This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a363030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a363030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          FPllODAqZEFqsJ1QmIrdr3JCfY2Y3bvQPbuPMv3yjpc=
Subject key identifier:   AE:B8:91:0F:69:2E:53:99:17:A6:91:4D:46:C3:12:28:56:75:FC:EB
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       0C56BADFFAC5BC3372E626125042BA26F4D83ED5
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a363030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 06 Jan 2026 19:20:23 +0000
ROA not before:           Tue 06 Jan 2026 19:15:23 +0000
ROA not after:            Tue 05 Jan 2027 19:20:23 +0000
asID:                     27818
IP address blocks:        2803:3380:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:56:ba:df:fa:c5:bc:33:72:e6:26:12:50:42:ba:26:f4:d8:3e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Jan  6 19:15:23 2026 GMT
            Not After : Jan  5 19:20:23 2027 GMT
        Subject: CN=AEB8910F692E539917A6914D46C312285675FCEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2c:63:01:7f:0a:dd:29:fa:45:8d:ad:e7:8e:
                    46:c2:f9:f3:3a:f9:d6:bf:4c:c5:6d:c6:be:9a:e8:
                    7d:6d:01:44:25:20:a5:70:4d:f0:29:ba:8a:2e:62:
                    ed:b8:e9:22:45:fa:eb:03:f3:14:df:1a:26:87:c9:
                    60:a2:c6:b6:f2:72:1e:f6:62:4b:aa:29:af:05:a6:
                    7a:33:1f:8d:f8:07:a2:db:85:e2:7b:a5:1e:36:26:
                    f2:3f:ac:58:d7:83:52:62:e7:08:b9:f1:62:4e:f4:
                    fa:62:58:21:eb:1f:61:7d:fa:71:a4:1b:9c:d6:50:
                    b9:f8:69:33:75:58:a8:16:97:b0:07:6f:cb:2e:2d:
                    26:b2:b0:dc:d5:01:c1:ee:12:29:b9:a3:6a:07:0f:
                    89:47:d7:11:f5:26:24:c0:98:cd:fc:11:02:5a:ed:
                    af:a4:0f:40:5b:bb:22:34:ea:b0:b4:4b:de:9c:4a:
                    3d:8a:1a:ca:41:7f:cd:75:f8:d7:f3:58:fc:44:48:
                    35:66:ff:00:82:df:d1:86:42:78:ac:3a:6d:2e:dc:
                    79:04:1a:f1:63:01:9d:36:42:7b:a8:5b:7a:3e:e3:
                    dc:17:8c:8a:be:96:cd:db:10:eb:2b:62:3a:c6:b3:
                    83:12:b1:c4:fa:4a:d2:c5:95:bb:b4:5d:ac:56:6b:
                    0a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B8:91:0F:69:2E:53:99:17:A6:91:4D:46:C3:12:28:56:75:FC:EB
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a363030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b9:c3:c1:e1:19:c9:f1:11:3c:79:f4:76:13:30:27:2e:be:18:
         c7:e0:9e:1b:92:3e:f5:b1:7f:d5:1e:c2:51:bf:6a:69:3c:e9:
         fa:a4:2b:04:f5:b9:49:2e:da:da:e3:73:24:bc:1c:7c:c9:ce:
         ce:91:da:69:19:9a:af:ea:5e:b6:70:ca:f3:50:de:76:a5:3c:
         9a:f7:73:71:c0:64:e4:d7:06:e7:99:5e:57:e3:38:6b:42:e4:
         14:b7:43:18:c8:55:e1:6e:de:f9:d0:16:46:c3:3a:1e:0e:21:
         bd:02:c9:6c:44:5f:6e:4c:9e:08:58:c0:a8:4f:73:1c:f0:d4:
         c6:fb:2d:66:01:d9:7d:96:61:39:12:54:df:b8:00:8c:89:ba:
         16:86:f5:a5:e3:7a:6b:d3:66:8b:d6:7a:b4:e9:5a:07:f0:b5:
         03:f7:f0:aa:1d:f4:e6:29:62:d0:50:e2:eb:80:18:69:d9:dc:
         61:f3:35:f4:10:ef:6d:b4:b4:af:c9:2e:a3:71:48:27:a6:04:
         19:1f:8b:20:e5:18:60:c8:40:09:ad:60:0f:17:d6:52:58:9d:
         11:11:67:c2:52:6e:f4:79:d1:5a:04:f1:a2:31:7d:8c:4f:cc:
         f0:e3:08:bd:a8:23:1e:2f:f1:0b:5b:63:0e:5f:0a:9f:42:2f:
         48:c1:f3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:29 2026 by rpki-client