This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/323830333a656136303a3a2f33322d3438203d3e20323637383833.roa
File:                     323830333a656136303a3a2f33322d3438203d3e20323637383833.roa (raw, json)
Hash identifier:          DzeHat0NmPOVGhdsFo+eczHbW6P360jmBaeaEFyQEOo=
Subject key identifier:   0D:6C:FB:82:9E:5F:BD:84:F3:61:5E:43:36:36:48:40:B6:04:38:68
Certificate issuer:       /CN=C0EBB304AA656048790F91CC028ECE21EEA1DFC5
Certificate serial:       52D356AF1E90AF222D1D850342FBF1B8FAAF41D1
Authority key identifier: C0:EB:B3:04:AA:65:60:48:79:0F:91:CC:02:8E:CE:21:EE:A1:DF:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/323830333a656136303a3a2f33322d3438203d3e20323637383833.roa
Signing time:             Tue 06 Jan 2026 18:57:50 +0000
ROA not before:           Tue 06 Jan 2026 18:52:50 +0000
ROA not after:            Tue 05 Jan 2027 18:57:50 +0000
asID:                     267883
IP address blocks:        2803:ea60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d3:56:af:1e:90:af:22:2d:1d:85:03:42:fb:f1:b8:fa:af:41:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0EBB304AA656048790F91CC028ECE21EEA1DFC5
        Validity
            Not Before: Jan  6 18:52:50 2026 GMT
            Not After : Jan  5 18:57:50 2027 GMT
        Subject: CN=0D6CFB829E5FBD84F3615E4336364840B6043868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2a:d7:36:47:a5:61:03:29:61:09:59:fe:48:
                    fa:58:10:5e:d6:60:2e:3b:38:d0:b7:12:9b:e1:fa:
                    24:7c:b9:11:2d:6a:4d:ae:59:a0:91:9b:fc:d3:d5:
                    bc:d6:f3:c2:09:13:34:26:d4:b2:b4:64:d4:5a:ce:
                    e4:93:c8:ff:9c:e0:37:4f:56:f9:7e:89:68:f2:77:
                    c4:5b:17:8c:d7:ca:73:e1:bf:93:ae:16:2d:35:17:
                    90:c9:13:93:62:9f:8e:cc:52:e3:d2:67:c6:a9:3e:
                    a8:e3:66:08:74:ab:f8:73:2c:07:4d:0f:d7:88:d7:
                    08:6c:47:9b:e9:bd:2a:81:ce:d9:54:46:52:3f:e1:
                    1d:dc:07:32:fb:19:a4:58:17:4d:b2:7a:2e:68:71:
                    11:50:1d:3d:2b:25:d5:c3:68:fe:3f:34:7e:e3:cd:
                    63:c6:a6:91:6c:27:3d:1e:0f:ea:82:87:b6:4c:76:
                    1b:1d:29:4a:98:9d:f7:ef:c5:d8:b4:0e:1d:bd:a8:
                    9e:2a:47:de:43:6e:a0:17:05:51:8d:d1:69:c8:8b:
                    15:a0:88:91:d7:97:fc:39:a9:aa:12:11:c5:a7:85:
                    ec:a7:43:79:2d:df:45:43:4b:cc:a4:cd:24:ae:ec:
                    87:45:fc:60:ce:0e:f1:76:84:96:71:4b:80:89:d8:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6C:FB:82:9E:5F:BD:84:F3:61:5E:43:36:36:48:40:B6:04:38:68
            X509v3 Authority Key Identifier:
                keyid:C0:EB:B3:04:AA:65:60:48:79:0F:91:CC:02:8E:CE:21:EE:A1:DF:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/323830333a656136303a3a2f33322d3438203d3e20323637383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea60::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:3a:05:91:51:c9:78:0e:79:a7:3b:58:01:e3:3d:02:85:b3:
         67:d2:2e:91:72:b7:51:0c:05:1c:e5:37:9b:55:da:03:10:78:
         18:62:cc:d3:58:18:b3:41:35:fb:78:68:f4:d0:4b:0d:77:a1:
         d4:6e:e1:2b:72:19:88:57:c7:a3:9c:54:26:dd:0a:f4:0f:58:
         0a:30:03:ec:e7:51:55:a7:ca:2e:54:87:e6:bb:78:34:f5:95:
         c8:cd:d4:b2:d5:19:45:1f:87:c4:2d:92:dc:20:c2:87:2c:11:
         29:0c:75:4f:b1:a6:83:4b:30:20:c8:2b:80:17:4f:ac:32:90:
         6e:58:cc:8d:69:f7:6a:84:0b:9a:29:f4:a0:99:86:c8:fe:67:
         24:ef:57:99:4f:58:bb:be:9d:fd:3a:f9:52:19:f6:91:89:0d:
         54:1b:37:86:f8:e6:0e:d5:3f:12:97:ea:58:e3:5a:ed:a3:c0:
         24:78:ee:c8:db:3d:b3:0b:4f:5b:ef:b4:25:00:2f:f8:8a:d9:
         b7:71:df:5b:0f:ee:5d:2d:ff:c5:72:42:aa:87:11:ca:96:d9:
         41:5c:95:1c:cf:10:3c:75:ac:09:99:1f:1b:dd:ad:e0:00:69:
         a9:b9:ca:13:9e:ab:4c:13:cc:bb:b3:82:5f:19:60:5f:b4:11:
         ae:f2:09:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 06:29:35 2026 by rpki-client