This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3730303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a3730303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          aJHQN9zC7oDGG5zN6Th0wK8s+6ZOZ+tR7P9rIC1rf08=
Subject key identifier:   FA:DD:20:F4:AA:D3:86:D5:9F:FE:57:7C:C3:D9:E8:7A:7B:7E:62:FC
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       6B89BF5F48DC2E9EC21C86F72CA5C83B13DDC646
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3730303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Tue 06 Jan 2026 19:23:09 +0000
ROA not before:           Tue 06 Jan 2026 19:18:09 +0000
ROA not after:            Tue 05 Jan 2027 19:23:09 +0000
asID:                     272869
IP address blocks:        2803:7290:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 03:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:89:bf:5f:48:dc:2e:9e:c2:1c:86:f7:2c:a5:c8:3b:13:dd:c6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Jan  6 19:18:09 2026 GMT
            Not After : Jan  5 19:23:09 2027 GMT
        Subject: CN=FADD20F4AAD386D59FFE577CC3D9E87A7B7E62FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:40:00:91:fe:1c:28:2f:8b:54:7a:ad:11:6f:
                    2d:e8:25:0c:95:03:8f:2a:3b:fc:48:8d:99:a3:b3:
                    4f:14:d7:cc:af:94:c3:f7:57:c1:e0:16:80:35:87:
                    5a:17:33:51:68:71:32:7e:14:c6:36:16:ce:c1:6d:
                    97:1f:f6:7a:22:8b:48:f6:a1:5f:8b:c7:05:fb:5a:
                    ef:d8:5d:92:0e:6c:f2:86:de:b0:0e:be:c8:0d:09:
                    9a:c4:e8:1d:97:e5:fd:15:41:9b:63:52:91:11:fa:
                    e3:4b:bd:00:e1:26:1e:4b:68:8d:ae:28:cd:23:b5:
                    e0:94:1a:77:41:b3:b2:b6:3f:37:d5:89:22:87:06:
                    ff:30:ad:c0:62:c8:dc:34:9c:57:35:fc:5a:f2:4c:
                    ab:d5:c5:ba:e6:0c:d6:75:86:9b:af:07:89:d6:af:
                    23:2c:dc:4b:74:d5:22:52:b6:25:c4:9a:c0:cc:0f:
                    d4:79:0d:52:64:aa:ba:00:5b:c5:1f:f6:68:ca:a5:
                    78:c1:4b:2f:5b:37:a0:aa:a7:ca:4c:5a:a6:1d:37:
                    0e:ef:cc:d3:5a:9d:c8:37:07:ec:8d:7c:c7:bb:d1:
                    2f:36:a0:8b:f2:f8:6d:85:bc:95:89:08:e9:23:2a:
                    5f:63:33:c0:24:f6:c3:e3:96:52:81:26:11:aa:2d:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DD:20:F4:AA:D3:86:D5:9F:FE:57:7C:C3:D9:E8:7A:7B:7E:62:FC
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3730303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:d0:8c:0a:7e:a5:ba:46:8c:60:1a:d1:a7:03:b6:36:41:a9:
         b9:94:b1:e0:09:4b:86:59:de:37:3f:2d:f7:52:4f:07:87:8b:
         9e:b3:02:1e:5a:5e:c8:52:f7:1c:b7:5e:f2:5b:3c:41:d4:ec:
         8f:89:c4:3c:ec:b5:08:a6:35:40:5d:83:04:6f:3c:91:cf:75:
         5a:20:26:8e:d5:ac:2f:53:44:1e:87:1b:54:60:dd:d4:d9:01:
         8b:4c:f6:75:ea:e3:26:74:a8:33:09:40:39:de:07:15:b8:bb:
         85:0d:1c:cb:ee:bf:6a:7d:94:b4:37:08:81:d1:53:8e:d7:8f:
         4a:bb:ef:f9:4c:db:31:8a:81:57:02:ab:30:76:bc:f6:b5:eb:
         91:cf:05:6d:e9:9e:1d:a9:e9:03:e9:a8:75:85:ae:e8:7f:74:
         7c:04:60:45:7d:1b:c1:6a:d2:d6:05:96:92:44:9b:5b:3a:c2:
         2e:c3:3c:ed:84:34:55:60:a9:89:00:33:ee:fb:53:9b:8a:ee:
         ed:10:4b:93:0f:cf:c3:58:f5:df:5b:63:32:a9:42:5f:65:8e:
         e6:2b:96:a7:fb:ab:5a:d1:52:0f:08:af:99:1c:bd:87:57:4c:
         e4:fa:d1:29:03:67:69:d8:ee:80:10:de:de:98:41:b6:ea:17:
         11:a3:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:19:18 2026 by rpki-client