This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          L2tLhAox+CZHNQZzv5lQX/8HquUm9O3zgC4vnPK+VGw=
Subject key identifier:   27:D9:3D:25:A2:C3:7C:D3:2A:6B:48:D0:8C:C6:72:2F:29:09:F2:16
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       6E25ED0EA3268D7E7A8B6D00580D9E1C807F8214
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 06 Jan 2026 19:20:24 +0000
ROA not before:           Tue 06 Jan 2026 19:15:24 +0000
ROA not after:            Tue 05 Jan 2027 19:20:24 +0000
asID:                     27818
IP address blocks:        2803:3380:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:25:ed:0e:a3:26:8d:7e:7a:8b:6d:00:58:0d:9e:1c:80:7f:82:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Jan  6 19:15:24 2026 GMT
            Not After : Jan  5 19:20:24 2027 GMT
        Subject: CN=27D93D25A2C37CD32A6B48D08CC6722F2909F216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:79:79:ec:8c:b5:9f:44:6f:b4:8a:c7:ce:f7:
                    eb:bc:4d:5f:ed:4b:77:26:91:92:8e:1d:b0:4a:c6:
                    e7:cc:07:7e:34:db:0f:1f:a6:7e:8a:a8:c0:64:b4:
                    77:5b:5e:6d:c2:35:d6:61:27:bb:08:51:75:1c:cd:
                    f2:78:f2:e7:66:c3:94:9a:d4:af:e7:3f:36:7b:f0:
                    8f:95:ce:e4:78:04:69:53:a8:51:37:ca:86:12:70:
                    a9:0a:25:b7:8c:46:7b:e0:a5:e3:17:05:0e:30:b7:
                    7c:0c:ad:7a:b7:db:ff:b7:b4:1a:6c:ea:56:96:ce:
                    0f:f5:2e:7c:41:b1:0f:78:12:52:d6:a7:2e:c0:a9:
                    d0:99:1a:f2:cd:36:31:2e:05:5e:40:5e:c6:0a:34:
                    c4:47:89:72:d8:ad:2e:16:44:5f:ee:f4:7e:73:91:
                    bc:67:1f:ee:b2:ae:6c:74:96:e8:2a:89:0f:d6:5f:
                    46:d5:b4:26:46:80:cf:3f:7a:49:a2:4a:cc:5a:b9:
                    3b:e7:d9:84:0b:8a:ab:7c:9f:d7:a6:bb:ef:d8:ae:
                    0e:97:b7:93:9c:32:df:a3:21:3d:44:7e:db:8d:24:
                    31:88:27:df:bd:0c:48:34:76:dd:4b:29:ac:3b:86:
                    89:80:c7:d4:e7:7e:9e:1d:f7:ae:70:d9:0f:79:9e:
                    76:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D9:3D:25:A2:C3:7C:D3:2A:6B:48:D0:8C:C6:72:2F:29:09:F2:16
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a663030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:78:e8:58:ff:15:cd:29:b7:5f:7e:4b:c2:5a:c8:8b:61:07:
         7f:a8:0b:8f:43:22:c6:2b:76:d1:b9:68:f1:5b:44:59:59:de:
         95:6e:4e:22:19:9f:f2:14:ee:7e:e5:76:24:ad:20:1e:47:d0:
         c7:fe:d3:b2:47:16:db:10:f7:46:b6:9a:16:09:bf:2f:57:80:
         d7:9c:83:4b:53:f0:ac:57:56:9b:e7:49:14:bd:17:c1:03:1f:
         ed:79:bb:fb:2a:17:c8:2e:02:de:31:7a:1d:3b:67:5f:55:ad:
         6d:00:54:cf:21:71:c1:8c:b0:77:d0:da:7a:f8:0a:f4:fb:2f:
         64:3e:ba:5b:16:02:26:5e:b6:6c:89:9e:aa:00:7a:e1:71:e2:
         53:e6:6e:70:46:76:ef:06:10:59:65:91:97:d8:ae:3f:44:13:
         6e:b2:af:95:8e:2a:8c:6e:97:23:16:76:6c:3e:b3:d0:68:14:
         83:82:00:5d:2a:39:48:71:dd:d8:63:13:b0:8d:31:bd:42:42:
         2f:d7:09:31:ef:bf:d8:28:a6:85:21:d8:93:9d:34:a9:82:cb:
         e3:83:9e:2d:7b:d8:4a:df:dd:cc:b5:29:8a:11:c3:ae:fc:00:
         da:bf:82:77:93:61:af:9e:d7:74:f9:02:29:40:cb:61:03:71:
         76:c2:b9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:26 2026 by rpki-client