This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a633030303a3a2f33352d3438203d3e203532343638.roa
File:                     323830333a343538303a633030303a3a2f33352d3438203d3e203532343638.roa (raw, json)
Hash identifier:          5XRqTjmchLE4xHAHxPMM8DcnnRXreNGwkkCXCJVa4TI=
Subject key identifier:   48:40:C4:B4:C9:1D:EC:2F:20:B3:F3:63:13:FB:54:F2:C1:8A:AE:B0
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       60ED9C49C0F6731CED34697BF3E546C3F7D16698
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a633030303a3a2f33352d3438203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:28:04 +0000
ROA not before:           Tue 06 Jan 2026 19:23:04 +0000
ROA not after:            Tue 05 Jan 2027 19:28:04 +0000
asID:                     52468
IP address blocks:        2803:4580:c000::/35 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ed:9c:49:c0:f6:73:1c:ed:34:69:7b:f3:e5:46:c3:f7:d1:66:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Jan  6 19:23:04 2026 GMT
            Not After : Jan  5 19:28:04 2027 GMT
        Subject: CN=4840C4B4C91DEC2F20B3F36313FB54F2C18AAEB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:32:30:0f:e5:3c:7b:67:87:8b:e5:9e:91:
                    8f:28:0a:a1:0e:39:01:d6:df:77:1b:84:05:14:41:
                    9a:a7:7f:59:61:59:f7:b7:42:fe:ab:43:1a:f5:44:
                    67:00:77:59:07:0f:fd:ca:f1:3f:e1:4b:f5:95:2b:
                    96:df:fb:86:39:2a:b6:e1:04:4d:ca:3e:4b:29:a7:
                    b8:2c:8d:fc:7b:ee:f7:ea:57:c3:c8:61:87:23:7c:
                    e9:8d:e3:2f:a8:63:77:ed:2c:61:68:cc:3e:fa:7d:
                    00:cd:14:dc:5e:a2:36:55:7a:93:2a:cf:34:64:54:
                    8e:fe:38:b8:c0:d7:57:ec:48:bb:3b:cb:38:11:3a:
                    c8:13:32:5f:41:a0:6b:c9:dd:ec:a4:a2:9d:6e:e7:
                    d0:c5:dc:c6:90:35:79:eb:24:f2:3a:c1:de:95:a5:
                    b5:b0:0a:fb:a8:11:0d:94:c9:9d:8f:2e:cd:74:cc:
                    f5:aa:b3:c1:89:1d:6f:9c:29:7c:a9:0f:6e:04:bd:
                    9d:4f:07:3d:38:30:6b:a2:48:24:dc:8c:34:b7:3a:
                    90:74:7b:0f:cf:c0:9f:dc:9b:e2:0b:13:c9:36:08:
                    24:6d:43:50:c7:85:b4:85:9d:77:60:d9:f9:b0:87:
                    4d:fc:19:70:5a:25:b4:95:36:fa:4e:c9:c5:7b:b3:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:40:C4:B4:C9:1D:EC:2F:20:B3:F3:63:13:FB:54:F2:C1:8A:AE:B0
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/323830333a343538303a633030303a3a2f33352d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4580:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8b:17:52:78:9d:ac:a9:b5:b9:c9:14:27:d6:f7:10:ac:72:10:
         1e:45:d4:0a:bc:80:98:8e:7b:f9:ae:af:52:5c:6b:c3:9b:7e:
         21:3c:a5:48:18:22:89:a8:9c:2e:53:8f:07:3c:0b:f1:80:81:
         45:ae:6e:42:29:0b:98:88:d5:b3:c7:f0:f9:f6:36:55:0c:97:
         04:46:ea:6b:de:2a:e7:2b:29:1a:84:38:dc:80:0e:11:b2:f6:
         a7:ee:fe:b5:9d:68:af:3f:1d:47:f8:c9:1d:58:2e:0c:cb:7e:
         3c:51:47:69:19:26:41:2e:74:b8:6f:cc:21:18:80:a6:ae:d6:
         6b:01:69:0a:23:f6:14:f0:bb:e8:ad:0a:f4:0e:08:99:b0:95:
         6f:97:85:b7:73:31:34:4d:3c:a0:ba:d7:ba:a4:3e:a6:db:21:
         3f:57:69:60:82:2d:85:0a:1b:81:0f:c8:94:ff:f4:ad:d3:a4:
         0f:d2:d2:ee:58:d0:a1:7a:45:70:61:ad:43:c6:13:52:7b:9e:
         21:a1:99:2f:16:bb:61:df:a4:d0:92:da:af:f2:3f:47:90:0c:
         7a:17:6b:a6:55:ad:12:10:f0:e9:92:fe:8f:9d:f5:87:4d:c3:
         78:45:e5:17:99:7d:aa:cf:7f:78:1a:7e:49:74:0d:df:0b:a7:
         58:2a:3e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:40:42 2026 by rpki-client