This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a666530303a3a2f34302d3430203d3e203237383138.roa
File:                     323830333a333338303a666530303a3a2f34302d3430203d3e203237383138.roa (raw, json)
Hash identifier:          GifSlVWqUxyVv1ts3V59oG30wW7Po7XqoItAD1CTutQ=
Subject key identifier:   A7:0E:6F:C9:7D:23:EC:97:05:A4:62:40:CD:3E:F6:46:16:28:6C:1C
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       7717714620E5538673092D5FFC98D471251478FC
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a666530303a3a2f34302d3430203d3e203237383138.roa
Signing time:             Tue 06 Jan 2026 19:20:25 +0000
ROA not before:           Tue 06 Jan 2026 19:15:25 +0000
ROA not after:            Tue 05 Jan 2027 19:20:25 +0000
asID:                     27818
IP address blocks:        2803:3380:fe00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:17:71:46:20:e5:53:86:73:09:2d:5f:fc:98:d4:71:25:14:78:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Jan  6 19:15:25 2026 GMT
            Not After : Jan  5 19:20:25 2027 GMT
        Subject: CN=A70E6FC97D23EC9705A46240CD3EF64616286C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:ae:66:e8:e2:9d:ed:69:05:3d:0e:54:77:
                    09:91:37:ab:d5:6a:71:20:d3:cd:00:f9:1e:8d:01:
                    dd:30:3e:9e:67:7e:8d:58:4f:e6:c3:81:79:fe:86:
                    d9:85:fc:e1:3c:4b:15:5f:99:97:46:56:6c:63:ba:
                    e8:53:53:2a:77:d1:7f:c8:88:42:52:fa:2d:28:0f:
                    9c:95:e8:c7:cb:91:64:09:b1:68:89:6b:3e:68:0e:
                    41:d5:a9:8e:87:28:b8:ab:00:bf:7b:ea:f0:4b:4b:
                    d0:3b:a1:1b:ee:13:a0:5b:47:67:11:c2:24:51:82:
                    ef:b8:a0:11:7e:42:32:88:dc:b6:e0:5f:4e:07:6a:
                    55:21:83:76:50:40:cf:f1:82:05:43:d1:45:31:fc:
                    79:25:32:1b:b7:72:09:92:c3:76:e9:d6:70:38:a4:
                    0f:83:41:1e:f0:3c:0c:7a:a9:b3:59:b6:0c:72:58:
                    d2:a5:f5:57:65:4e:d1:62:e5:11:52:d4:79:bd:89:
                    9a:04:14:c2:95:81:b2:3d:c7:74:73:b4:ef:9e:03:
                    35:7b:ef:72:0e:26:29:87:ed:67:24:95:e8:47:b1:
                    92:ec:5f:ed:2e:52:84:94:25:78:9f:e2:ca:0c:c7:
                    de:02:0a:ea:b2:c2:92:25:c1:b6:3d:a4:53:5a:f1:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0E:6F:C9:7D:23:EC:97:05:A4:62:40:CD:3E:F6:46:16:28:6C:1C
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a666530303a3a2f34302d3430203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:46:e1:b7:1f:be:46:9a:79:6a:8c:af:82:d3:39:c0:02:42:
         eb:42:f0:ae:7b:18:02:fc:9f:43:2e:c1:30:6d:53:87:a7:06:
         10:f0:c6:81:43:e4:c0:24:66:fe:b6:ce:13:16:76:39:10:37:
         82:a8:1e:52:4f:ff:01:01:75:f3:bf:d1:62:7c:b1:0c:b5:bf:
         1f:13:d1:80:c6:20:17:91:f9:07:e4:17:1a:bc:97:7d:57:18:
         6c:f5:01:86:59:9e:ae:55:fe:93:8b:b0:63:c1:1a:d0:68:d4:
         26:b7:17:4e:bf:fe:8c:a6:ae:00:d3:89:7d:49:11:3f:ba:6d:
         3a:66:09:20:8c:cb:d2:38:75:ee:7b:d2:b8:b8:17:82:73:8d:
         e4:a0:a3:76:b6:8f:72:a9:0c:59:87:0f:89:a1:28:dc:44:d0:
         ca:5a:95:30:fa:b6:c0:44:cd:98:20:38:be:23:20:24:ba:a7:
         be:14:4d:5a:ed:26:e6:60:93:d9:8a:ce:c8:fd:79:94:4e:a8:
         28:5c:80:2c:4b:8b:95:51:15:12:bd:4a:84:50:8a:8f:fc:9b:
         fe:05:a9:36:dc:1d:88:37:eb:5d:c0:c1:72:30:63:bb:08:97:
         c4:92:50:2b:15:46:37:82:6d:24:90:98:a1:bb:f3:e3:bf:dd:
         bd:c3:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:57:21 2026 by rpki-client