This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a383231303a3a2f34342d3438203d3e203532343638.roa
File:                     323830333a343538303a383231303a3a2f34342d3438203d3e203532343638.roa (raw, json)
Hash identifier:          OHcQ4XEVwGnSQ/dnMyQYP2Yp8e/cRtGxXYJGdaylEJU=
Subject key identifier:   EF:68:AE:24:0E:F2:36:46:04:06:17:2E:F4:4E:A6:32:1C:DF:A8:37
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       2BE34910DEF43C3C95B40F144042DC164E4522CF
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a383231303a3a2f34342d3438203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:28:03 +0000
ROA not before:           Tue 06 Jan 2026 19:23:03 +0000
ROA not after:            Tue 05 Jan 2027 19:28:03 +0000
asID:                     52468
IP address blocks:        2803:4580:8210::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e3:49:10:de:f4:3c:3c:95:b4:0f:14:40:42:dc:16:4e:45:22:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Jan  6 19:23:03 2026 GMT
            Not After : Jan  5 19:28:03 2027 GMT
        Subject: CN=EF68AE240EF236460406172EF44EA6321CDFA837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:be:c5:a7:a0:ec:f3:e4:36:1d:b4:c7:8f:
                    b5:f3:b2:f9:4f:02:18:c7:2b:ca:14:64:b1:0d:18:
                    9a:42:2d:9b:1a:5c:37:6a:1a:f6:f3:c9:ef:81:d6:
                    b8:dd:a4:58:d3:14:83:a3:c2:10:a2:d5:ee:ed:a0:
                    72:14:81:40:82:04:b1:67:0e:95:59:2b:77:7d:28:
                    bc:36:53:78:c5:56:9c:ad:6c:c7:e9:4b:8f:9c:1d:
                    71:f4:c6:bf:75:03:4e:bc:ca:80:d1:d3:22:27:50:
                    f7:08:eb:77:61:bc:1f:3a:94:74:f2:53:b8:9e:18:
                    60:40:04:2e:05:68:4b:e7:34:5b:9f:7f:8e:fb:28:
                    93:88:3b:c7:5a:62:14:0a:a6:34:bb:38:8c:bf:a1:
                    d7:97:bf:3f:c5:cf:27:d7:ab:1a:65:af:9c:19:fc:
                    04:d6:30:e8:15:a0:0c:15:82:48:7a:e5:a2:53:b6:
                    b0:bb:38:28:a4:3e:de:e0:8b:11:e9:88:4e:90:7b:
                    6c:c8:83:e9:05:bf:c4:6d:0c:72:05:2e:0d:b2:c0:
                    07:8f:15:3e:1d:53:e2:95:24:39:90:34:b4:a8:16:
                    b3:64:20:f5:a5:25:bd:fc:ed:f8:a6:94:15:c1:20:
                    01:8a:93:6c:a5:77:78:aa:e0:74:1f:82:b6:51:37:
                    48:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:68:AE:24:0E:F2:36:46:04:06:17:2E:F4:4E:A6:32:1C:DF:A8:37
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a383231303a3a2f34342d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4580:8210::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:e3:60:93:22:ee:1e:0e:0d:c1:ca:e9:ab:25:92:ab:70:a6:
         f9:ed:42:c2:9a:b3:d5:cb:fd:cc:4b:ac:0d:67:41:d5:53:e0:
         2d:38:38:7d:f0:fe:10:e3:bd:b6:57:a7:90:af:52:91:7d:72:
         6b:56:e1:44:5a:c2:a5:a0:27:7a:f1:99:75:9c:27:a3:28:04:
         ee:96:c3:65:76:6e:f6:8e:48:68:de:ef:f1:16:df:0c:42:87:
         81:90:11:de:4c:f7:6e:94:d9:4f:0b:fe:09:60:ce:12:8f:97:
         e5:07:58:41:e2:3f:bd:1f:a1:11:da:30:f2:7e:a7:f5:cf:47:
         fd:9a:f9:88:2c:72:ce:14:74:16:b1:a0:76:f2:b0:d9:35:5a:
         dd:4c:f5:71:a4:23:d4:a8:87:df:d7:07:98:23:54:58:9d:e7:
         e1:78:8e:dc:ca:ef:6d:5c:88:aa:c7:be:88:1d:5f:56:1b:6a:
         ab:c7:c2:f3:02:9b:7e:c0:18:29:24:89:91:3c:ae:95:7f:4e:
         2c:e5:13:39:8a:8f:b9:fd:ba:e8:de:a0:5e:03:6d:d8:8c:6f:
         42:5e:02:d9:ac:9c:25:1c:59:18:a1:c0:57:44:91:ad:b8:83:
         ef:da:8f:6d:fb:89:84:96:47:61:99:b8:45:18:dc:d9:95:40:
         7d:ac:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:40:42 2026 by rpki-client