This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/323830333a333635303a3a2f34302d3438203d3e20323733323038.roa
File:                     323830333a333635303a3a2f34302d3438203d3e20323733323038.roa (raw, json)
Hash identifier:          28x2KfKbBKe899p6BMXZF/z53sMqTcq6P7YESU3A7C8=
Subject key identifier:   F5:05:A1:95:2A:B0:F6:09:4A:06:00:73:B5:BF:D5:7C:19:D6:C5:D0
Certificate issuer:       /CN=2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9
Certificate serial:       2EA8CBF16F31E4E34FDE79061E644E28D36B624C
Authority key identifier: 2D:6E:02:9E:FD:DB:CA:B8:D0:BD:DD:E5:27:4D:B6:82:DD:41:54:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/323830333a333635303a3a2f34302d3438203d3e20323733323038.roa
Signing time:             Sat 13 Dec 2025 11:55:00 +0000
ROA not before:           Sat 13 Dec 2025 11:50:00 +0000
ROA not after:            Sat 12 Dec 2026 11:55:00 +0000
asID:                     273208
IP address blocks:        2803:3650::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 17:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a8:cb:f1:6f:31:e4:e3:4f:de:79:06:1e:64:4e:28:d3:6b:62:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9
        Validity
            Not Before: Dec 13 11:50:00 2025 GMT
            Not After : Dec 12 11:55:00 2026 GMT
        Subject: CN=F505A1952AB0F6094A060073B5BFD57C19D6C5D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:37:29:4d:7a:02:45:5a:24:77:bd:35:1d:d8:
                    b0:b2:68:7e:21:48:00:09:62:a3:81:9b:20:75:98:
                    cc:1d:72:11:0e:e8:4b:9e:e6:a6:cb:fa:e7:95:af:
                    e0:62:02:52:28:4f:12:76:50:ed:cc:dd:8c:e1:ce:
                    0c:96:38:2c:39:34:76:c8:18:8c:05:6c:b3:b8:ee:
                    b7:57:a5:71:02:15:3f:f4:92:2c:aa:30:27:e4:d1:
                    0b:89:12:ea:86:0d:6e:87:24:0f:59:62:9c:5e:4f:
                    8b:e7:68:f4:dd:52:91:c3:bf:31:4e:0f:31:81:59:
                    ed:b0:62:5f:ed:f3:81:06:0d:0b:bd:b7:dd:5b:ac:
                    7b:16:e3:58:b1:ec:af:d6:b7:1a:74:f3:cd:73:09:
                    c9:f4:39:41:bd:32:49:f0:2f:0f:64:c5:8d:f3:dd:
                    38:20:84:71:8f:47:7f:61:be:39:9c:8b:a7:d9:e0:
                    59:33:05:76:c7:15:fc:04:11:22:a1:06:fd:d4:15:
                    74:d6:34:2b:cf:a4:3a:b5:9e:94:e8:cf:f5:a8:aa:
                    3c:9e:f4:32:f0:59:5a:71:35:41:ab:d4:34:7b:ba:
                    23:54:88:46:3c:39:07:e0:70:ef:ee:ff:22:f0:82:
                    81:98:ac:52:e7:b8:67:ee:a5:2c:8b:e7:ad:3c:e5:
                    a9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:05:A1:95:2A:B0:F6:09:4A:06:00:73:B5:BF:D5:7C:19:D6:C5:D0
            X509v3 Authority Key Identifier:
                keyid:2D:6E:02:9E:FD:DB:CA:B8:D0:BD:DD:E5:27:4D:B6:82:DD:41:54:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D6E029EFDDBCAB8D0BDDDE5274DB682DD4154B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/323830333a333635303a3a2f34302d3438203d3e20323733323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3650::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:fb:4b:7a:fe:01:57:fe:32:2c:c4:e0:e0:50:f6:9e:a0:7f:
         db:d3:7a:6a:6b:8b:b5:fe:f5:c7:ce:cb:10:a6:e6:25:fc:30:
         ba:47:2a:c6:6e:4a:0a:52:bd:db:53:ff:43:4e:b8:20:d2:ac:
         f4:9b:cf:c9:94:14:1f:86:0f:ec:9d:23:b2:ea:f6:dc:7d:2c:
         d1:8a:87:9b:a2:b1:74:0f:5e:3f:4c:42:54:a6:94:27:b3:16:
         74:e6:bc:22:fc:35:68:fc:af:ec:51:24:7d:fb:94:62:28:3f:
         b8:83:34:8e:78:cb:07:88:4b:47:4d:ed:f1:89:d5:34:50:29:
         b4:54:c8:fd:5a:31:5c:66:32:d8:18:18:b5:c9:57:09:99:35:
         e8:b6:f6:71:a9:af:c4:b1:07:e5:f9:4a:5e:52:0d:c1:3a:a8:
         98:aa:c5:38:52:bf:ba:39:6f:af:c2:94:77:cb:5b:e4:fe:b0:
         ad:ff:56:f2:1a:ca:59:78:0c:3d:a9:f2:6c:a2:d0:0b:60:9c:
         f5:2f:ef:7f:96:2c:6e:06:68:9c:91:5e:3c:a1:87:bd:6d:1f:
         1f:0f:a9:92:c1:6b:f1:69:cc:3d:70:62:e5:36:12:82:b4:77:
         93:41:33:27:2e:4c:da:79:a5:d5:0c:bd:d4:16:01:33:cc:78:
         48:1b:9f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 07:37:32 2025 by rpki-client