This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3530303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a3530303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          MdvXtn6KjB1Bz+w4mg1m6jeNUzMK7TdBoVnuJOKex8g=
Subject key identifier:   0E:BC:DC:0E:50:B8:B0:A8:6A:19:96:D3:4B:5F:1A:EF:77:69:23:B1
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       2CB7898ED419052757A3CAE03B9A1030D3EF04AF
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3530303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Tue 06 Jan 2026 19:23:11 +0000
ROA not before:           Tue 06 Jan 2026 19:18:11 +0000
ROA not after:            Tue 05 Jan 2027 19:23:11 +0000
asID:                     272869
IP address blocks:        2803:7290:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b7:89:8e:d4:19:05:27:57:a3:ca:e0:3b:9a:10:30:d3:ef:04:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Jan  6 19:18:11 2026 GMT
            Not After : Jan  5 19:23:11 2027 GMT
        Subject: CN=0EBCDC0E50B8B0A86A1996D34B5F1AEF776923B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:e4:59:50:80:45:74:58:ca:3a:7c:c6:b6:
                    93:5b:16:6f:0b:57:b6:b2:37:a6:06:54:1b:4e:0e:
                    6b:26:c5:b4:88:45:92:61:b5:5e:28:73:dd:61:6f:
                    52:83:4d:db:0c:30:db:64:3c:58:b4:bf:e5:9e:a6:
                    53:0a:d6:dd:cf:1e:d4:55:c3:b6:ed:b0:c6:18:5d:
                    0e:9f:28:0e:4e:0d:21:2c:d2:04:3b:71:fb:ab:a7:
                    0a:fb:08:0d:90:22:e0:69:7e:63:8e:5b:0f:96:f8:
                    3c:22:76:f5:75:24:65:18:72:73:01:5e:11:c4:2c:
                    75:a0:ce:53:94:84:cc:a2:74:ad:e5:37:cc:8f:7a:
                    e1:9c:65:d4:57:4e:7a:c5:21:13:6e:fc:28:0b:27:
                    72:dd:a4:56:21:b6:15:b8:15:fe:a2:70:b1:30:e0:
                    2f:ce:ea:fb:2d:1b:24:17:8e:6a:3a:1e:09:df:f8:
                    cd:8f:c3:c9:2f:26:30:6c:20:e5:f7:24:31:2f:a5:
                    8b:6d:ef:b8:d9:f1:45:76:3a:c8:7c:39:a9:ed:a1:
                    32:b4:8b:1e:4e:35:34:6d:00:d7:f8:1a:95:80:04:
                    8a:03:cf:e8:c9:a9:be:3c:50:68:98:11:c6:70:2e:
                    1d:d5:88:cd:03:2b:bd:5e:bf:61:0e:01:dc:e2:0a:
                    43:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BC:DC:0E:50:B8:B0:A8:6A:19:96:D3:4B:5F:1A:EF:77:69:23:B1
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3530303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:8b:49:5e:5b:f0:e2:86:d1:d9:73:f5:a2:cf:13:68:e1:8f:
         24:77:86:89:d9:95:55:df:9d:c6:fd:cc:d2:59:22:5c:6c:ef:
         3a:3d:39:99:95:6f:90:ca:3e:29:e8:80:4c:d6:50:20:1f:2e:
         d3:cf:41:e3:4b:77:c8:b2:10:37:ac:d0:cc:fe:c8:a8:9a:40:
         d6:6d:0b:76:c4:4e:1f:46:c1:04:73:65:89:55:97:77:10:c2:
         3a:0d:43:90:d2:51:8e:ee:c7:33:85:98:54:f3:47:74:7e:9e:
         20:56:98:f1:cb:13:12:8a:b1:96:d0:1e:3a:67:bb:90:8f:20:
         9c:14:8b:5c:31:ea:70:1d:49:82:52:88:07:68:68:1d:4f:b0:
         b4:cc:0d:2d:05:a3:84:65:1c:e2:3d:5b:bb:40:22:8f:1e:a8:
         bb:d5:da:bf:13:70:7b:b7:e9:ba:cc:5b:d2:64:cd:47:81:e0:
         6f:82:a8:6f:c7:47:fb:05:3b:2c:cf:66:39:5d:cd:a4:8a:2d:
         f2:ac:b0:4b:81:fa:a4:55:93:24:ab:91:a8:92:ac:59:41:5e:
         9c:c9:00:fa:aa:2b:5a:18:54:99:dc:6f:8f:f2:25:07:8f:1a:
         68:09:3d:db:00:79:71:6d:99:de:ed:9e:21:4d:43:ad:19:8a:
         bf:29:9e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:00:37 2026 by rpki-client