This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a333030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a333030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          xH4yYbQKzgi9aYQLxkK8HPpmFxqlJ2vRPvvpNflmqVs=
Subject key identifier:   D2:AD:FE:49:B4:91:93:8F:64:B5:47:6A:AD:52:95:2B:12:EC:14:5C
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       5A778A54F324247B11917E3E1C951C7B23AB4B05
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a333030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 06 Jan 2026 19:20:22 +0000
ROA not before:           Tue 06 Jan 2026 19:15:22 +0000
ROA not after:            Tue 05 Jan 2027 19:20:22 +0000
asID:                     27818
IP address blocks:        2803:3380:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:77:8a:54:f3:24:24:7b:11:91:7e:3e:1c:95:1c:7b:23:ab:4b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Jan  6 19:15:22 2026 GMT
            Not After : Jan  5 19:20:22 2027 GMT
        Subject: CN=D2ADFE49B491938F64B5476AAD52952B12EC145C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6e:72:8a:50:30:8e:c4:0f:dd:73:a3:1b:24:
                    99:84:be:48:90:c3:7e:b9:61:1c:81:77:26:89:25:
                    77:e3:3e:b9:ba:55:60:d0:54:1f:3a:93:fe:1f:6a:
                    45:6f:d1:5d:c5:7e:0e:53:57:7f:4a:35:1d:e3:b8:
                    15:fe:0a:9b:86:8a:1e:48:2d:15:2a:ce:8e:ae:41:
                    75:24:b4:4f:c5:a3:ff:8e:ed:eb:85:38:9c:62:a5:
                    6f:32:46:db:01:a2:8b:9e:0f:e1:11:3a:98:82:57:
                    20:0c:d3:20:19:79:f1:40:ac:4f:bd:6d:57:57:5d:
                    7d:c1:a0:e2:11:cf:42:a0:48:03:40:fb:01:d7:c6:
                    93:4b:02:87:e3:e1:e0:6d:a9:6b:aa:ba:cb:fb:e9:
                    61:58:ed:48:40:d6:94:75:81:da:cf:52:d8:a0:57:
                    46:be:7a:57:09:a9:b3:8a:3d:a7:03:45:73:0d:53:
                    66:96:97:ae:1f:19:61:20:89:01:50:24:d6:70:ed:
                    78:a7:f4:c9:24:a4:c9:24:53:ee:5e:66:ff:19:03:
                    19:2b:55:03:ca:53:18:fe:04:d7:f4:84:cc:3f:1c:
                    b5:d9:05:25:cc:dc:cc:5a:f1:5e:4b:6e:66:04:ba:
                    e5:cb:83:63:9d:ac:ff:65:e0:a2:61:ee:d4:1e:50:
                    50:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AD:FE:49:B4:91:93:8F:64:B5:47:6A:AD:52:95:2B:12:EC:14:5C
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a333030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:c5:d5:98:e5:9f:5f:01:a6:0c:2c:b6:da:ca:54:03:9b:
         f9:9a:7c:e9:7e:d3:83:3b:7e:d3:08:77:61:d2:c9:c3:07:20:
         3f:b4:24:03:37:9d:05:5f:a4:8d:5d:ae:9c:3a:61:cc:cd:8f:
         a3:40:f4:65:bb:3f:58:2b:0b:04:03:c2:61:c7:4a:1f:65:fb:
         22:6c:d7:16:bb:e8:94:91:0a:76:6b:8f:32:f5:4a:99:56:7d:
         eb:fb:0e:07:01:b1:7e:eb:90:00:d0:b8:ea:97:70:8d:b8:9a:
         a3:bf:47:09:ec:4a:6f:6d:40:3b:c7:32:14:04:9b:2c:2f:e1:
         cc:08:1c:d5:d6:03:b8:ea:79:f5:cc:03:26:89:26:03:81:f1:
         dc:a0:97:93:18:f3:3f:27:09:84:ea:be:6a:fe:ef:53:9d:87:
         29:94:bf:a6:34:ae:5e:07:7f:a3:51:2c:1c:f5:43:bf:3f:20:
         75:75:28:d5:c6:d8:4b:69:27:22:32:54:e3:74:aa:a1:c6:07:
         76:6a:7b:c2:e5:59:e2:7c:55:f9:27:68:6f:52:e7:16:63:e7:
         0e:7a:08:62:ba:e0:b5:1b:0c:f8:4f:c8:df:82:19:62:49:33:
         e3:3f:c0:d9:78:32:cc:fa:16:fc:b1:bb:d4:f0:df:07:da:02:
         2b:59:76:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:31 2026 by rpki-client