This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a343030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a343030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          f85h9XmKlcLy+rWcfa1E7PlkTJNCv54tznfQQE8nq2w=
Subject key identifier:   FA:C8:95:E5:F8:1D:7A:D8:CC:C5:B8:A3:CF:B5:03:80:F5:05:BB:34
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       279251A87160A14F0B48523B70CACF458A3815A2
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a343030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 06 Jan 2026 19:20:21 +0000
ROA not before:           Tue 06 Jan 2026 19:15:21 +0000
ROA not after:            Tue 05 Jan 2027 19:20:21 +0000
asID:                     27818
IP address blocks:        2803:3380:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:92:51:a8:71:60:a1:4f:0b:48:52:3b:70:ca:cf:45:8a:38:15:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Jan  6 19:15:21 2026 GMT
            Not After : Jan  5 19:20:21 2027 GMT
        Subject: CN=FAC895E5F81D7AD8CCC5B8A3CFB50380F505BB34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:8b:f7:a2:cf:78:e9:9f:a1:9f:b1:81:e5:
                    50:b4:39:30:a5:db:05:08:be:f1:ef:ca:49:3f:1a:
                    d6:4a:a1:31:b3:29:29:c7:58:71:eb:1d:3b:90:6f:
                    e5:a8:10:f3:25:18:56:53:11:eb:7a:4d:92:56:93:
                    61:52:e7:12:59:6f:23:60:c8:41:dd:bc:99:46:66:
                    76:21:11:7b:09:1b:b9:bc:d1:ce:35:01:63:65:64:
                    40:c7:f9:47:28:fb:c6:5c:36:0c:ae:d8:11:95:17:
                    ba:e8:5c:91:62:cc:c3:e3:d3:db:7a:79:2b:63:b6:
                    d1:7e:b1:9c:16:9e:a3:ad:d0:51:c1:1b:8e:7c:a7:
                    0e:5f:f2:4e:03:0b:ab:1b:b5:c3:b5:23:99:d8:d6:
                    20:f9:91:58:07:dc:1c:56:3a:73:36:c8:d5:4b:49:
                    d1:c1:80:e2:fa:2b:88:91:d9:56:b0:ee:36:07:7a:
                    dc:42:5f:90:62:5e:56:46:a4:36:c3:a5:4b:fc:e3:
                    a6:ad:4c:b5:c0:b7:5d:82:5b:29:55:98:be:cb:f2:
                    21:6b:f4:38:a8:f6:0a:8a:85:29:22:88:d2:22:ea:
                    03:c0:79:40:2a:2f:17:7b:2d:cb:5b:bf:4f:72:97:
                    ed:cf:3b:75:f2:48:39:d7:1b:21:32:eb:17:34:aa:
                    6f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C8:95:E5:F8:1D:7A:D8:CC:C5:B8:A3:CF:B5:03:80:F5:05:BB:34
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a343030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         92:fb:43:3d:2a:b1:60:50:b6:e0:b7:e2:0e:09:14:7c:10:b9:
         3a:98:92:7b:59:f6:ea:ea:b9:da:25:0e:20:1f:56:39:cb:9c:
         75:43:9a:9b:90:72:e7:80:aa:2b:dd:de:f1:1a:cd:b9:14:fe:
         3f:fa:2b:31:5e:16:31:7a:e4:4a:2b:f7:48:fd:e6:9c:4a:cd:
         5a:06:92:df:fc:3d:78:77:1a:dc:e6:a6:8e:15:ca:63:60:70:
         a4:ac:3c:ad:c1:cc:29:1a:81:f7:36:96:34:21:1e:93:0e:c3:
         92:21:64:49:6c:87:d4:ad:5f:fb:0f:21:b1:34:53:33:2b:53:
         80:54:3f:63:4e:9c:a9:b2:fe:23:bc:4a:d7:70:9f:c5:31:ec:
         5d:48:c7:00:fd:8d:53:2c:56:94:ab:42:a9:22:44:e0:39:48:
         66:66:e1:22:94:bd:83:1e:c1:b6:d5:1b:ea:b7:8b:02:c8:71:
         47:7b:46:3d:bd:d1:18:44:53:ad:01:89:16:c0:78:73:d1:ab:
         3d:be:dd:cb:1d:99:31:a0:a7:dc:06:9c:78:ab:12:6a:86:b8:
         d1:a1:60:ff:3a:64:47:21:2d:98:be:0b:c9:55:b1:63:08:0a:
         56:81:e2:fe:70:1e:f9:45:01:f6:1b:96:66:dd:92:ca:25:ff:
         5c:4f:76:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:54:20 2026 by rpki-client