This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a393230303a3a2f34302d3438203d3e203532343638.roa
File:                     323830333a343538303a393230303a3a2f34302d3438203d3e203532343638.roa (raw, json)
Hash identifier:          xndhYqv7eukZf7UQsd6/Kz1G9jJ5tDesWJJr3MNh68A=
Subject key identifier:   B2:53:ED:23:BF:30:AA:85:1E:5F:B7:7B:AE:B2:24:B2:7F:87:33:4C
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       68033672695635F4621EAC36DAC233B10121ECB5
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a393230303a3a2f34302d3438203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:28:02 +0000
ROA not before:           Tue 06 Jan 2026 19:23:02 +0000
ROA not after:            Tue 05 Jan 2027 19:28:02 +0000
asID:                     52468
IP address blocks:        2803:4580:9200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 22:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:03:36:72:69:56:35:f4:62:1e:ac:36:da:c2:33:b1:01:21:ec:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Jan  6 19:23:02 2026 GMT
            Not After : Jan  5 19:28:02 2027 GMT
        Subject: CN=B253ED23BF30AA851E5FB77BAEB224B27F87334C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:18:6b:c0:16:4e:ba:1b:08:f7:32:19:3a:d2:
                    3c:79:54:80:65:29:7e:57:4a:f1:50:a7:0e:b8:05:
                    25:ab:32:4c:11:55:27:89:3d:06:e9:7a:6b:7e:29:
                    13:0a:dc:fd:60:67:01:7d:f4:9b:9b:ee:5b:83:65:
                    c9:46:84:59:de:f3:a7:47:bf:3e:b2:ef:04:d3:ce:
                    f4:65:7b:11:17:ac:a4:44:99:bb:b1:8e:df:b6:69:
                    99:05:b4:64:05:45:37:d1:2b:f6:6d:a6:5f:7e:37:
                    a8:3f:aa:a5:68:2e:bf:2a:0c:f4:14:0c:1a:bb:55:
                    7d:a3:7e:3c:04:58:f1:c2:15:2e:16:7b:da:cc:2b:
                    4a:cc:a0:fc:32:9e:28:9f:a5:2a:06:85:29:33:93:
                    7f:b4:86:ec:21:b7:67:a8:9c:2f:b1:8a:95:29:40:
                    8d:e3:e5:d9:1a:d5:85:d5:f1:06:d3:6a:35:eb:a4:
                    70:d2:f8:d5:4b:f4:61:5c:33:85:10:46:3e:76:62:
                    dc:3d:ef:dc:15:12:c1:80:af:4d:ee:46:45:57:a8:
                    8b:30:d0:d9:ce:8f:bb:6e:b5:ce:c6:c4:5f:6b:00:
                    6e:77:a7:65:25:4d:f6:ef:a5:c6:e8:ed:0b:8a:06:
                    91:f5:c4:95:cb:43:eb:21:11:47:06:8c:c7:9a:f9:
                    4e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:53:ED:23:BF:30:AA:85:1E:5F:B7:7B:AE:B2:24:B2:7F:87:33:4C
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a393230303a3a2f34302d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4580:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:b7:90:12:d5:6d:9b:60:27:a7:9d:a6:12:38:f9:9f:ec:b2:
         0c:17:6e:ec:64:d3:22:ea:bf:e0:e8:ae:ce:64:d2:f0:15:bf:
         23:45:41:46:9d:f4:5f:9a:08:77:fd:c8:8f:e1:e8:2f:b4:b7:
         42:02:7e:13:b9:33:5b:33:cc:20:e1:72:28:f9:a5:eb:a4:60:
         13:ab:d0:8a:4e:93:77:5a:b4:09:f8:f3:52:dc:86:d2:21:7f:
         42:82:d5:a1:ae:9e:9f:cd:56:bd:70:e6:1b:bf:f1:00:99:57:
         4d:92:a7:db:03:62:f6:0d:0f:43:3c:10:68:d5:93:0b:24:48:
         22:d6:65:a0:98:9f:d7:d1:03:a1:e7:3f:db:3d:2a:8b:24:f7:
         32:c1:8f:ad:70:16:1e:69:ea:a7:a9:56:9a:c5:43:41:3d:9a:
         1f:ca:7c:b4:4d:21:22:ae:e3:ac:4f:1a:e8:2b:ef:99:0d:a5:
         bf:6b:df:14:92:63:ac:94:c5:78:49:4f:2f:a2:01:ed:7a:da:
         3b:07:10:21:f4:09:fe:89:d6:c4:d3:88:21:a0:fb:1f:8f:b9:
         18:8a:d5:a1:2b:7c:60:72:46:64:62:b3:65:a2:ce:fe:a2:4a:
         8d:f2:7c:d8:3a:55:da:9d:e5:fc:67:01:e8:92:84:92:76:93:
         45:bb:c9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:05:13 2026 by rpki-client