This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a323a3a2f34382d3438203d3e20323733303038.roa
File:                     323830333a623539303a323a3a2f34382d3438203d3e20323733303038.roa (raw, json)
Hash identifier:          uxU+22p4KQxP7JAtyCvKx7Zk3pQ0LXjyPyd5rSO9+Xs=
Subject key identifier:   06:30:02:D1:7D:05:99:EA:1D:A0:69:9F:F3:19:17:E6:C2:7D:24:A7
Certificate issuer:       /CN=D68C275AE349DFCD32C558419A7893BADFF5F3F8
Certificate serial:       6D5DDF510CC132CD33A5AEF3C0022E94565B477C
Authority key identifier: D6:8C:27:5A:E3:49:DF:CD:32:C5:58:41:9A:78:93:BA:DF:F5:F3:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a323a3a2f34382d3438203d3e20323733303038.roa
Signing time:             Tue 06 Jan 2026 19:06:24 +0000
ROA not before:           Tue 06 Jan 2026 19:01:24 +0000
ROA not after:            Tue 05 Jan 2027 19:06:24 +0000
asID:                     273008
IP address blocks:        2803:b590:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 08:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5d:df:51:0c:c1:32:cd:33:a5:ae:f3:c0:02:2e:94:56:5b:47:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D68C275AE349DFCD32C558419A7893BADFF5F3F8
        Validity
            Not Before: Jan  6 19:01:24 2026 GMT
            Not After : Jan  5 19:06:24 2027 GMT
        Subject: CN=063002D17D0599EA1DA0699FF31917E6C27D24A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:fb:a4:80:f6:91:b0:24:96:6d:58:95:0e:
                    98:b4:f5:e9:e2:72:ff:10:3d:26:4f:9d:8d:d3:e1:
                    cb:97:86:1f:08:ca:31:f6:c2:40:06:e0:bd:7f:17:
                    60:d9:1c:07:3d:7c:e2:02:25:25:7d:53:7e:94:7a:
                    d3:69:12:ce:bf:0d:14:a7:57:e9:04:ed:d4:71:7c:
                    91:04:19:05:f1:ae:dc:e1:d1:05:bd:17:c5:11:7d:
                    a6:6b:c0:8e:24:6f:fa:25:82:2c:57:30:8c:3a:c9:
                    de:d0:ec:9f:6e:9f:7f:eb:2b:17:04:50:e4:d6:ee:
                    80:d4:e3:10:ab:f7:cb:30:65:f2:b0:9c:f4:0c:02:
                    e1:1c:a2:bd:df:33:db:2b:45:fb:e1:3b:96:23:76:
                    7d:2a:17:38:5b:04:9a:87:c0:be:f0:b7:30:c7:49:
                    d8:81:98:12:6b:f3:e6:11:74:ee:ae:7a:71:ba:ae:
                    21:95:d1:1b:d5:c3:1e:1e:3c:36:b5:67:1d:f7:0b:
                    27:bc:9c:2e:be:5f:06:e8:29:42:1f:ca:d5:ec:d8:
                    b3:fe:cc:57:bf:89:61:fd:61:d5:f5:33:3d:a3:18:
                    b7:4b:7c:67:e1:e3:0d:c0:bb:4c:15:5f:49:62:d6:
                    88:ec:a0:38:7a:00:c1:ee:d3:4b:11:5a:0e:ed:51:
                    b9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:30:02:D1:7D:05:99:EA:1D:A0:69:9F:F3:19:17:E6:C2:7D:24:A7
            X509v3 Authority Key Identifier:
                keyid:D6:8C:27:5A:E3:49:DF:CD:32:C5:58:41:9A:78:93:BA:DF:F5:F3:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a323a3a2f34382d3438203d3e20323733303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b590:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:91:97:b0:62:a1:b2:d3:7f:3d:76:53:21:cb:43:33:37:87:
         ea:04:ee:fa:78:67:e0:66:63:5a:3b:fd:21:48:2f:00:5a:45:
         74:43:a0:b6:5e:0f:c4:d5:a6:26:e1:0d:9b:18:af:3a:ef:e4:
         06:bc:f5:ab:67:eb:d0:a6:10:89:f2:b7:fd:30:4a:ac:a1:91:
         83:b4:b2:3e:9f:15:40:1b:e4:11:74:20:39:ce:bd:8b:cd:6f:
         0e:91:45:5f:20:60:ff:91:48:86:54:4e:41:5c:31:34:37:cb:
         84:72:4c:b7:47:49:a9:8a:2b:13:2b:9a:43:f2:25:20:c0:75:
         0a:73:6b:6b:cc:5b:58:e9:44:6f:54:c3:d1:e6:f3:2f:67:81:
         bd:a6:ff:6a:20:8b:86:aa:6d:44:c0:b9:14:3e:a9:c8:72:49:
         4d:4a:53:3b:81:e4:75:2c:de:65:2d:9f:fc:56:08:5e:fe:02:
         2f:5b:af:f1:c3:55:33:10:bf:5f:8d:96:67:8d:7f:d4:ec:42:
         43:9e:51:65:b1:64:89:9e:24:47:db:08:0f:00:56:21:66:cf:
         29:ce:75:48:5e:40:da:27:a5:6d:f5:99:41:c5:09:46:9e:5a:
         1a:4b:5e:eb:c3:80:02:44:7d:9b:4d:ca:a3:68:f6:61:a0:58:
         c6:50:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:18 2026 by rpki-client