This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a383030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a383030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          QSuVgPkvY9K7VI+cx645mjS74T5cBR/okwJ4xXXzQFQ=
Subject key identifier:   12:8E:CE:C6:83:73:78:DB:25:5C:6E:9A:75:B1:D5:B9:1D:BB:61:CB
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       14E00DFCF4700E51BE5E7218DEF88CB129643D16
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a383030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 06 Jan 2026 19:20:27 +0000
ROA not before:           Tue 06 Jan 2026 19:15:27 +0000
ROA not after:            Tue 05 Jan 2027 19:20:27 +0000
asID:                     27818
IP address blocks:        2803:3380:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e0:0d:fc:f4:70:0e:51:be:5e:72:18:de:f8:8c:b1:29:64:3d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Jan  6 19:15:27 2026 GMT
            Not After : Jan  5 19:20:27 2027 GMT
        Subject: CN=128ECEC6837378DB255C6E9A75B1D5B91DBB61CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:54:bf:32:09:76:73:e0:fd:53:ae:74:83:
                    1f:d0:35:56:38:5e:b5:78:c6:67:11:1f:33:c7:f2:
                    f5:42:6e:30:71:4b:eb:0d:3b:7b:1b:fd:57:da:43:
                    1e:bb:65:a2:4f:d7:d6:4d:64:c2:ec:be:5b:43:4f:
                    7d:3a:cb:ed:7b:b0:5d:47:eb:1d:c1:57:76:ea:87:
                    a3:3e:25:9c:46:3a:ea:78:0c:f5:22:42:6d:2e:51:
                    0e:80:27:3d:00:b6:77:3f:2a:88:c2:2d:e9:ef:90:
                    68:69:8a:1c:7e:86:67:4b:6f:f6:61:83:ef:f5:13:
                    46:c4:eb:a1:fe:3e:63:95:ca:05:78:07:bc:7f:c9:
                    22:cd:42:9d:bd:2c:af:d4:59:a7:e3:56:d8:ae:45:
                    34:fd:e4:f0:bb:b4:f6:c0:9c:c1:43:31:68:64:1a:
                    40:b2:27:cb:9a:b3:86:e6:1b:fb:59:f5:79:ff:b3:
                    cf:a1:e6:09:e5:f5:fd:91:83:dd:0b:1f:bb:04:bb:
                    7f:43:4b:ba:67:49:e6:38:fe:cb:27:d2:db:60:79:
                    aa:45:83:54:87:8f:7f:81:2f:6f:d5:db:12:43:94:
                    6d:be:e2:e9:3e:79:60:9d:33:d2:fb:ee:46:f7:f9:
                    6c:49:bc:a7:83:dc:2d:2a:c4:09:5e:96:4f:ef:bd:
                    17:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8E:CE:C6:83:73:78:DB:25:5C:6E:9A:75:B1:D5:B9:1D:BB:61:CB
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a383030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5f:df:6a:a8:bc:c7:a3:53:7e:9d:dd:f8:d3:f6:8b:b9:dd:54:
         47:0e:c8:77:8a:a1:88:d0:d2:c1:62:0f:86:49:c9:5e:97:61:
         db:5e:76:ef:61:56:f6:30:b1:28:53:8f:8d:fe:68:f9:f0:58:
         ee:e6:7a:47:3a:16:66:97:5a:b8:58:13:a4:1d:8b:67:f3:19:
         cd:e9:dc:e2:df:c9:a8:da:2e:aa:b3:74:85:8c:1b:38:16:5d:
         5c:57:f4:ff:ee:a3:19:53:c8:d5:17:13:92:48:35:3f:9f:fe:
         17:2b:53:b8:be:35:f1:b7:7f:73:95:25:7d:83:5b:12:8f:dc:
         5d:f5:21:d0:8b:91:1c:ae:09:70:c2:bf:a8:9b:de:74:ef:28:
         7f:67:fa:be:a6:99:61:17:35:0d:e6:ef:19:76:58:8a:f5:8b:
         70:c5:d2:a2:08:f9:07:ae:e9:6c:6f:17:ae:a9:9d:a5:98:72:
         0c:db:13:bd:4a:db:b3:23:6b:c6:94:57:a4:ca:f7:2b:a1:c2:
         33:69:dc:7c:f6:96:a6:54:f3:e8:25:c4:a8:45:e7:1d:29:3b:
         aa:60:60:ea:73:a3:92:d8:74:1d:79:b3:ad:75:62:72:6e:43:
         3c:c5:09:4a:6e:58:9c:a4:ba:1d:fc:2d:bc:9c:3c:b1:24:1d:
         c4:69:b4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:27 2026 by rpki-client