This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a323030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a323030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          3i6aNGsxN6zTPzxoXW1ijxO6bobBYa1dWS1syVN+BgU=
Subject key identifier:   88:CC:73:CB:E3:8A:35:3F:FF:8E:2A:BD:8A:F0:1A:C3:38:45:5C:6D
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       7A090F3E9BF81453D25F02127AD11B2321FFDF5B
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a323030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 06 Jan 2026 19:20:26 +0000
ROA not before:           Tue 06 Jan 2026 19:15:26 +0000
ROA not after:            Tue 05 Jan 2027 19:20:26 +0000
asID:                     27818
IP address blocks:        2803:3380:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:09:0f:3e:9b:f8:14:53:d2:5f:02:12:7a:d1:1b:23:21:ff:df:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Jan  6 19:15:26 2026 GMT
            Not After : Jan  5 19:20:26 2027 GMT
        Subject: CN=88CC73CBE38A353FFF8E2ABD8AF01AC338455C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7e:ce:b3:dc:a7:f3:d6:52:ae:80:de:62:29:
                    ad:ba:08:10:05:9a:51:2c:2d:0b:eb:84:26:3c:c5:
                    b9:bc:97:d4:ab:ae:c3:08:3e:14:4e:3f:88:22:1e:
                    75:8e:be:90:ad:1a:b4:57:31:59:40:db:0b:fb:78:
                    0e:e9:38:88:2b:45:df:f4:97:38:ab:e5:9c:8a:bd:
                    a5:50:68:13:f6:d2:ac:d5:fc:ae:50:a6:1c:2c:d0:
                    b0:db:b6:a5:4a:18:14:ae:cd:8a:e5:8f:a7:a9:18:
                    1e:40:db:6e:ff:15:84:44:54:0a:ff:88:d5:ce:e3:
                    9c:73:c3:01:cf:c7:94:23:d0:07:2a:a9:9a:8b:b2:
                    7e:8c:7a:60:11:08:43:58:e7:15:2f:d5:72:fa:b1:
                    ae:93:9b:7c:90:34:bb:16:1b:ba:89:c3:90:14:67:
                    91:ec:a0:d1:d6:41:1d:35:12:65:3a:bf:ed:43:f5:
                    c5:24:f5:67:af:83:4c:45:e0:46:ac:ee:a8:25:d5:
                    5b:85:5a:04:0d:06:2b:64:45:bf:f2:9e:da:f2:f8:
                    68:88:27:42:ac:01:62:85:e1:a5:07:b5:c7:16:1a:
                    81:96:f8:c4:74:76:41:08:7f:f5:45:e2:f5:5e:bb:
                    de:04:f1:2c:1b:13:dc:66:77:32:fc:fa:80:3a:fb:
                    98:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CC:73:CB:E3:8A:35:3F:FF:8E:2A:BD:8A:F0:1A:C3:38:45:5C:6D
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a323030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:a4:89:07:cc:f1:18:64:5f:5b:8b:14:50:73:59:23:c9:6a:
         63:0b:71:d4:18:dc:52:59:5a:d7:b9:88:55:49:88:f1:2c:33:
         6f:a0:23:77:ce:a5:d1:0c:e7:0b:cb:89:dc:17:bc:df:86:33:
         e9:35:0e:1e:e2:9d:8a:f9:1d:aa:23:db:e3:fa:f9:58:c9:68:
         5d:1d:57:7b:55:7e:18:96:b9:3b:14:19:58:75:7a:fa:f1:dd:
         4f:43:d6:19:d4:60:f4:81:8d:5f:21:cb:50:6f:79:7f:a0:da:
         fd:95:78:d4:8d:9f:75:60:1a:53:2f:7c:ae:9c:e8:08:26:e0:
         8c:08:e4:63:cd:88:3c:64:a5:6d:2c:19:f6:49:35:6e:8f:8e:
         57:aa:18:c3:6a:be:41:c2:2b:a1:c1:85:41:5d:fe:0e:41:35:
         c7:c0:29:26:e9:ef:ad:75:62:f8:89:cd:4e:4a:c3:eb:00:87:
         ca:84:28:0b:86:e1:a3:c9:7c:3e:82:ec:73:c6:08:fd:e3:8a:
         05:a9:e7:4d:48:12:9b:db:27:66:ba:0e:b1:88:3c:f8:aa:71:
         2f:eb:24:28:3a:22:1a:a7:75:de:2b:98:ed:4a:3b:20:80:fc:
         1f:c0:9f:13:a1:d8:4a:d8:34:8b:aa:58:6e:1b:ff:47:e7:db:
         1a:f5:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:31 2026 by rpki-client