This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a393130303a3a2f34302d3438203d3e203532343638.roa
File:                     323830333a343538303a393130303a3a2f34302d3438203d3e203532343638.roa (raw, json)
Hash identifier:          D9tbNuEJ/J1H+mpiWkNmWzHq+Urp5yl1glMtjcA11/w=
Subject key identifier:   AD:DC:74:51:AA:C2:54:C4:75:6F:70:F2:63:27:E9:D5:51:47:AD:D2
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       28C96400B5BC911063B52B992C55CFB289A34165
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a393130303a3a2f34302d3438203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:28:03 +0000
ROA not before:           Tue 06 Jan 2026 19:23:03 +0000
ROA not after:            Tue 05 Jan 2027 19:28:03 +0000
asID:                     52468
IP address blocks:        2803:4580:9100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c9:64:00:b5:bc:91:10:63:b5:2b:99:2c:55:cf:b2:89:a3:41:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Jan  6 19:23:03 2026 GMT
            Not After : Jan  5 19:28:03 2027 GMT
        Subject: CN=ADDC7451AAC254C4756F70F26327E9D55147ADD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:75:99:ed:f6:be:1b:0c:a7:04:7d:a8:bf:
                    48:ec:74:68:a2:95:04:2f:10:51:06:c6:4c:17:a4:
                    0b:65:10:72:51:1c:79:69:1e:cf:05:37:26:73:79:
                    a6:08:df:17:35:c6:3c:4a:9d:1e:18:28:5f:54:48:
                    da:3b:60:32:c4:9b:dd:1a:72:63:37:c0:3f:f1:09:
                    47:3f:47:a5:c9:0b:c1:5d:d9:03:6e:4f:c1:97:d7:
                    6c:90:1c:a1:9f:3e:b6:30:a7:d1:d6:0d:a5:fb:79:
                    27:21:88:56:10:8f:e3:1a:ba:05:a6:b6:b1:9c:ac:
                    8a:ca:ac:df:5a:61:0d:e5:8c:31:aa:a6:71:11:66:
                    95:c5:54:d9:e0:14:ca:02:3a:95:53:65:ec:23:07:
                    f7:79:5d:1d:c0:d3:7f:a8:53:fd:bf:a3:f0:0a:d2:
                    3c:34:cd:3c:1e:46:2e:f6:ca:d7:fa:e8:a9:f9:fa:
                    21:03:a6:7f:8e:ba:da:08:24:45:ed:80:46:1e:4a:
                    bd:84:1e:76:90:ab:3b:7c:a9:c9:b1:f0:a5:61:4c:
                    8f:49:e4:31:e3:d4:64:8e:7a:a6:8d:57:1e:99:b0:
                    4c:0a:ca:83:8a:74:d2:f3:34:4d:56:bc:c2:41:ee:
                    6b:3d:29:78:72:31:e7:70:55:d2:33:39:bd:b8:a3:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DC:74:51:AA:C2:54:C4:75:6F:70:F2:63:27:E9:D5:51:47:AD:D2
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a393130303a3a2f34302d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4580:9100::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:ef:62:ac:45:f8:28:82:6f:a2:2b:ce:87:5e:c7:89:39:6c:
         78:74:db:4f:69:dc:5d:4a:f8:77:22:98:da:72:a8:7e:9c:8a:
