This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a613030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a613030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          w//GrP940Ymk694vgKN8BOmwmv3/aeA7D5dZEUGMHnc=
Subject key identifier:   84:20:FB:1C:73:C0:1E:92:38:1C:CB:6F:C0:8D:C4:67:4D:9D:BC:BF
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       050E9CB0E88FAE20E9F3CC5CEDCB58B0AFDDFD5B
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a613030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 06 Jan 2026 19:20:20 +0000
ROA not before:           Tue 06 Jan 2026 19:15:20 +0000
ROA not after:            Tue 05 Jan 2027 19:20:20 +0000
asID:                     27818
IP address blocks:        2803:3380:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0e:9c:b0:e8:8f:ae:20:e9:f3:cc:5c:ed:cb:58:b0:af:dd:fd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Jan  6 19:15:20 2026 GMT
            Not After : Jan  5 19:20:20 2027 GMT
        Subject: CN=8420FB1C73C01E92381CCB6FC08DC4674D9DBCBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:1e:ff:58:f6:2e:a7:fa:a6:db:f1:39:67:
                    15:ce:19:32:af:bf:0b:1b:8c:42:2a:f5:80:9d:35:
                    0e:d5:cb:6e:25:13:7c:d6:b7:1f:91:af:19:d5:4a:
                    e4:65:9a:94:54:80:08:2d:8d:04:0e:54:a5:a4:fd:
                    2a:a1:ad:3f:1c:56:fb:f0:1f:2a:1d:5f:e3:78:64:
                    96:19:1f:41:31:8f:3d:1f:30:05:4f:47:f8:0d:8a:
                    fa:4e:e9:9b:1e:09:d5:66:02:fa:31:69:aa:af:69:
                    25:c3:a6:cd:a9:c2:ce:a9:91:33:ab:f2:19:2a:1e:
                    82:77:2b:48:6d:35:fb:04:3d:4f:a7:ba:42:b6:f1:
                    6b:10:13:e6:d5:47:34:b3:c4:bb:7c:d5:3c:0a:82:
                    44:af:be:d7:78:a0:3d:8d:59:75:ea:a8:fa:46:8b:
                    20:64:fc:a7:59:ff:ed:9b:e6:e7:97:d8:da:8b:bf:
                    a0:9f:53:33:9b:ab:d6:8d:dd:8d:22:4d:fa:db:2a:
                    93:c4:0a:5f:c7:c8:ca:df:0e:fc:a4:5b:a7:77:80:
                    ba:17:f5:fe:82:13:ec:c9:ce:6c:5b:fb:21:cb:d5:
                    50:95:09:a3:4f:ff:53:5e:a6:33:ee:87:d6:7a:36:
                    cc:b7:7f:9b:35:89:09:58:25:13:cc:7a:b3:95:b5:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:20:FB:1C:73:C0:1E:92:38:1C:CB:6F:C0:8D:C4:67:4D:9D:BC:BF
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a613030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:a3:16:ab:8c:e8:de:de:10:3f:bf:21:be:4c:64:86:a1:e6:
         98:87:4e:e3:bd:7e:68:3e:dc:70:3e:57:a3:25:23:22:9e:ba:
         3e:a7:5e:51:50:ce:ea:02:29:db:51:e8:07:7a:60:da:4c:ac:
         96:f6:b8:3c:36:79:de:d2:9f:b1:e2:c2:e0:4d:b9:76:c1:b8:
         96:0e:07:07:2f:d0:be:89:d3:48:70:97:29:03:30:f4:a1:20:
         56:64:50:db:26:94:ee:61:fc:56:08:08:62:e7:4f:83:5e:96:
         73:31:d2:4d:61:46:9c:2e:dd:10:f5:8d:3a:6d:d7:66:8d:ae:
         2e:76:bb:81:34:61:ae:34:dc:ad:53:67:e4:b8:b1:a5:d6:c1:
         3c:77:e8:22:6f:2e:68:ca:6d:db:67:ae:29:4f:bf:c6:f5:7a:
         b2:08:4e:a1:ee:48:cb:b9:4b:3f:1c:e6:c7:f5:ec:b9:66:11:
         a9:12:7a:69:01:d3:a5:c5:94:38:68:24:af:f9:43:07:75:41:
         e3:65:3d:6f:e9:61:f6:a1:1d:f6:39:f9:0a:30:8e:ca:a1:e8:
         23:cd:b5:61:1b:7c:3d:27:e9:54:c8:ec:77:ce:ed:5f:c5:b3:
         14:3a:c4:8b:7d:70:75:70:f6:67:5a:fa:8b:dd:5f:b3:53:22:
         fd:c1:a0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:27 2026 by rpki-client