This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/323830333a666536303a3a2f33322d3336203d3e20323734313634.roa
File:                     323830333a666536303a3a2f33322d3336203d3e20323734313634.roa (raw, json)
Hash identifier:          HRSNal64ry8yO+4HyucNa9X9q46DLmDCzAFvNyXcabQ=
Subject key identifier:   3E:0F:BC:8C:C2:B0:36:8C:18:CD:C7:C6:91:89:31:AF:44:A1:FD:0C
Certificate issuer:       /CN=8EE0805B2F4DBF96BAEDDD903E1F4BC611A22B8B
Certificate serial:       65D57B10DD0350BA17FC8B23785B7396BA7EADAE
Authority key identifier: 8E:E0:80:5B:2F:4D:BF:96:BA:ED:DD:90:3E:1F:4B:C6:11:A2:2B:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EE0805B2F4DBF96BAEDDD903E1F4BC611A22B8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/323830333a666536303a3a2f33322d3336203d3e20323734313634.roa
Signing time:             Thu 11 Dec 2025 18:00:00 +0000
ROA not before:           Thu 11 Dec 2025 17:55:00 +0000
ROA not after:            Thu 10 Dec 2026 18:00:00 +0000
asID:                     274164
IP address blocks:        2803:fe60::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/8EE0805B2F4DBF96BAEDDD903E1F4BC611A22B8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/8EE0805B2F4DBF96BAEDDD903E1F4BC611A22B8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EE0805B2F4DBF96BAEDDD903E1F4BC611A22B8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d5:7b:10:dd:03:50:ba:17:fc:8b:23:78:5b:73:96:ba:7e:ad:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE0805B2F4DBF96BAEDDD903E1F4BC611A22B8B
        Validity
            Not Before: Dec 11 17:55:00 2025 GMT
            Not After : Dec 10 18:00:00 2026 GMT
        Subject: CN=3E0FBC8CC2B0368C18CDC7C6918931AF44A1FD0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:60:77:b1:f0:5b:b6:33:67:51:0c:a2:35:a5:
                    ea:b2:00:cb:d1:48:22:bd:1d:20:5f:b7:84:8d:13:
                    39:a3:02:c2:2a:a9:e2:5c:4b:79:e4:a0:64:78:76:
                    43:76:66:e5:60:0c:8d:ec:00:53:a6:56:4d:ac:19:
                    87:0d:86:ab:e9:cf:63:f8:fb:87:47:73:4f:c7:2b:
                    87:66:ae:3f:c3:a9:ed:c7:90:f5:45:c7:e2:bc:5e:
                    93:e7:20:2d:23:ce:09:37:70:02:e2:71:c0:c8:0c:
                    85:02:18:ff:ff:63:e1:e6:3e:bf:2f:57:d0:52:34:
                    c2:9d:e8:5d:d8:e2:38:d7:72:55:08:96:53:03:c6:
                    c4:32:bf:d2:bf:e9:50:10:36:92:1d:72:c1:46:bd:
                    d0:e7:42:ec:fc:7e:69:d0:88:80:ed:4e:fc:38:4d:
                    56:b9:bd:40:c6:88:b5:61:cc:cc:5f:16:ae:b3:87:
                    8a:fb:4d:7c:fe:ed:72:11:77:9d:62:30:6d:b2:da:
                    a8:58:50:ea:ce:9a:b7:d7:40:df:58:d0:56:f2:ae:
                    86:5f:b5:11:4f:df:45:d4:99:a7:42:da:59:6b:6a:
                    ed:34:b7:9e:45:c5:c3:30:f9:1a:7d:58:87:26:ef:
                    63:e0:7f:de:2d:38:e0:b7:a2:e4:04:c7:6e:23:74:
                    61:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0F:BC:8C:C2:B0:36:8C:18:CD:C7:C6:91:89:31:AF:44:A1:FD:0C
            X509v3 Authority Key Identifier:
