f0:ed:97:0f:f4:76:a6:0e:fc:f4:89:d6:04:ab:da:ed:b2:38:
         af:ce:de:9a:f4:5b:9b:70:fb:1a:b0:73:5e:d0:7c:5c:fb:51:
         e4:5c:93:54:25:9d:04:57:8c:d6:5f:35:a1:6f:47:2a:66:f7:
         b0:f1:84:08:eb:51:d0:68:3d:bb:b2:cf:b1:b8:b9:a4:94:8e:
         0b:d1:da:ea:db:00:18:21:2f:28:e3:11:92:b1:2c:f9:7a:a3:
         2e:6a:f1:c2:93:c0:da:17:8d:08:61:3c:09:44:ec:1d:8b:ae:
         71:ae:d3:d6:92:1e:77:31:cc:25:b2:d7:20:07:02:83:a8:8f:
         89:3e:f2:bf:f2:db:30:55:19:67:22:8c:3c:a9:2d:89:4b:0e:
         1c:74:21:73:8e:9b:45:76:b3:73:50:a8:74:d7:13:27:8e:86:
         d6:04:fa:fb:63:d8:39:10:08:6b:ce:de:69:89:68:a9:42:bd:
         19:76:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 15:19:08 2025 by rpki-client