This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/323830333a3938303a3a2f33322d3332203d3e203233343536.roa
File:                     323830333a3938303a3a2f33322d3332203d3e203233343536.roa (raw, json)
Hash identifier:          8ZKPmM/djHN4WPbF0iocLQSHf7vTmoN70J6dBIq+VW4=
Subject key identifier:   6E:A4:E6:ED:B8:41:DC:E2:07:E5:D9:45:F1:6D:FB:97:41:47:75:C9
Certificate issuer:       /CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B
Certificate serial:       10CCEF27D4AEBA039ACDC8695A0766D6664B3B85
Authority key identifier: A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/323830333a3938303a3a2f33322d3332203d3e203233343536.roa
Signing time:             Tue 06 Jan 2026 19:11:02 +0000
ROA not before:           Tue 06 Jan 2026 19:06:02 +0000
ROA not after:            Tue 05 Jan 2027 19:11:02 +0000
asID:                     23456
IP address blocks:        2803:980::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 13:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:cc:ef:27:d4:ae:ba:03:9a:cd:c8:69:5a:07:66:d6:66:4b:3b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B
        Validity
            Not Before: Jan  6 19:06:02 2026 GMT
            Not After : Jan  5 19:11:02 2027 GMT
        Subject: CN=6EA4E6EDB841DCE207E5D945F16DFB97414775C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:0c:a4:c4:3f:b2:d4:e4:20:b8:56:4b:c3:
                    6a:cc:e7:db:a8:d8:58:97:83:d7:3b:b6:e3:78:3a:
                    10:6e:b4:fd:1b:3a:2f:88:2e:29:96:d0:47:12:c0:
                    e1:e9:de:db:c4:a9:6c:0a:de:b0:7c:85:ce:27:46:
                    30:e0:9e:29:2b:af:4d:c1:d8:5b:20:60:33:da:3b:
                    60:9f:ad:9a:51:6c:51:8c:ea:f2:35:76:16:54:5a:
                    4b:e8:61:00:4c:d9:c9:28:87:20:f3:32:2a:60:fc:
                    46:07:d1:d0:54:bc:00:7f:9e:ae:86:af:35:9d:cf:
                    1c:ab:f9:b8:02:c0:58:b3:7b:bb:d9:0d:33:9f:4e:
                    df:a4:a6:12:6f:94:2a:7d:06:53:11:d9:0a:95:b9:
                    ae:b7:fd:b7:11:de:b5:d5:1f:b6:23:f4:21:79:58:
                    d5:8b:27:d5:00:05:0e:f2:50:08:aa:f9:9f:79:73:
                    39:0b:bd:95:c1:cf:cc:0f:43:89:d6:8f:9d:39:0e:
                    bd:23:a5:f5:dd:c8:3a:fd:a6:bd:ef:8b:da:d3:70:
                    4d:5f:6c:63:8e:63:1b:98:95:7c:d9:72:85:36:44:
                    a3:1c:ec:31:64:9c:1f:11:51:20:e8:2f:cd:d1:d3:
                    18:84:96:dd:65:a1:c3:27:36:22:16:b0:e1:57:8c:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A4:E6:ED:B8:41:DC:E2:07:E5:D9:45:F1:6D:FB:97:41:47:75:C9
            X509v3 Authority Key Identifier:
                keyid:A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/323830333a3938303a3a2f33322d3332203d3e203233343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:980::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:e1:d1:e2:ab:c6:0a:e4:6e:05:8e:d4:94:01:81:ac:ed:87:
         97:b1:a5:ca:88:6c:ab:4f:63:82:31:3a:31:30:54:d2:e7:a4:
         41:49:48:62:46:3a:3f:3d:25:cb:e0:2b:1d:36:7f:a4:10:6b:
         2c:6c:d2:93:ea:04:a2:b7:73:e7:25:9d:a3:89:a4:af:e6:7c:
         3e:27:61:43:7d:7a:30:af:5d:6c:5f:f1:d3:4b:e3:70:c6:29:
         d5:4c:ae:fb:27:48:2d:03:e4:e4:41:13:e5:0f:fc:45:cd:5d:
         58:f3:0d:a0:42:99:27:da:13:96:b4:3e:d7:c0:b7:0a:bc:18:
         2c:fe:ab:39:4a:9f:d9:96:56:45:0e:51:03:d1:30:d7:46:e7:
         89:18:45:d7:ac:89:7b:9b:59:15:3a:1e:40:0d:84:7c:c2:b8:
         0f:6d:a5:d1:75:c6:45:0f:12:75:99:75:48:06:e9:be:0a:b9:
         d5:2d:05:97:fc:07:00:5c:f1:9e:ad:19:a6:18:65:a8:1c:72:
         27:fe:d4:34:1e:d9:95:dd:63:4f:36:10:47:9e:63:79:7c:82:
         40:aa:a6:2a:e7:6b:46:fd:b1:a1:45:b8:5e:7e:cb:66:ad:ea:
         44:a9:5e:63:1f:f3:a2:31:d8:19:fd:23:bb:f6:8e:82:9f:6c:
         f0:c2:32:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:00:33 2026 by rpki-client