This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/323830333a366332303a3a2f33322d3334203d3e20323635383330.roa
File:                     323830333a366332303a3a2f33322d3334203d3e20323635383330.roa (raw, json)
Hash identifier:          +ctxh1bjMmevsDwd33Hu+GcWxLK1n2HiICsu7xZEzgE=
Subject key identifier:   03:0D:D3:0A:B5:B2:C1:CF:B1:44:9D:81:5B:2A:A4:9A:DC:F7:8F:13
Certificate issuer:       /CN=620CC3037E329EA6E6446036A75894936D28FD42
Certificate serial:       2C0A54FB0937AC8815CE7045D0535B1801EC0FC7
Authority key identifier: 62:0C:C3:03:7E:32:9E:A6:E6:44:60:36:A7:58:94:93:6D:28:FD:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620CC3037E329EA6E6446036A75894936D28FD42.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/323830333a366332303a3a2f33322d3334203d3e20323635383330.roa
Signing time:             Tue 06 Jan 2026 19:31:58 +0000
ROA not before:           Tue 06 Jan 2026 19:26:58 +0000
ROA not after:            Tue 05 Jan 2027 19:31:58 +0000
asID:                     265830
IP address blocks:        2803:6c20::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/620CC3037E329EA6E6446036A75894936D28FD42.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/620CC3037E329EA6E6446036A75894936D28FD42.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620CC3037E329EA6E6446036A75894936D28FD42.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0a:54:fb:09:37:ac:88:15:ce:70:45:d0:53:5b:18:01:ec:0f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620CC3037E329EA6E6446036A75894936D28FD42
        Validity
            Not Before: Jan  6 19:26:58 2026 GMT
            Not After : Jan  5 19:31:58 2027 GMT
        Subject: CN=030DD30AB5B2C1CFB1449D815B2AA49ADCF78F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c6:17:24:c5:4d:96:b3:0d:56:7e:43:86:31:
                    57:1c:95:80:6d:04:ee:bd:57:56:30:a1:63:e1:49:
                    2b:33:a6:b9:ba:0e:de:4b:5c:77:94:e6:42:a0:99:
                    04:ec:b3:cc:a2:91:c4:07:3d:0f:03:5d:2d:8b:50:
                    6f:a3:81:1b:c9:77:38:d3:10:8f:2a:2d:10:76:90:
                    ff:a0:d1:9e:6f:6f:cc:d3:ca:21:8b:c5:b4:df:2d:
                    81:57:05:1b:ca:64:7c:c3:d3:df:47:20:ce:42:cd:
                    a7:c6:ba:a4:81:fa:96:6f:04:ec:3d:09:8a:a9:a3:
                    f1:16:ce:6e:84:97:76:2f:d6:9d:5b:ec:42:e6:dd:
                    86:a9:df:b1:7e:66:b6:5c:7e:22:7d:05:78:64:1b:
                    56:02:82:c4:22:09:31:f3:18:a2:95:88:81:b7:c6:
                    5b:aa:3e:9e:88:11:5f:b5:1e:8a:ca:27:44:e4:5e:
                    3c:f2:b4:65:39:47:77:29:cc:48:09:2a:92:04:bf:
                    7d:22:3e:cf:e7:cb:21:05:b5:50:43:db:86:a5:50:
                    3e:27:d9:4f:9d:bc:2d:34:ce:3b:e3:a8:23:b2:07:
                    30:ed:07:49:e9:f2:7d:dc:cf:b3:05:58:f5:db:17:
                    42:ce:70:6f:ad:26:14:08:c5:cf:05:0b:41:b0:62:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0D:D3:0A:B5:B2:C1:CF:B1:44:9D:81:5B:2A:A4:9A:DC:F7:8F:13
            X509v3 Authority Key Identifier:
                keyid:62:0C:C3:03:7E:32:9E:A6:E6:44:60:36:A7:58:94:93:6D:28:FD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/620CC3037E329EA6E6446036A75894936D28FD42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620CC3037E329EA6E6446036A75894936D28FD42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/323830333a366332303a3a2f33322d3334203d3e20323635383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:2e:3a:b3:ee:3b:0c:d7:53:b3:5d:fb:2c:5a:31:c0:2b:4f:
         59:87:f1:67:88:27:cf:47:82:9f:66:52:ed:19:e6:91:b4:40:
         22:1b:71:ce:10:53:27:3c:57:d9:93:00:32:ea:bd:41:83:b9:
         02:5b:a5:dd:1d:d2:65:ce:65:93:1c:b2:64:e8:cb:c9:cc:cf:
         7a:91:b5:48:a6:58:aa:7f:72:f4:e9:f8:e2:50:b0:65:cb:d2:
         eb:b1:52:83:03:54:a4:f8:34:f9:40:84:df:2c:dc:90:9c:99:
         08:ea:64:f9:1a:20:79:0c:e9:51:72:62:2d:98:ad:dc:93:6b:
         4f:89:76:cf:c6:99:c9:d4:de:41:24:9c:d1:c3:87:49:5f:31:
         ed:fc:4e:e2:d5:3b:bb:37:d5:9f:80:4a:0f:8b:27:b1:54:f6:
         19:bf:b3:64:1e:50:7a:68:1b:1a:bf:39:a1:b2:51:5a:5e:b5:
         4a:3b:3c:b8:a7:03:81:c6:af:b7:41:e7:ad:34:47:e5:73:df:
         b0:d8:cd:9c:ab:c9:ba:8b:4c:92:f6:22:e4:60:b1:f7:28:3f:
         5e:4d:86:0e:be:27:6f:63:fa:f5:0d:52:72:c6:25:73:3c:1c:
         1c:21:09:fd:8c:71:44:0b:4c:32:59:e4:65:43:6a:1f:18:b8:
         9d:9b:ee:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:49:56 2026 by rpki-client