This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/323830333a636332303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a636332303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          +LaOiwbqAgV/yDtaih/Baj97wCa5nlQkPHknImzoAcU=
Subject key identifier:   2B:DA:77:DF:4F:88:33:E0:CE:92:0E:5D:5A:E6:94:5F:D6:CB:E8:6B
Certificate issuer:       /CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
Certificate serial:       735CE36082041BC5D21457673A297996D44F7399
Authority key identifier: DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/323830333a636332303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:31:30 +0000
ROA not before:           Tue 06 Jan 2026 19:26:30 +0000
ROA not after:            Tue 05 Jan 2027 19:31:30 +0000
asID:                     52468
IP address blocks:        2803:cc20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 15:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5c:e3:60:82:04:1b:c5:d2:14:57:67:3a:29:79:96:d4:4f:73:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
        Validity
            Not Before: Jan  6 19:26:30 2026 GMT
            Not After : Jan  5 19:31:30 2027 GMT
        Subject: CN=2BDA77DF4F8833E0CE920E5D5AE6945FD6CBE86B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:69:a4:3f:29:0b:9e:84:8e:c1:69:b7:92:
                    57:2f:3c:37:a9:61:3c:d9:2d:36:91:df:4c:15:33:
                    2b:43:87:0c:af:0a:25:75:58:92:d7:3b:62:95:4f:
                    fd:29:4b:7a:db:4c:de:22:b4:67:90:b7:80:51:87:
                    e3:7b:52:f1:30:91:5f:98:2b:c4:04:59:a7:63:63:
                    85:5b:b3:bf:a2:05:00:90:f8:76:c7:d8:c2:c2:db:
                    50:80:a6:10:71:6d:0a:14:11:f3:25:fc:73:4c:52:
                    5f:3c:c2:f0:f9:c9:4b:b0:28:91:26:b1:eb:4b:07:
                    83:fa:d9:a9:8d:fc:f9:37:3e:82:cc:29:a8:08:73:
                    55:49:15:cc:d6:98:d2:1b:d1:86:b7:06:74:29:8b:
                    d5:9e:53:2b:4a:35:1a:fe:7d:48:53:bf:20:49:50:
                    e7:0c:bb:ef:da:e9:25:27:88:49:7e:74:69:4a:a7:
                    24:d3:60:5f:25:93:77:89:e3:12:5e:4e:32:45:56:
                    88:51:81:2d:f6:07:1a:28:0a:59:a9:2f:f9:62:5c:
                    50:78:8b:58:0e:e2:8c:02:76:8b:80:06:f9:26:0b:
                    90:a0:50:3a:30:26:50:21:16:1f:75:d7:ca:15:6d:
                    a5:aa:e7:60:eb:8b:2a:ea:64:68:25:70:af:83:1a:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DA:77:DF:4F:88:33:E0:CE:92:0E:5D:5A:E6:94:5F:D6:CB:E8:6B
            X509v3 Authority Key Identifier:
                keyid:DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/323830333a636332303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:b1:1b:70:ab:ec:9f:51:25:d5:f7:36:fa:21:d3:ed:01:74:
         3b:84:4a:68:da:c4:27:82:c6:e6:d9:c0:da:ef:36:7c:22:f6:
         66:b0:7d:ea:ab:61:9f:6a:0b:d5:ff:06:a7:0f:7c:51:2c:e6:
         ba:c2:85:5b:33:9f:37:c1:4e:2c:bc:19:32:0d:0d:96:2b:ab:
         aa:aa:46:a6:16:0a:cf:9e:8d:d2:4f:53:31:f9:86:e1:51:fd:
         60:e8:36:5c:ad:ca:98:f3:bc:5e:79:c7:8f:c5:fb:92:14:57:
         ec:80:d1:4f:93:eb:7a:40:d7:a5:6f:ae:80:22:d5:6b:49:10:
         48:cb:64:b7:0a:14:9a:44:b7:53:d7:6c:a7:04:d2:c1:78:e4:
         6c:c4:01:76:4a:f7:f6:87:7e:a5:43:1b:a8:56:b3:3c:ba:c4:
         e9:d2:c4:98:a8:a9:e9:7c:34:e5:b2:e5:c2:c0:4e:2e:5b:f5:
         4e:1d:64:3a:82:6c:ee:f6:2c:71:b9:f1:51:82:d4:92:08:fc:
         f3:f9:db:31:04:e7:db:08:4c:5c:aa:f1:87:d9:46:ec:58:85:
         38:d5:9b:22:5f:48:09:9c:e4:30:6a:4e:12:44:67:23:b8:00:
         d7:76:06:0e:ff:f0:dc:8c:59:ac:3a:16:7c:c1:18:8d:be:ae:
         d2:62:0f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:31 2026 by rpki-client