This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a3a2f33362d3336203d3e20323636383039.roa
File:                     323830333a363061303a3a2f33362d3336203d3e20323636383039.roa (raw, json)
Hash identifier:          b2Fbl2Am70qfCn9BNR2EVCPUzFj9COw5kwiMUFan2Bs=
Subject key identifier:   C7:F0:44:19:6B:88:98:4A:8A:59:E7:1C:1E:4F:2E:AA:4A:57:6F:F5
Certificate issuer:       /CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
Certificate serial:       207223C99FB280E65CF1CA3A88F63E91975F13CD
Authority key identifier: 22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a3a2f33362d3336203d3e20323636383039.roa
Signing time:             Mon 10 Nov 2025 13:52:08 +0000
ROA not before:           Mon 10 Nov 2025 13:47:08 +0000
ROA not after:            Mon 09 Nov 2026 13:52:08 +0000
asID:                     266809
IP address blocks:        2803:60a0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:72:23:c9:9f:b2:80:e6:5c:f1:ca:3a:88:f6:3e:91:97:5f:13:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
        Validity
            Not Before: Nov 10 13:47:08 2025 GMT
            Not After : Nov  9 13:52:08 2026 GMT
        Subject: CN=C7F044196B88984A8A59E71C1E4F2EAA4A576FF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:00:cf:d7:e2:7b:9c:5d:a8:91:e2:7b:b1:1f:
                    8e:f5:49:f5:4f:50:42:e2:a7:61:11:a0:07:b4:a2:
                    d6:c8:bf:fb:f4:f6:ec:7b:68:39:01:78:59:c8:ad:
                    56:a0:1b:ca:21:3e:e5:ab:bc:d0:b3:86:91:e7:ec:
                    e6:ee:7c:2d:90:84:4f:bf:13:2a:1b:d4:2a:e4:ba:
                    ac:11:af:f5:ff:eb:f1:c3:4c:46:62:11:2a:0a:6a:
                    a4:9a:4e:74:d8:9e:84:e2:ba:a8:1e:c3:43:c2:ce:
                    77:75:24:88:9d:87:ad:f4:33:83:b5:e1:d4:6e:88:
                    11:1b:37:f7:49:d4:bf:48:7f:8f:b4:ee:07:02:1b:
                    6e:d8:6d:fd:63:1c:db:45:2b:ae:15:fe:4e:f3:d5:
                    4b:a0:c1:dd:03:08:ba:6e:aa:25:47:61:b4:f1:72:
                    5e:18:07:f6:eb:22:0f:7f:86:a1:15:72:65:18:e0:
                    d2:26:c4:03:91:5a:93:f8:a8:61:68:79:d3:59:35:
                    30:74:fa:3e:ce:2d:f4:d1:b8:f8:23:08:0a:b1:6e:
                    d7:fd:dd:66:2a:75:39:9d:07:8b:5d:95:29:79:b0:
                    91:da:7f:6e:38:03:b0:0a:74:bd:dd:f7:d0:1d:cd:
                    66:c2:dc:ca:27:ea:08:4f:70:87:65:ee:6f:a7:9a:
                    01:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F0:44:19:6B:88:98:4A:8A:59:E7:1C:1E:4F:2E:AA:4A:57:6F:F5
            X509v3 Authority Key Identifier:
                keyid:22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/323830333a363061303a3a2f33362d3336203d3e20323636383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:60a0::/36

    Signature Algorithm: sha256WithRSAEncryption
         6e:42:6a:b2:1d:60:8f:69:ba:73:34:bf:6a:f5:c5:d9:19:4f:
         db:32:aa:aa:59:45:d2:fb:70:a3:27:55:d4:a5:68:cb:b0:40:
         51:42:a9:53:49:ee:fd:52:64:6f:14:56:0f:eb:aa:23:e3:60:
         88:ce:2b:7d:9d:69:c1:ee:60:05:f3:81:23:3d:95:e1:c8:fc:
         5d:55:16:bc:04:28:f0:20:b9:ae:3d:ed:f1:8e:33:c5:30:f7:
         c0:c4:90:3d:4e:84:e2:27:3c:1b:c1:6f:3f:a4:3b:4a:9e:d9:
         e4:3a:68:ff:ff:c1:65:d3:ee:74:65:a1:70:cc:ec:e3:56:16:
         9e:21:f8:d9:7b:ce:04:7b:c8:f8:32:81:88:16:fa:6b:0f:cf:
         4e:71:38:ff:00:56:3b:a9:49:e2:9e:b7:84:73:af:6a:48:a7:
         d0:4b:cd:53:cc:ee:7c:fc:6b:0f:a7:b9:f3:ae:a3:02:68:2f:
         08:0d:93:9b:65:e1:52:16:f9:ed:d1:0d:e4:32:0a:f7:a5:f6:
         05:98:64:39:b9:d1:fe:e6:a5:03:c6:3f:e2:1d:c2:3b:72:42:
         2d:82:28:a3:6e:bb:4e:11:fc:8c:f4:f2:fc:e1:66:90:f1:72:
         e4:38:53:ce:4a:99:49:56:62:8a:d1:5f:01:71:a6:2d:c6:5d:
         e0:62:b3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:37:29 2025 by rpki-client