This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a313230303a3a2f34302d3430203d3e203237383138.roa
File:                     323830333a333338303a313230303a3a2f34302d3430203d3e203237383138.roa (raw, json)
Hash identifier:          WvPltsaqc+hzgmaqs9Y//kXcmacVKQoJl0oHnVE5WLs=
Subject key identifier:   A5:DA:87:7E:54:8D:B6:A2:A5:F3:F7:2B:D9:CC:7C:34:A0:18:B7:1A
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       1DDEAA7BDA93E4C6B3D59A20ECB98D4A9126342D
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a313230303a3a2f34302d3430203d3e203237383138.roa
Signing time:             Tue 06 Jan 2026 19:20:27 +0000
ROA not before:           Tue 06 Jan 2026 19:15:27 +0000
ROA not after:            Tue 05 Jan 2027 19:20:27 +0000
asID:                     27818
IP address blocks:        2803:3380:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:de:aa:7b:da:93:e4:c6:b3:d5:9a:20:ec:b9:8d:4a:91:26:34:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Jan  6 19:15:27 2026 GMT
            Not After : Jan  5 19:20:27 2027 GMT
        Subject: CN=A5DA877E548DB6A2A5F3F72BD9CC7C34A018B71A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:38:70:ca:8c:8d:55:c7:e0:cc:82:89:c9:9b:
                    d7:75:a8:74:a6:83:6d:70:c8:8f:41:43:e8:50:01:
                    6e:cd:b1:53:2e:e4:cb:6f:65:51:16:dd:b4:99:ca:
                    c1:47:f6:ff:56:ab:a0:5b:06:34:6a:24:e1:8f:a7:
                    7c:39:37:32:79:74:b9:d1:91:54:b8:35:b8:95:ad:
                    73:88:15:ad:0e:2e:a7:21:a2:a1:6d:ca:21:d6:84:
                    bb:68:df:94:be:fd:19:d5:b9:53:f3:d7:3b:3b:a6:
                    80:d7:b0:6f:01:64:47:32:d9:29:87:51:04:d3:93:
                    e1:0c:ff:55:45:ac:0a:a5:40:44:03:19:17:f9:09:
                    4a:59:bb:80:89:ed:bb:11:cb:1f:a0:91:48:97:e3:
                    59:7b:64:ec:32:06:d1:d3:89:21:4d:2b:df:59:d2:
                    89:c9:e4:d1:b9:18:73:3d:3a:8a:51:7e:9f:2f:64:
                    49:0b:71:a6:70:7c:30:29:a1:43:25:8c:08:36:1b:
                    b2:20:3c:ab:05:91:50:92:27:8d:01:1c:9f:6a:f5:
                    09:23:b8:24:02:46:45:00:f2:69:3e:38:1d:66:cb:
                    58:c5:fa:b1:a9:5d:f6:4c:ab:35:7d:ce:cf:8c:0a:
                    6a:76:bc:0c:3d:eb:d7:7c:d8:1c:7c:65:43:17:e0:
                    43:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DA:87:7E:54:8D:B6:A2:A5:F3:F7:2B:D9:CC:7C:34:A0:18:B7:1A
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a313230303a3a2f34302d3430203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:49:b4:e2:69:a8:23:71:69:54:2f:2f:eb:8c:17:d3:b6:16:
         27:35:15:2c:b5:e2:21:7b:5f:05:6d:88:18:73:8e:2c:80:79:
         44:2a:21:be:6f:4a:fc:54:85:37:96:c3:c0:53:64:06:40:5a:
         9f:8b:4f:03:84:30:f0:32:f8:46:a7:d9:5a:68:33:9e:d4:d9:
         4a:30:da:8c:cb:54:4f:48:c8:2f:c3:bc:70:2e:b1:3c:2c:97:
         c2:bb:ee:af:34:33:bc:a2:f8:5b:de:de:46:07:82:ab:30:cb:
         a7:2c:e4:69:3b:8a:95:f7:a7:ae:63:36:04:2e:21:c8:6a:51:
         68:aa:a8:05:d2:36:96:6d:7d:13:ec:1d:99:6c:b8:7c:53:e7:
         b6:b6:88:c7:55:89:26:47:07:9f:63:95:36:28:00:9a:ac:05:
         51:f3:4a:7d:4b:36:f9:a9:43:3d:89:48:38:93:89:83:45:cc:
         73:b4:90:f7:86:9d:e8:d4:96:be:4b:3f:a3:58:00:b6:2d:02:
         dd:8d:3f:82:1f:90:89:de:0e:60:e3:3b:69:ef:7c:b4:ef:1a:
         a3:34:6e:ab:56:db:de:7b:3f:5f:7b:33:a1:ec:d7:04:55:5a:
         b0:da:db:a5:05:29:e1:07:6e:f8:ee:1f:23:95:e6:e6:15:b8:
         d2:77:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:24 2026 by rpki-client