This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e20323033.roa
File:                     323030313a313333303a3a2f32392d3634203d3e20323033.roa (raw, json)
Hash identifier:          k8Tm89v62AU74K+XRZaz5llD1CPNzYXwMpWhMDQ/+s0=
Subject key identifier:   36:22:C7:EE:01:2C:F1:A5:53:6E:61:A8:8A:88:7F:32:16:24:90:A3
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       3ADE732E5404C2D3B49AB35EE1B3F00885ADE932
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e20323033.roa
Signing time:             Tue 06 Jan 2026 19:30:33 +0000
ROA not before:           Tue 06 Jan 2026 19:25:33 +0000
ROA not after:            Tue 05 Jan 2027 19:30:33 +0000
asID:                     203
IP address blocks:        2001:1330::/29 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:de:73:2e:54:04:c2:d3:b4:9a:b3:5e:e1:b3:f0:08:85:ad:e9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Jan  6 19:25:33 2026 GMT
            Not After : Jan  5 19:30:33 2027 GMT
        Subject: CN=3622C7EE012CF1A5536E61A88A887F32162490A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:a6:b4:07:a8:70:17:b2:69:1e:6a:31:a1:
                    cd:26:9c:a4:ea:fe:82:db:df:55:46:51:f9:5c:b5:
                    4b:ed:7b:75:d8:97:25:bc:11:55:bd:d5:41:e2:1b:
                    fb:fd:9d:02:5c:ab:19:4c:6e:f0:d8:94:87:28:79:
                    32:df:cc:63:0a:7f:41:0f:df:45:81:04:17:48:bc:
                    c8:69:fe:78:37:d2:dd:6e:87:f3:1a:73:ca:54:bd:
                    93:0c:08:c7:ff:6a:21:b6:69:5d:31:ac:8d:8d:a4:
                    29:ab:18:16:d0:1c:97:32:56:cc:8a:85:99:8a:5c:
                    8f:1f:60:5d:d8:fc:01:88:86:da:f4:9d:d1:4c:7e:
                    be:49:9e:79:13:be:73:67:fb:14:a2:0f:8c:fc:ba:
                    98:2a:b5:d2:df:02:2a:b2:d7:b6:0a:14:a6:97:ad:
                    fc:c9:3a:49:ef:ec:e4:54:8d:00:44:8c:e9:eb:c3:
                    f4:64:f5:fc:eb:89:a9:19:5b:14:3b:d8:95:9f:a0:
                    08:d9:8b:07:73:89:3d:33:51:80:ce:74:b1:68:34:
                    49:75:6f:43:b4:52:b1:97:82:92:dc:f2:f3:01:6e:
                    31:18:f5:cb:98:a9:d0:a1:36:e8:e8:45:b2:29:a1:
                    6c:02:cc:76:0f:79:d6:ba:14:4d:cd:f8:9e:0b:23:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:22:C7:EE:01:2C:F1:A5:53:6E:61:A8:8A:88:7F:32:16:24:90:A3
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1330::/29

    Signature Algorithm: sha256WithRSAEncryption
         76:5d:59:26:1b:34:de:ea:f5:a6:4c:90:e1:98:7a:3f:e5:41:
         49:6b:63:79:56:0c:57:19:43:ab:4d:9c:d3:68:ae:c6:dc:1b:
         fe:f3:05:b0:a4:2a:46:cd:71:67:2a:3c:36:de:15:68:29:0e:
         8c:06:34:01:59:76:04:d9:da:3b:20:e0:72:dd:ed:e1:e0:5f:
         a7:19:97:be:d1:aa:44:e6:82:6a:59:bb:89:70:4f:02:af:fe:
         35:bb:f8:14:ca:e8:f8:82:a2:08:e5:c7:ef:09:9b:a8:e4:e3:
         22:87:c8:62:db:0c:a9:7d:d3:e7:08:52:a1:0c:62:15:2f:7b:
         b2:30:10:13:7d:e0:b9:b2:29:c5:8b:ca:70:af:36:f2:8a:78:
         22:42:04:53:9b:f9:cb:b9:55:0b:6a:c5:e8:94:02:08:fd:22:
         24:71:1c:38:70:41:3e:a4:ba:bc:69:e4:bc:70:ad:2e:4e:c9:
         3c:d6:d2:52:dc:a7:2a:7c:76:13:ca:eb:54:ab:62:9d:88:53:
         a1:82:62:95:99:fb:78:d2:03:27:25:91:c8:34:f3:9d:9e:14:
         fd:98:e0:ad:84:31:7a:df:76:e1:dc:7d:fb:6d:b0:b2:0d:83:
         b2:82:f7:04:32:5a:b7:40:bd:2f:c4:cf:7f:b2:1f:d4:07:e9:
         6d:2d:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 09:55:27 2026 by rpki-client