This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/323030313a313234383a3a2f33322d3438203d3e2036353033.roa
File:                     323030313a313234383a3a2f33322d3438203d3e2036353033.roa (raw, json)
Hash identifier:          qjC3/a0WjNAuEL25ASxim4EH5qhiJ6jZORIUmj2RMh4=
Subject key identifier:   7D:9C:DB:18:38:CF:D1:E6:EC:5A:42:14:23:4E:D5:01:9A:7A:3E:65
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       431BE4E416BBC5C3FEEDCE9698C762B870820E1D
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/323030313a313234383a3a2f33322d3438203d3e2036353033.roa
Signing time:             Tue 06 Jan 2026 19:45:06 +0000
ROA not before:           Tue 06 Jan 2026 19:40:06 +0000
ROA not after:            Tue 05 Jan 2027 19:45:06 +0000
asID:                     6503
IP address blocks:        2001:1248::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1b:e4:e4:16:bb:c5:c3:fe:ed:ce:96:98:c7:62:b8:70:82:0e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Jan  6 19:40:06 2026 GMT
            Not After : Jan  5 19:45:06 2027 GMT
        Subject: CN=7D9CDB1838CFD1E6EC5A4214234ED5019A7A3E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:bf:74:78:b0:f4:80:20:54:e3:b2:53:68:
                    2c:a4:8e:98:46:b2:60:4e:db:b3:4e:4e:91:b7:95:
                    33:8a:c3:48:66:20:b6:b0:d8:14:e8:9d:45:6b:4a:
                    e7:b3:65:11:9a:11:80:f0:8d:cc:42:a1:88:d2:e1:
                    0f:61:29:95:1e:b2:15:8e:bf:2d:17:a2:78:df:0e:
                    65:a6:f4:57:2f:56:92:a1:2c:6e:88:a8:74:d8:e5:
                    54:98:e3:43:ca:9d:a7:0d:3e:7c:b1:4f:e7:86:53:
                    72:8d:b0:df:c5:19:71:60:a2:60:cf:b2:83:04:df:
                    eb:13:42:fc:3f:98:bf:33:8d:2b:77:a1:08:a2:71:
                    d7:db:ce:75:24:81:c0:6a:b9:a0:66:21:11:97:3e:
                    00:08:9a:d3:a2:c0:64:43:d7:b9:1b:b0:ac:49:27:
                    c0:90:bf:cb:85:51:0f:e4:3c:67:5c:54:1e:ae:cf:
                    6e:be:53:ff:0f:de:7d:fb:af:1d:7b:51:cf:5f:97:
                    30:a1:08:f6:f2:e0:fa:de:fe:e8:42:2b:00:69:a0:
                    b1:bc:81:d5:e5:f4:e7:78:be:b5:09:ba:dd:06:35:
                    ca:a7:ca:90:e7:7b:fe:8c:14:ba:11:76:b3:9f:4d:
                    3d:d0:bf:50:41:ff:2e:89:de:68:10:4e:1b:cb:45:
                    cf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9C:DB:18:38:CF:D1:E6:EC:5A:42:14:23:4E:D5:01:9A:7A:3E:65
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/323030313a313234383a3a2f33322d3438203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1248::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:8e:72:ff:55:4a:79:23:a3:12:45:a7:8c:22:ad:cf:04:a5:
         64:69:a3:34:07:25:39:5e:c2:37:3c:b2:ed:5e:a1:c5:b4:5a:
         a9:16:32:b2:8f:f5:9f:26:6c:1d:ef:8f:4c:53:98:dc:14:f4:
         8e:d3:62:39:12:41:3a:e4:42:71:75:fb:da:70:91:23:47:23:
         ff:5d:f3:c1:ab:d1:85:e3:67:c0:e7:a6:9a:0b:62:31:e1:66:
         fc:07:0a:6a:21:8a:1d:12:2d:f8:8c:28:96:3d:e8:e1:b9:14:
         18:a9:ed:f2:41:14:2c:93:b7:20:54:d2:fb:2f:67:8c:a1:1c:
         9e:f8:e3:85:bd:a1:28:2e:c4:01:44:69:e0:8c:30:96:b8:82:
         99:2c:b5:96:c9:27:63:c5:97:44:dc:4e:89:9a:cc:15:aa:3e:
         02:53:03:95:28:d7:b1:a8:a1:d0:bf:84:a1:f3:72:a9:64:93:
         f6:6b:8b:aa:e7:8a:ce:4a:95:2a:bd:ff:75:b1:17:40:3f:27:
         7f:2f:fb:9c:4d:e0:c0:14:d0:d0:05:1e:ba:fb:40:e4:0d:b8:
         e2:5f:1d:9a:91:71:18:dc:05:c6:9b:b7:49:ac:52:de:c2:70:
         a5:25:4a:a3:5e:6e:bf:b4:6d:af:a7:59:e0:10:88:b5:79:da:
         f2:c8:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:09 2026 by rpki-client