         17:9b:28:09:d4:a1:2a:0b:f4:5c:85:30:4c:26:03:54:14:13:
         36:64:2d:2a:3a:b3:dc:8b:4a:b5:1f:af:53:47:d2:d2:ac:b9:
         3b:15:43:b9:43:21:1c:c7:ff:18:2a:11:19:b9:bb:72:4d:a0:
         d8:56:05:a5:20:2a:e5:cf:8d:c2:d5:5e:a3:2d:e0:88:21:f3:
         67:c0:e1:bb:8e:48:ec:d2:d6:01:8a:07:50:59:2d:90:ce:18:
         ad:ad:bb:eb:c8:3f:21:5b:b8:f3:19:5e:eb:eb:8b:c8:52:ff:
         f7:9c:05:87:2d:2a:13:d6:98:f4:0c:f3:de:eb:02:89:2c:53:
         5b:cc:5b:1e:a3:49:57:fe:eb:cb:99:7d:2e:31:f1:f2:e1:f6:
         14:78:7f:6a:e2:ac:47:7d:5a:66:a3:9b:7a:48:fa:d5:02:b2:
         22:3c:e8:b1:04:8e:87:1a:41:c5:22:0e:b0:3f:43:f6:36:7c:
         b6:7d:59:4a:cc:ed:b4:69:8a:b0:d4:dc:cb:bc:e1:05:4e:ff:
         d9:48:32:36:64:8d:ea:ad:32:09:91:2f:ad:49:38:31:b3:f6:
         dd:ea:57:d8
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUKMlkALW8kRBjtSuZLFXPsomjQWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VDOUE0ODhEMDc5QUVFN0ZFMEIyMTY2NEExQTRBRUUx
Qzg5OUZEQzAeFw0yNjAxMDYxOTIzMDNaFw0yNzAxMDUxOTI4MDNaMDMxMTAvBgNV
BAMTKEFEREM3NDUxQUFDMjU0QzQ3NTZGNzBGMjYzMjdFOUQ1NTE0N0FERDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUxHWZ7fa+GwynBH2ov0jsdGii
lQQvEFEGxkwXpAtlEHJRHHlpHs8FNyZzeaYI3xc1xjxKnR4YKF9USNo7YDLEm90a
cmM3wD/xCUc/R6XJC8Fd2QNuT8GX12yQHKGfPrYwp9HWDaX7eSchiFYQj+MaugWm
trGcrIrKrN9aYQ3ljDGqpnERZpXFVNngFMoCOpVTZewjB/d5XR3A03+oU/2/o/AK
0jw0zTweRi72ytf66Kn5+iEDpn+OutoIJEXtgEYeSr2EHnaQqzt8qcmx8KVhTI9J
5DHj1GSOeqaNVx6ZsEwKyoOKdNLzNE1WvMJB7ms9KXhyMedwVdIzOb24ozSbAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUrdx0UarCVMR1b3DyYyfp1VFHrdIwHwYDVR0j
BBgwFoAUzsmkiNB5ruf+CyFmShpK7hyJn9wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUVBNTdFRENGQjhEM0M1NTVCN0IwOUQyRTVENjU4RTZE
MjQxMkJDODlGMUJDN0E1NDc3N0ZEQzE1QzkzODczLzAvQ0VDOUE0ODhEMDc5QUVF
N0ZFMEIyMTY2NEExQTRBRUUxQzg5OUZEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUM5QTQ4OEQwNzlBRUU3RkUw
QjIxNjY0QTFBNEFFRTFDODk5RkRDLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVFQTU3RURDRkI4RDNDNTU1QjdCMDlEMkU1RDY1OEU2RDI0MTJCQzg5
RjFCQzdBNTQ3NzdGREMxNUM5Mzg3My8wLzMyMzgzMDMzM2EzNDM1MzgzMDNhMzkz
MTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKANFgJEwDQYJKoZIhvcNAQELBQADggEBABPvYqxF+CiCb6Irzodex4k5bHh0
209p3F1K+HcimNpyqH6cihebKAnUoSoL9FyFMEwmA1QUEzZkLSo6s9yLSrUfr1NH
0tKsuTsVQ7lDIRzH/xgqERm5u3JNoNhWBaUgKuXPjcLVXqMt4Igh82fA4buOSOzS
1gGKB1BZLZDOGK2tu+vIPyFbuPMZXuvri8hS//ecBYctKhPWmPQM897rAoksU1vM
Wx6jSVf+68uZfS4x8fLh9hR4f2rirEd9Wmajm3pI+tUCsiI86LEEjocaQcUiDrA/
Q/Y2fLZ9WUrM7bRpirDU3Mu84QVO/9lIMjZkjeqtMgmRL61JODGz9t3qV9g=
-----END CERTIFICATE-----
Generated at Tue Jan 13 04:40:42 2026 by rpki-client