This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e20323033.roa
File:                     323830303a643330303a3a2f32392d3438203d3e20323033.roa (raw, json)
Hash identifier:          4F2EYlrtzOOCSUBsUKcMPWKYoorCRPbIxt+bEd9e7YM=
Subject key identifier:   73:16:03:7E:6D:0A:40:B2:BD:9B:15:BD:02:7A:8D:1C:3E:A6:10:60
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       6CBD6F5E053E6500E9C050B8288B80E910AC0A1A
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e20323033.roa
Signing time:             Tue 06 Jan 2026 19:30:34 +0000
ROA not before:           Tue 06 Jan 2026 19:25:34 +0000
ROA not after:            Tue 05 Jan 2027 19:30:34 +0000
asID:                     203
IP address blocks:        2800:d300::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bd:6f:5e:05:3e:65:00:e9:c0:50:b8:28:8b:80:e9:10:ac:0a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Jan  6 19:25:34 2026 GMT
            Not After : Jan  5 19:30:34 2027 GMT
        Subject: CN=7316037E6D0A40B2BD9B15BD027A8D1C3EA61060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8c:6c:5a:68:e0:4a:58:62:b0:0e:a0:7c:21:
                    c0:87:80:89:4e:32:41:04:2a:f7:bc:b4:05:b1:6a:
                    03:43:ed:20:9a:c1:0f:a9:a1:32:22:3b:bd:86:4f:
                    eb:b6:39:24:e7:3f:3c:75:06:ec:16:b0:96:6d:6f:
                    e7:11:fe:9e:16:8f:72:ae:22:56:4e:86:a7:0c:a2:
                    34:ad:5e:f2:3b:84:5f:4d:a5:be:a1:ce:19:d7:07:
                    61:71:5b:00:20:c5:89:e2:d0:41:bb:1f:8d:67:a7:
                    71:ee:30:f3:a0:e8:29:3d:0e:38:71:41:75:3a:c0:
                    ff:b1:58:d1:0f:f8:63:53:94:eb:cc:38:78:fd:f8:
                    e4:8d:94:d6:fc:20:e4:b0:07:00:5f:a7:eb:70:a6:
                    eb:a9:04:73:23:20:c7:72:44:01:2e:f4:a2:ec:8f:
                    cf:b8:f1:11:af:66:3e:3b:cb:71:94:d3:d7:42:b9:
                    3d:d0:e6:5f:75:31:db:e2:bc:2c:bb:17:a3:f8:e9:
                    06:ce:7b:cb:6b:65:d1:3d:5d:75:84:0e:10:8f:ae:
                    63:7a:1b:54:f3:f9:6b:78:0b:6a:c2:ac:52:33:7b:
                    52:9e:7e:3e:ed:0f:df:48:38:89:3f:4c:91:e5:58:
                    ec:d0:51:c7:08:f1:10:98:47:7e:8d:75:2c:b9:78:
                    84:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:16:03:7E:6D:0A:40:B2:BD:9B:15:BD:02:7A:8D:1C:3E:A6:10:60
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:d300::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:e0:40:7e:9f:60:79:be:fc:84:a7:50:90:04:4e:4e:96:
         e4:ff:b7:2c:fa:ac:66:5e:5e:4b:98:ed:d0:a5:12:d2:f8:26:
         9d:e8:85:17:7d:d4:85:44:5f:bc:e1:18:98:9e:c6:4a:66:de:
         23:bc:2d:3e:c0:df:03:5e:6a:9c:3a:7b:53:0d:d5:53:60:b7:
         4b:c2:86:07:2e:4f:62:8d:6d:85:db:36:f6:3c:3a:5e:e9:ea:
         25:a1:5e:1d:d9:21:30:22:2a:aa:a1:9c:c6:59:ab:7a:b1:e6:
         b7:0e:67:97:b3:63:26:b9:16:dd:c2:82:b0:93:8b:d9:52:99:
         45:98:d8:82:3b:4c:69:9f:91:b6:81:85:ec:14:f2:45:32:3d:
         c6:9b:2c:4a:8f:41:2b:73:d5:9f:d9:a7:99:09:3c:5b:5d:36:
         87:e5:e8:b8:f4:7a:9a:ae:b6:dc:a1:bd:9d:eb:e8:56:bd:fb:
         6a:5c:22:02:e6:2f:20:6b:29:76:fe:9d:23:ff:2c:75:59:31:
         3e:e3:22:20:81:bd:5a:1a:a3:89:46:88:71:a6:ac:98:16:be:
         47:d7:37:ff:2e:3a:a1:01:cd:bd:22:9c:72:c7:67:77:ca:dd:
         c4:bd:44:6b:e0:be:15:b1:08:68:6d:b3:11:8b:dc:ae:86:40:
         7c:67:0f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:37:32 2026 by rpki-client