This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a63303a3a2f34342d3434203d3e20323637393139.roa
File:                     323830333a656536303a63303a3a2f34342d3434203d3e20323637393139.roa (raw, json)
Hash identifier:          iWSyAAGEMsAECmhUWj3yflw6XJxPtut2nBRBdW7Xwic=
Subject key identifier:   01:17:16:D2:F2:0B:33:5B:95:17:B8:54:58:1B:CC:73:9C:5A:D0:08
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       609E1DE7CA4D747957418F2364454F4FD01FC489
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a63303a3a2f34342d3434203d3e20323637393139.roa
Signing time:             Tue 06 Jan 2026 19:17:34 +0000
ROA not before:           Tue 06 Jan 2026 19:12:34 +0000
ROA not after:            Tue 05 Jan 2027 19:17:34 +0000
asID:                     267919
IP address blocks:        2803:ee60:c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 09:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9e:1d:e7:ca:4d:74:79:57:41:8f:23:64:45:4f:4f:d0:1f:c4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Jan  6 19:12:34 2026 GMT
            Not After : Jan  5 19:17:34 2027 GMT
        Subject: CN=011716D2F20B335B9517B854581BCC739C5AD008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:f9:c3:cd:1a:0d:c2:d6:b5:53:06:6e:2d:
                    d0:da:dd:d9:08:ed:b6:c1:9f:7a:03:4d:f9:18:f5:
                    1f:13:e3:27:cc:2c:1d:62:ac:00:c9:d8:f4:e0:28:
                    f9:8c:5a:a5:d5:42:b5:b9:44:c3:d2:e5:92:9e:73:
                    56:51:99:c6:cd:7a:b7:89:96:1c:8a:f9:ce:47:7e:
                    ec:75:29:4b:77:1e:5c:31:f8:0c:68:f7:4f:d8:38:
                    ed:49:46:fe:66:c0:c8:3f:d8:4f:42:cf:2a:3a:8f:
                    9e:66:c2:38:5b:19:9b:cb:f4:62:54:7e:93:2c:64:
                    cd:b7:94:4c:05:86:ba:04:9f:c5:34:74:d9:83:75:
                    d3:6e:3e:86:5e:de:fb:06:21:65:f9:0f:89:b3:d0:
                    ca:00:45:5d:69:f6:b2:af:b2:32:c0:68:a3:bc:29:
                    ab:36:f8:9c:c2:7e:e9:25:cb:76:c1:57:69:fd:dd:
                    7a:a9:46:7e:b1:d4:c0:a1:6a:d8:d4:19:73:0f:b5:
                    4e:c2:31:a2:18:20:fb:42:b7:ac:ac:7a:d2:87:4a:
                    8f:be:e9:c9:b2:2c:9b:49:90:f1:78:66:b7:a7:48:
                    94:f5:97:9d:ad:d1:f4:70:93:61:76:b3:d1:47:a7:
                    2a:45:35:91:a4:40:9a:77:7b:62:50:db:ec:6c:f8:
                    b8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:17:16:D2:F2:0B:33:5B:95:17:B8:54:58:1B:CC:73:9C:5A:D0:08
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a63303a3a2f34342d3434203d3e20323637393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         79:48:b6:c0:b3:e2:7f:c0:73:95:44:4c:4d:cb:da:be:9a:ef:
         5e:d6:20:76:cb:52:59:33:d1:34:34:dd:e5:3a:38:eb:4c:0f:
         31:45:d8:d8:a2:d7:14:36:5e:30:47:a6:f5:e1:a7:16:15:ef:
         b5:d3:ad:43:89:e7:b6:56:df:8f:a1:e8:44:12:67:18:c0:f4:
         89:e3:25:55:c9:a4:68:dd:fe:ee:e6:b7:b6:9f:6d:a4:3f:c6:
         9c:be:d8:4d:9b:94:da:1a:bb:63:82:42:13:b2:38:38:13:24:
         a9:93:36:ca:9a:96:f7:0f:c6:08:49:5c:0f:13:4d:52:26:4b:
         78:ea:5d:64:00:4e:ae:00:ec:36:4b:74:de:91:ea:af:c0:f7:
         4b:d5:f0:1c:a1:ed:7a:bc:10:a1:f7:0c:dd:cb:7f:39:e1:4f:
         72:d4:86:75:f1:9b:eb:9f:16:e4:db:71:16:8b:42:7b:d3:55:
         67:12:b9:8e:73:8f:21:07:9c:0f:1c:78:8e:bb:7f:dc:03:d0:
         4d:81:0c:67:19:21:fc:12:78:b3:e6:17:d1:84:50:05:81:89:
         44:22:b8:0a:0a:d2:5f:47:47:f0:e2:3e:78:e6:42:0a:09:79:
         da:6c:2b:bd:17:fd:49:62:dd:b3:cc:31:83:db:2f:95:e5:8e:
         0f:a1:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:46 2026 by rpki-client