This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/323830333a6565303a3a2f34382d3438203d3e20323639393738.roa
File:                     323830333a6565303a3a2f34382d3438203d3e20323639393738.roa (raw, json)
Hash identifier:          bW3eQfWcdCWY7pgrTfHWGjqQirCLVlMHiJeg/DN5et8=
Subject key identifier:   12:9F:F6:FD:1F:8B:8A:DE:67:FD:41:1D:78:BB:9D:AC:51:93:9B:C0
Certificate issuer:       /CN=6A3360A7AAF500169AA1D3966EF9EDFA825A544E
Certificate serial:       6BF6D3A71E61DE935929C9CD40E1C15C1E8F089C
Authority key identifier: 6A:33:60:A7:AA:F5:00:16:9A:A1:D3:96:6E:F9:ED:FA:82:5A:54:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/323830333a6565303a3a2f34382d3438203d3e20323639393738.roa
Signing time:             Tue 06 Jan 2026 20:49:38 +0000
ROA not before:           Tue 06 Jan 2026 20:44:38 +0000
ROA not after:            Tue 05 Jan 2027 20:49:38 +0000
asID:                     269978
IP address blocks:        2803:ee0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 05:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f6:d3:a7:1e:61:de:93:59:29:c9:cd:40:e1:c1:5c:1e:8f:08:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A3360A7AAF500169AA1D3966EF9EDFA825A544E
        Validity
            Not Before: Jan  6 20:44:38 2026 GMT
            Not After : Jan  5 20:49:38 2027 GMT
        Subject: CN=129FF6FD1F8B8ADE67FD411D78BB9DAC51939BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:e1:a3:81:56:1f:98:f0:27:15:05:ab:5a:
                    ab:74:b5:6b:d6:c4:d9:5e:f2:11:b9:80:e1:1e:f1:
                    17:87:f6:3a:b3:19:93:e7:7a:d4:2b:ae:be:f3:f5:
                    c7:ed:9e:4e:cb:84:ca:b5:9b:81:67:03:ab:41:a9:
                    27:93:64:5e:22:12:ee:5c:77:06:c1:ef:24:1e:cf:
                    f9:42:a5:d5:21:a0:43:d3:ae:d5:c0:dc:e4:f6:92:
                    14:93:cb:49:8d:67:05:c8:64:7f:a8:f6:90:ac:c4:
                    4d:c0:0b:c1:3c:7b:55:59:f5:fc:d6:83:a0:1b:8d:
                    b3:87:b0:c6:ce:99:18:91:ec:2f:1b:85:f3:ec:41:
                    9d:5e:32:c7:64:f5:b8:35:e2:de:6f:53:ab:28:90:
                    18:d3:ad:44:38:fd:83:03:02:c0:2f:2a:7b:90:a6:
                    62:8e:b2:3c:9a:79:47:f5:61:ec:b7:5e:1b:5b:ae:
                    86:59:be:49:ac:84:9a:17:59:9f:48:bb:68:c9:7c:
                    47:e6:30:f5:f4:63:bc:ca:ef:d0:c3:5f:98:d0:ba:
                    29:71:7d:4a:c2:14:b4:10:4e:f6:69:d8:3f:0e:d8:
                    dd:c8:41:c8:28:af:4e:f6:b8:75:ae:1b:14:0a:e5:
                    e7:3b:ea:fe:6a:d1:04:56:e8:58:11:22:68:de:fb:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9F:F6:FD:1F:8B:8A:DE:67:FD:41:1D:78:BB:9D:AC:51:93:9B:C0
            X509v3 Authority Key Identifier:
                keyid:6A:33:60:A7:AA:F5:00:16:9A:A1:D3:96:6E:F9:ED:FA:82:5A:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/323830333a6565303a3a2f34382d3438203d3e20323639393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:b0:b8:86:8e:73:44:a0:a5:e7:93:78:92:ab:ca:e9:52:22:
         3b:07:f7:cd:4f:87:d5:92:4d:71:1c:21:0d:b9:06:5d:c7:ac:
         95:18:8c:52:7e:3c:a6:6e:f2:e3:ba:33:1b:5b:b0:00:3f:ef:
         8d:1d:7e:e1:8b:48:21:45:c9:6e:0c:0e:9a:7f:e9:84:8d:ab:
         46:7a:d7:8c:e0:43:c2:1c:11:71:59:ad:18:9d:64:1f:06:84:
         ee:4b:08:f6:c9:29:2b:b5:6e:b8:ac:dd:06:0a:e0:df:54:42:
         a3:92:b4:97:d3:1b:8c:08:47:d7:64:19:bf:1c:fb:a6:66:48:
         b3:2c:e0:e1:15:8a:e7:5e:e2:00:ff:15:3b:ea:95:27:0d:ca:
         f4:56:61:e8:27:b8:b3:bc:4e:ca:57:e9:00:e1:86:5f:4b:0a:
         75:e9:8f:1e:3d:d5:e3:aa:d4:53:d8:56:27:e9:0e:a3:e4:26:
         9f:02:60:c6:16:a0:4d:15:03:f9:69:48:20:76:23:06:6c:7b:
         ae:e4:5d:9b:04:79:6b:35:8d:92:dc:f6:76:2b:93:34:a4:d4:
         6f:70:7e:dc:53:7d:71:bd:51:1b:30:9e:c3:88:67:be:dd:82:
         10:0e:e8:1b:82:e4:25:3e:29:e9:56:ca:c8:88:3d:24:a8:c6:
         1d:bb:d6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:32:36 2026 by rpki-client