This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316430303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a316430303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          ZZVI+7MPJprCxBL2loBi7z/u7AX/wiZLoudrJ8Wwa+Y=
Subject key identifier:   22:07:E4:F8:BD:5F:7D:D1:C2:21:40:B0:23:14:B4:B0:7A:79:9F:03
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       7622EB5E94D5A5EE903647E617948FD3E73D52CD
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316430303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Sat 22 Nov 2025 00:53:23 +0000
ROA not before:           Sat 22 Nov 2025 00:48:23 +0000
ROA not after:            Sat 21 Nov 2026 00:53:23 +0000
asID:                     273123
IP address blocks:        2803:450:1d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:22:eb:5e:94:d5:a5:ee:90:36:47:e6:17:94:8f:d3:e7:3d:52:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Nov 22 00:48:23 2025 GMT
            Not After : Nov 21 00:53:23 2026 GMT
        Subject: CN=2207E4F8BD5F7DD1C22140B02314B4B07A799F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:14:09:b8:8a:9c:53:ce:84:af:29:05:c9:
                    94:fa:d0:62:e7:ab:f1:6f:b0:48:13:82:41:e6:45:
                    28:12:0f:f8:53:01:1c:ec:35:b9:b3:98:1b:01:d1:
                    cf:04:6c:b2:d7:22:0f:b7:2a:5d:8d:6d:75:4c:f7:
                    11:53:dc:f8:fb:5f:38:54:bd:92:c4:bf:28:5d:ff:
                    85:ef:2e:b0:c2:2c:ab:98:ed:9a:04:f3:1f:ec:e7:
                    66:e1:22:2b:1d:76:9a:9a:81:50:c1:ca:de:3a:e8:
                    9d:c3:9b:c9:ca:4b:0d:9e:75:07:11:1b:fe:82:33:
                    63:ab:5a:cf:3b:f2:5a:4a:47:9d:61:a7:af:3c:84:
                    d6:ea:c0:48:8e:f5:91:e5:10:81:f6:38:af:c1:70:
                    16:69:8d:6c:f8:98:6b:ea:f8:ff:c3:69:1b:ac:7e:
                    2f:48:ef:ae:8d:25:d0:9b:4c:1b:86:3e:6c:95:69:
                    23:97:e0:c2:39:ee:9a:07:f2:3b:b5:34:7c:50:22:
                    91:c4:b2:53:ea:63:13:55:c2:ec:57:4a:6e:d7:16:
                    f8:95:de:af:61:cc:6a:b1:8f:11:55:d9:55:e0:8a:
                    f8:02:83:1b:cd:64:85:35:5b:f4:81:3b:a0:cb:5e:
                    5d:f3:85:5d:2e:c3:6d:3b:29:e3:a6:3f:cf:82:47:
                    61:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:07:E4:F8:BD:5F:7D:D1:C2:21:40:B0:23:14:B4:B0:7A:79:9F:03
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a316430303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:b9:a7:52:39:79:fa:88:1c:31:32:d1:0c:72:d6:36:51:c1:
         58:1f:ed:97:ab:f2:84:8b:3d:c7:fe:c3:6d:f8:52:b7:53:bd:
         4b:ef:e3:e2:d5:3f:ab:dd:3c:12:51:51:ab:0b:3c:10:f1:09:
         c4:44:49:6f:4f:a7:ef:5a:16:58:40:11:03:90:54:18:0a:de:
         cb:28:59:1c:d9:92:bd:75:eb:23:64:58:13:87:89:5d:71:ab:
         eb:a1:57:7c:1e:7f:5c:8c:ba:72:43:29:02:0d:49:69:f7:0c:
         05:ef:da:fd:c7:7a:25:43:24:bf:ae:a5:de:02:7c:c6:24:9e:
         e9:05:68:06:12:1c:02:8b:34:d4:6d:a6:a0:c1:26:c3:09:93:
         19:5b:86:2e:65:08:89:f2:15:1f:df:71:6e:ea:d1:76:e2:74:
         e8:c6:28:b6:ef:01:af:ee:d7:95:5b:df:df:15:56:cd:2a:5d:
         f2:29:1c:86:80:3a:78:dd:56:3e:48:30:de:20:8e:ce:0e:30:
         e8:02:1a:18:07:86:38:f7:4d:e5:06:90:3c:12:f0:c8:1b:f2:
         83:f6:e3:86:c7:ec:78:c2:77:07:7a:c1:8e:e8:f3:06:40:84:
         9c:cf:ce:36:93:a3:ea:de:88:44:6c:e9:b7:6f:8b:cc:90:35:
         0d:3b:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 15:19:07 2025 by rpki-client