                keyid:8E:E0:80:5B:2F:4D:BF:96:BA:ED:DD:90:3E:1F:4B:C6:11:A2:2B:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/8EE0805B2F4DBF96BAEDDD903E1F4BC611A22B8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EE0805B2F4DBF96BAEDDD903E1F4BC611A22B8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/323830333a666536303a3a2f33322d3336203d3e20323734313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fe60::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:fd:18:03:65:0b:fc:d7:3a:b0:2f:39:d0:b0:d1:80:fa:6d:
         7c:a3:a2:5b:55:19:88:5f:f6:35:e9:57:c0:36:f9:46:81:c5:
         fd:dc:53:96:72:43:6b:ab:ef:1c:d5:fb:94:28:96:d7:2b:50:
         96:1d:3e:ae:67:bc:22:ef:3b:d4:6c:f2:3c:7f:a3:0e:a2:15:
         dd:e4:5a:5d:7b:26:f8:bd:88:23:8f:9a:e8:09:5a:bf:6d:92:
         f2:43:ad:1e:13:fa:5e:17:6a:44:1d:70:bf:3f:2f:bb:9a:03:
         35:d2:c6:60:b1:08:12:84:93:11:5c:4c:51:a1:83:74:5f:b3:
         14:28:b7:29:30:75:d5:f1:99:35:40:3d:5b:26:f6:a3:8e:86:
         01:d2:c4:ce:1d:7b:ba:ee:02:40:7d:3a:d2:48:b7:2e:44:d2:
         ea:cb:84:76:ea:f6:d9:bb:55:a6:e2:ad:61:a8:12:88:8e:29:
         51:df:d1:c0:83:3e:28:7c:cd:8e:8e:61:08:18:53:64:b8:11:
         bd:9c:10:17:12:5b:ac:b7:05:65:fb:34:3d:68:4e:8e:22:0c:
         bc:a3:7b:33:58:0a:da:f2:7a:30:f0:1c:4d:71:1c:66:cc:2e:
         9f:6c:b2:5a:51:9b:76:bd:b8:02:19:7e:97:a5:63:fa:0e:13:
         e1:a7:d9:c6
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUZdV7EN0DULoX/IsjeFtzlrp+ra4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFMDgwNUIyRjREQkY5NkJBRURERDkwM0UxRjRCQzYx
MUEyMkI4QjAeFw0yNTEyMTExNzU1MDBaFw0yNjEyMTAxODAwMDBaMDMxMTAvBgNV
BAMTKDNFMEZCQzhDQzJCMDM2OEMxOENEQzdDNjkxODkzMUFGNDRBMUZEMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlYHex8Fu2M2dRDKI1peqyAMvR
SCK9HSBft4SNEzmjAsIqqeJcS3nkoGR4dkN2ZuVgDI3sAFOmVk2sGYcNhqvpz2P4
+4dHc0/HK4dmrj/Dqe3HkPVFx+K8XpPnIC0jzgk3cALiccDIDIUCGP//Y+HmPr8v
V9BSNMKd6F3Y4jjXclUIllMDxsQyv9K/6VAQNpIdcsFGvdDnQuz8fmnQiIDtTvw4
TVa5vUDGiLVhzMxfFq6zh4r7TXz+7XIRd51iMG2y2qhYUOrOmrfXQN9Y0FbyroZf
tRFP30XUmadC2llrau00t55FxcMw+Rp9WIcm72Pgf94tOOC3ouQEx24jdGG5AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUPg+8jMKwNowYzcfGkYkxr0Sh/QwwHwYDVR0j
BBgwFoAUjuCAWy9Nv5a67d2QPh9LxhGiK4swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUQwN0Y2RThBOEVDNTRDRDZBM0QzMjcwNDExMDI5NDk0
MDE5Q0I5OTZBQTdBNzg5QzNCN0UyQjVFNTMwRTQ2LzAvOEVFMDgwNUIyRjREQkY5
NkJBRURERDkwM0UxRjRCQzYxMUEyMkI4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RUUwODA1QjJGNERCRjk2QkFF
REREOTAzRTFGNEJDNjExQTIyQjhCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVEMDdGNkU4QThFQzU0Q0Q2QTNEMzI3MDQxMTAyOTQ5NDAxOUNCOTk2
QUE3QTc4OUMzQjdFMkI1RTUzMEU0Ni8wLzMyMzgzMDMzM2E2NjY1MzYzMDNhM2Ey
ZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzczNDMxMzYzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD/mAw
DQYJKoZIhvcNAQELBQADggEBALL9GANlC/zXOrAvOdCw0YD6bXyjoltVGYhf9jXp
V8A2+UaBxf3cU5ZyQ2ur7xzV+5QoltcrUJYdPq5nvCLvO9Rs8jx/ow6iFd3kWl17
Jvi9iCOPmugJWr9tkvJDrR4T+l4XakQdcL8/L7uaAzXSxmCxCBKEkxFcTFGhg3Rf
sxQotykwddXxmTVAPVsm9qOOhgHSxM4de7ruAkB9OtJIty5E0urLhHbq9tm7Vabi
rWGoEoiOKVHf0cCDPih8zY6OYQgYU2S4Eb2cEBcSW6y3BWX7ND1oTo4iDLyjezNY
CtryejDwHE1xHGbMLp9sslpRm3a9uAIZfpelY/oOE+Gn2cY=
-----END CERTIFICATE-----
Generated at Wed Dec 17 07:37:32 2025 by rpki-client