This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/323830333a313834303a3a2f33322d3438203d3e20323635363838.roa
File:                     323830333a313834303a3a2f33322d3438203d3e20323635363838.roa (raw, json)
Hash identifier:          yk5fIpLyTiRTYTKtZvmS8Hr1E4VYvQF6QugZUg9mMOs=
Subject key identifier:   07:F8:30:DC:99:A5:E3:37:D5:99:68:E9:B9:8E:C8:1D:F2:7F:96:0E
Certificate issuer:       /CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
Certificate serial:       50F38F82EB4D1A5CB3025994CBC94D3319F141A8
Authority key identifier: EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/323830333a313834303a3a2f33322d3438203d3e20323635363838.roa
Signing time:             Tue 06 Jan 2026 20:51:17 +0000
ROA not before:           Tue 06 Jan 2026 20:46:17 +0000
ROA not after:            Tue 05 Jan 2027 20:51:17 +0000
asID:                     265688
IP address blocks:        2803:1840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 20:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f3:8f:82:eb:4d:1a:5c:b3:02:59:94:cb:c9:4d:33:19:f1:41:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
        Validity
            Not Before: Jan  6 20:46:17 2026 GMT
            Not After : Jan  5 20:51:17 2027 GMT
        Subject: CN=07F830DC99A5E337D59968E9B98EC81DF27F960E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:23:c9:53:fb:00:6a:2c:5c:25:28:1b:ef:
                    68:66:2a:df:11:44:92:87:47:c4:53:9d:f8:35:4a:
                    74:fc:1b:0b:32:d3:c7:0b:81:eb:57:28:90:17:e8:
                    2d:73:0b:af:b0:4c:f7:dc:c5:ba:44:8e:4e:e9:5f:
                    bc:41:c0:6e:5b:f6:f2:b3:61:67:2a:f5:bb:e1:bc:
                    61:8c:54:b5:b1:df:85:2f:23:a9:42:42:0b:50:0f:
                    51:3f:08:4b:dc:a6:6d:40:c7:00:ca:21:d5:b6:54:
                    c6:78:7e:7b:7c:34:55:35:23:71:00:d9:ad:54:cd:
                    6e:82:ad:6e:47:09:4f:be:a7:68:03:12:e4:66:5b:
                    bc:60:1c:2d:ea:4c:b8:e7:17:51:42:e5:f7:1b:04:
                    b0:73:02:d6:0b:08:29:4e:ef:48:de:4e:af:70:d8:
                    26:3b:26:93:08:c0:c4:71:24:7e:41:c4:f6:81:2f:
                    ab:36:fa:38:b9:4b:ac:b4:d5:ae:9e:c5:07:a1:22:
                    da:a1:5d:89:07:42:3c:bc:9c:af:58:de:75:5a:f6:
                    f6:74:92:4d:71:3f:3a:61:8d:db:e3:60:9a:da:ca:
                    e1:18:30:d5:65:a4:26:b8:6c:09:6c:f5:f7:22:33:
                    29:5a:0e:5a:4c:83:cc:4d:fc:a9:0d:19:35:99:aa:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F8:30:DC:99:A5:E3:37:D5:99:68:E9:B9:8E:C8:1D:F2:7F:96:0E
            X509v3 Authority Key Identifier:
                keyid:EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/323830333a313834303a3a2f33322d3438203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1840::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:b7:92:a4:25:95:dc:dd:27:da:41:2c:77:51:99:44:aa:3f:
         83:f5:62:05:48:00:24:17:52:0b:ba:06:22:85:ec:68:b6:24:
         e5:8c:40:ec:24:87:54:48:87:c7:70:84:72:73:39:44:df:f0:
         1c:fb:f3:4c:ce:a1:61:e2:e2:03:8f:34:16:f7:16:ea:ab:5c:
         60:50:ef:ce:d6:cb:0e:0a:f3:1c:be:5f:57:ec:72:4b:d9:af:
         44:5b:65:a6:19:7b:c1:85:af:90:db:b3:8e:7b:ee:1f:87:d0:
         f1:5f:6c:55:05:dc:4d:d6:75:b0:5f:a0:45:d6:c6:4e:4c:57:
         d7:20:90:16:a4:a4:38:ea:4e:66:87:82:9a:31:03:2f:5c:d3:
         3c:63:ad:dc:fe:23:f2:b6:4f:90:cf:bb:1b:2c:6f:7d:39:99:
         d5:b8:4a:02:e9:d7:36:ba:9c:53:32:44:04:fe:fa:d6:5d:19:
         0a:4b:06:9c:01:66:49:3a:56:b6:1b:cf:e2:8b:e7:12:52:1e:
         5f:31:3a:9b:c6:c1:ac:7c:d8:1f:3e:d1:4f:46:ad:61:65:b7:
         5d:35:f3:a6:8f:9c:88:8f:cb:ac:a2:13:5a:83:6c:0a:36:1f:
         55:8a:70:f7:09:cf:8a:f7:c7:84:8e:87:c0:c2:4c:d5:a0:98:
         ab:a6:58:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:46:29 2026 by rpki-client