This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a3a2f33322d3438203d3e20323637393035.roa
File:                     323830333a333636303a3a2f33322d3438203d3e20323637393035.roa (raw, json)
Hash identifier:          h+c5RnOnTUvI5HIGmrw23g/7MLLLYQNt8I/NFe5AMLM=
Subject key identifier:   D4:E7:C8:AA:91:00:3E:F6:53:75:9F:89:53:01:D2:4B:B3:FD:24:45
Certificate issuer:       /CN=5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B
Certificate serial:       4EEC6C9EDFD8D35266780E518A4487FDF7F4E015
Authority key identifier: 5E:22:4F:DA:ED:D5:12:63:58:AF:94:C6:FA:0D:71:8A:C6:EE:1D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a3a2f33322d3438203d3e20323637393035.roa
Signing time:             Thu 06 Nov 2025 02:25:00 +0000
ROA not before:           Thu 06 Nov 2025 02:20:00 +0000
ROA not after:            Thu 05 Nov 2026 02:25:00 +0000
asID:                     267905
IP address blocks:        2803:3660::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 19:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ec:6c:9e:df:d8:d3:52:66:78:0e:51:8a:44:87:fd:f7:f4:e0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B
        Validity
            Not Before: Nov  6 02:20:00 2025 GMT
            Not After : Nov  5 02:25:00 2026 GMT
        Subject: CN=D4E7C8AA91003EF653759F895301D24BB3FD2445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c3:00:90:3f:77:9a:e8:c1:0c:fe:6e:36:18:
                    c4:27:67:9c:7f:3d:b6:b8:66:23:e3:1d:1a:25:e6:
                    10:dc:49:a7:46:f0:94:20:00:9a:2f:a7:c8:65:27:
                    fe:c0:1a:8e:ea:3b:51:04:fd:01:9e:1c:37:79:ba:
                    cf:32:a7:61:f4:c6:02:26:c8:d8:b9:f5:0b:85:a9:
                    26:19:0a:30:e0:96:6c:77:d0:6e:51:53:61:0f:35:
                    47:06:16:5e:12:19:cb:f1:bb:14:5e:72:06:f3:f3:
                    86:12:a5:00:81:51:1e:d4:82:fc:70:ce:98:04:ad:
                    92:eb:61:98:b4:1c:fe:56:89:e7:ae:5b:00:59:59:
                    3d:8a:b5:ea:90:cd:40:06:ef:bd:c4:15:1c:dc:82:
                    c6:7d:79:9e:fe:f4:06:3a:cf:9e:d5:6b:7a:eb:b1:
                    fa:3a:2d:99:cd:9b:d2:52:7c:64:8f:60:80:ac:2d:
                    f3:3f:68:85:69:ea:0e:ea:44:43:da:fd:2d:86:ff:
                    8f:3f:27:ff:f0:b3:4c:f9:d4:88:8a:bc:80:63:7f:
                    d3:32:32:fa:9b:f3:f9:7c:2d:2d:53:8c:73:d9:13:
                    d7:be:26:5f:99:5b:f0:c5:6a:99:62:f1:cb:fd:05:
                    f9:ff:c3:5f:a9:34:87:6e:a0:b2:6c:cc:5a:6d:6a:
                    05:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E7:C8:AA:91:00:3E:F6:53:75:9F:89:53:01:D2:4B:B3:FD:24:45
            X509v3 Authority Key Identifier:
                keyid:5E:22:4F:DA:ED:D5:12:63:58:AF:94:C6:FA:0D:71:8A:C6:EE:1D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E224FDAEDD5126358AF94C6FA0D718AC6EE1D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9A7EDB9ACC6A2C91EA8EF7831512C3C181EA3614012630CBD1C118E19688CE2/0/323830333a333636303a3a2f33322d3438203d3e20323637393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3660::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:24:f4:37:2b:a5:ae:89:12:37:03:06:de:06:0b:e8:34:9d:
         3e:c2:86:61:4d:33:67:da:ca:98:f7:81:dd:88:d8:8d:d2:c6:
         a4:fd:40:48:98:f8:18:dd:22:6a:5e:77:b0:4d:ce:6f:3d:8d:
         4d:08:27:d3:87:24:ea:39:65:52:df:7d:d9:79:a3:b1:b6:a6:
         99:6f:87:5d:d6:af:67:c8:61:c3:7f:2b:4b:f1:82:90:4f:51:
         72:66:14:13:0b:df:f4:0e:d3:b0:f5:2e:19:a6:c8:c1:7c:20:
         9b:7a:33:d9:62:b1:d9:81:89:a5:fa:10:f0:72:52:06:6b:eb:
         ce:25:82:4c:7d:06:f0:8a:c2:3b:79:b1:f7:c2:82:ba:e6:9d:
         bb:00:35:3c:64:86:66:03:77:9c:b4:bd:45:04:9d:ee:9c:d8:
         ff:f9:2a:d7:f2:0d:16:34:4e:f3:73:92:4e:e9:cd:0e:64:d7:
         32:62:7e:db:8b:9e:30:db:0f:0e:35:cf:fc:d3:f4:9d:e8:c5:
         18:d4:9a:ab:1d:18:ba:50:3a:00:3d:8b:67:6b:a6:c3:ad:b0:
         f8:9b:e1:ec:82:ee:06:54:58:6b:fb:2e:d0:e9:76:d6:51:c4:
         54:1a:b8:18:56:ae:3b:95:d5:41:f1:ab:43:34:ba:39:72:44:
         e6:e1:3d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:46:47 2025 by rpki-client