This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a6130303a3a2f34302d3430203d3e20323733313237.roa
File:                     323830333a323435303a6130303a3a2f34302d3430203d3e20323733313237.roa (raw, json)
Hash identifier:          fY4UYmHA9kz51gCndG2Xfa247+DMfReEltEsExoTdZ0=
Subject key identifier:   3D:56:53:8A:C6:56:96:2C:C9:46:51:6E:6E:B3:7D:CC:BC:14:53:6A
Certificate issuer:       /CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
Certificate serial:       32DFE07EC71A2C4C18833B185D6A4F0D4B968846
Authority key identifier: DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a6130303a3a2f34302d3430203d3e20323733313237.roa
Signing time:             Tue 06 Jan 2026 19:32:06 +0000
ROA not before:           Tue 06 Jan 2026 19:27:06 +0000
ROA not after:            Tue 05 Jan 2027 19:32:06 +0000
asID:                     273127
IP address blocks:        2803:2450:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 12:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:df:e0:7e:c7:1a:2c:4c:18:83:3b:18:5d:6a:4f:0d:4b:96:88:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
        Validity
            Not Before: Jan  6 19:27:06 2026 GMT
            Not After : Jan  5 19:32:06 2027 GMT
        Subject: CN=3D56538AC656962CC946516E6EB37DCCBC14536A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:72:83:7e:dd:f7:a1:31:df:67:3a:15:fc:ce:
                    66:19:4e:fb:7f:da:b4:b9:fd:ee:f6:51:21:db:9b:
                    c9:9a:c3:40:64:ba:50:49:a9:2e:28:58:f3:0c:d4:
                    ca:f2:cc:72:9c:2e:13:8e:e3:a1:fe:8b:3b:ed:c4:
                    b1:17:83:5e:65:9b:51:03:a4:5b:0f:80:83:07:f8:
                    c5:7e:d3:08:2d:0a:b1:4c:ba:ba:5a:e9:4a:2c:9a:
                    87:1e:c7:82:a2:5a:39:d6:94:69:7b:fd:c6:47:2f:
                    bc:92:a4:6f:c8:2f:70:03:5c:c6:ab:be:30:58:8e:
                    28:89:43:d5:dd:69:e3:29:7c:c6:ba:30:83:fd:66:
                    42:e1:b0:ff:92:ca:14:e7:f9:02:53:df:46:f3:d4:
                    af:9d:99:3e:a7:72:b3:c0:45:be:36:01:7e:a1:5a:
                    24:77:1f:cf:33:56:43:d4:e5:46:61:65:d3:b6:fb:
                    56:d7:b6:7b:22:a9:3c:35:83:7f:b7:a6:9a:df:09:
                    09:66:86:d5:e5:54:51:f9:e8:ad:ee:21:5e:41:18:
                    e6:48:b8:ed:17:cf:4f:d1:f4:d7:b1:52:c3:d4:6c:
                    63:30:61:7b:a8:42:de:62:4c:ed:a0:37:f2:a6:32:
                    e2:09:89:93:c2:18:48:75:35:51:4f:d9:98:eb:f5:
                    07:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:56:53:8A:C6:56:96:2C:C9:46:51:6E:6E:B3:7D:CC:BC:14:53:6A
            X509v3 Authority Key Identifier:
                keyid:DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a6130303a3a2f34302d3430203d3e20323733313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2450:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:cd:5f:6a:1a:1e:e6:73:f5:5a:36:47:76:7e:51:d5:64:42:
         a3:46:c3:b8:b2:3e:fc:87:3c:e7:76:7f:e7:0d:dd:03:ff:95:
         79:8d:69:ca:ff:9a:64:04:5d:e1:31:f8:f3:f0:69:40:45:59:
         ca:1a:ac:e6:e0:97:91:fc:d6:22:93:83:01:86:58:27:95:79:
         cb:1e:46:50:46:74:ed:59:b1:49:00:8c:c4:01:4d:bb:f7:80:
         7b:df:c5:33:ea:1f:6b:b1:1c:15:d4:6f:24:cd:95:b1:6b:57:
         af:84:51:6f:df:9a:45:eb:6b:b1:f2:a4:06:36:fe:9c:5e:c1:
         c9:37:bf:46:54:d9:fd:e9:93:a9:f7:d3:1e:e2:9f:d4:14:5a:
         c6:83:4a:4e:5c:f6:85:fc:6e:68:f3:bd:5e:ac:e5:08:cd:16:
         bf:f9:bd:35:ad:91:a0:1e:0d:94:27:f2:b1:99:46:ff:bd:c0:
         22:e8:02:17:3b:a6:ba:15:a4:43:e1:97:9f:df:58:9b:33:f6:
         40:74:8b:ff:bc:68:23:8b:26:9f:1b:cb:ce:5f:08:23:b1:a2:
         90:89:c3:1b:de:df:0e:67:bf:ab:ac:93:44:af:32:e3:81:27:
         1e:88:ce:1b:f9:4a:80:cc:d5:b9:2e:5e:f8:29:86:84:23:e3:
         cb:32:a0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:54:08 2026 by rpki-client