This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/323830333a633865303a3a2f33322d3438203d3e203634313134.roa
File:                     323830333a633865303a3a2f33322d3438203d3e203634313134.roa (raw, json)
Hash identifier:          i4jndu7z3lqP9FkzvaWqvOVjfTJuoVFe02gs5N1dcFU=
Subject key identifier:   E4:FD:EA:80:E5:19:A7:77:C3:82:6B:7C:07:20:82:C0:C7:76:4E:7A
Certificate issuer:       /CN=6F536C71A8200D1878CE43CF666EB2F58403A8F1
Certificate serial:       723E00A31C7C9D9938C39D5D7BEE43DDEA661CF6
Authority key identifier: 6F:53:6C:71:A8:20:0D:18:78:CE:43:CF:66:6E:B2:F5:84:03:A8:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/323830333a633865303a3a2f33322d3438203d3e203634313134.roa
Signing time:             Tue 06 Jan 2026 20:51:18 +0000
ROA not before:           Tue 06 Jan 2026 20:46:18 +0000
ROA not after:            Tue 05 Jan 2027 20:51:18 +0000
asID:                     64114
IP address blocks:        2803:c8e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3e:00:a3:1c:7c:9d:99:38:c3:9d:5d:7b:ee:43:dd:ea:66:1c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F536C71A8200D1878CE43CF666EB2F58403A8F1
        Validity
            Not Before: Jan  6 20:46:18 2026 GMT
            Not After : Jan  5 20:51:18 2027 GMT
        Subject: CN=E4FDEA80E519A777C3826B7C072082C0C7764E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:5a:9b:bc:b1:af:8a:22:47:bf:0d:50:31:
                    b5:12:61:70:3e:51:74:9e:1d:fe:22:09:0d:58:15:
                    d6:e7:be:ce:4c:c9:db:43:7b:c8:68:07:3d:fd:71:
                    f5:a2:69:90:47:d5:37:2a:64:09:ee:ed:21:e8:de:
                    4b:ad:4a:aa:c1:4b:c8:57:3a:49:24:26:1f:1f:e1:
                    8c:0f:6e:70:2c:43:63:0f:45:3b:aa:9a:21:0e:93:
                    fb:8e:29:52:f3:81:9d:67:08:41:0d:53:65:1e:18:
                    5c:22:4f:18:77:5a:2b:c9:96:f6:ff:5c:0b:9b:3d:
                    6a:35:11:6b:56:09:ee:96:8e:32:00:10:f7:cc:94:
                    2a:7b:f0:54:f0:39:62:36:5b:17:4f:ed:64:29:3b:
                    a5:ab:c3:cf:12:a5:df:c1:24:24:c7:37:c0:cd:1d:
                    fe:77:4f:16:6a:a8:a0:90:ca:69:56:52:4d:cd:7c:
                    87:d1:a1:d8:02:9f:e7:28:f7:61:68:15:b9:b0:3d:
                    54:d4:50:ca:2f:e1:81:11:ec:c2:65:9c:8e:2b:cd:
                    28:d4:43:b8:04:8e:3e:c9:5a:58:68:e6:fa:aa:8f:
                    69:60:9f:c4:5a:3b:22:28:8f:7d:34:17:d2:8c:da:
                    32:d3:d7:3c:93:28:de:3b:4d:8b:d7:a6:c5:8f:d9:
                    b2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FD:EA:80:E5:19:A7:77:C3:82:6B:7C:07:20:82:C0:C7:76:4E:7A
            X509v3 Authority Key Identifier:
                keyid:6F:53:6C:71:A8:20:0D:18:78:CE:43:CF:66:6E:B2:F5:84:03:A8:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/323830333a633865303a3a2f33322d3438203d3e203634313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c8e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:85:98:66:27:77:70:a7:7d:2d:2f:1d:0c:8f:63:75:59:0d:
         42:b5:c7:95:68:15:5d:83:35:79:49:8c:64:40:51:89:a3:b7:
         dd:6a:28:c6:39:3c:4d:f4:b8:18:df:13:a0:d3:36:26:2c:88:
         26:52:8f:7d:3c:95:aa:2b:2a:e1:ea:76:60:8c:bb:86:1f:0c:
         e3:c7:0a:f0:9f:fd:85:62:d1:96:b3:1c:69:05:bc:85:76:5e:
         b3:7c:d1:89:8f:ad:b9:b6:8a:9d:ba:9c:4d:67:e6:d4:65:2b:
         00:ba:cd:7b:d3:cc:dc:cb:90:d0:8e:5f:5b:54:53:ce:f9:7b:
         c4:0f:a4:2e:58:88:8c:67:05:1a:22:25:44:88:98:21:45:64:
         c1:21:99:60:9a:78:0c:96:10:45:a3:7c:f8:ed:31:47:f7:b3:
         50:2e:81:a6:eb:1a:51:27:a4:f5:14:86:dd:51:f5:75:bf:56:
         60:22:c1:f4:a5:b3:b2:10:7d:14:5e:7e:6f:0c:e7:96:b9:e3:
         1f:e2:92:d8:d8:fd:0e:69:f9:4a:a1:6b:31:17:37:c8:7b:ba:
         c8:5c:17:91:43:d7:ea:5d:65:b7:f9:5d:6d:6e:3d:66:5d:1e:
         5c:a7:9e:8b:b6:9c:63:b9:fd:9d:d8:06:89:3f:ed:7d:5a:23:
         19:18:07:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:34:46 2026 by rpki-client