This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/323830333a656336303a666630303a3a2f34302d3438203d3e203131363634.roa
File:                     323830333a656336303a666630303a3a2f34302d3438203d3e203131363634.roa (raw, json)
Hash identifier:          nvif35x9zMHhEYRKe37LJLsDDVCZUILgIwMq+CoAcY8=
Subject key identifier:   CA:73:5F:A8:56:1D:53:AE:A6:AE:97:A3:DC:09:98:CB:36:75:8F:6B
Certificate issuer:       /CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
Certificate serial:       45C45CF930896D5FE0ABB4954B4AFF200DFEBBA7
Authority key identifier: 24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/323830333a656336303a666630303a3a2f34302d3438203d3e203131363634.roa
Signing time:             Tue 16 Dec 2025 17:45:00 +0000
ROA not before:           Tue 16 Dec 2025 17:40:00 +0000
ROA not after:            Tue 15 Dec 2026 17:45:00 +0000
asID:                     11664
IP address blocks:        2803:ec60:ff00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 14:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c4:5c:f9:30:89:6d:5f:e0:ab:b4:95:4b:4a:ff:20:0d:fe:bb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
        Validity
            Not Before: Dec 16 17:40:00 2025 GMT
            Not After : Dec 15 17:45:00 2026 GMT
        Subject: CN=CA735FA8561D53AEA6AE97A3DC0998CB36758F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:90:90:14:05:8f:2f:16:d4:0c:91:b0:ca:bb:
                    31:e5:ca:ad:8d:7b:3f:04:6b:79:ef:53:cb:a1:ef:
                    bf:8f:be:85:f7:2a:72:bf:38:b2:86:9c:f0:16:17:
                    a5:11:99:79:27:34:c5:f3:87:06:d6:79:e7:3c:98:
                    85:50:33:b5:2b:d4:74:34:c4:e5:73:c1:f9:0e:ad:
                    19:e6:51:63:e1:67:13:c5:f8:c2:11:91:e5:e0:1c:
                    27:92:fd:dc:77:8d:55:18:15:08:5b:dd:26:1c:d8:
                    bf:21:fc:89:d6:5f:e1:65:5f:96:83:0b:14:4a:13:
                    a5:be:54:d2:6c:60:47:c9:07:ef:d5:3e:37:be:40:
                    08:91:89:c2:a9:53:da:75:1c:94:c2:f5:f6:33:8c:
                    42:0c:5b:23:93:0d:cb:34:67:28:02:a9:f1:99:1a:
                    70:8c:d1:4a:86:6f:98:93:ba:6d:55:6e:a3:70:cd:
                    ef:22:5c:2d:e3:5d:43:9d:ef:9f:26:c2:33:e0:e1:
                    44:1a:1a:dc:8b:cf:e3:51:02:1b:f3:5a:c5:6c:64:
                    ae:0f:3f:71:92:cf:8d:a0:2b:56:4a:3f:98:2c:f0:
                    e4:e4:9e:0b:50:37:58:8c:b6:38:fb:f4:71:77:fb:
                    56:6e:a1:95:3b:50:b0:5f:82:52:4a:b9:8f:6d:5e:
                    c9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:73:5F:A8:56:1D:53:AE:A6:AE:97:A3:DC:09:98:CB:36:75:8F:6B
            X509v3 Authority Key Identifier:
                keyid:24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/323830333a656336303a666630303a3a2f34302d3438203d3e203131363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ec60:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:76:1b:27:24:00:61:a0:cb:01:bc:43:64:9e:32:1e:14:a4:
         ef:52:ec:6f:c7:45:a7:70:b6:4d:34:db:fb:d2:ca:84:8a:ea:
         a8:e1:df:24:da:58:5f:39:93:ae:e4:b6:ff:e5:ab:5f:b2:ab:
         9f:6a:33:ce:cc:63:ff:d9:55:25:9a:53:39:4e:d9:42:ea:57:
         0d:67:e3:25:7c:8f:43:9f:cd:16:d8:f0:d5:98:de:cc:34:5f:
         d8:2d:6b:a7:b7:c7:aa:5e:a6:33:d7:cc:36:d7:34:0f:5c:db:
         ba:6b:df:33:90:fe:47:64:ed:88:90:97:c4:b0:fe:4c:71:99:
         22:79:b5:d0:39:f3:9d:3b:e3:ad:4f:51:ef:ad:12:70:ad:3c:
         0b:95:1f:aa:ff:f9:30:49:8b:ec:f1:91:9c:f8:6a:f1:d8:88:
         8c:27:a6:01:a4:56:bd:87:cc:66:8a:2e:02:cd:4a:d5:2c:e2:
         6d:fb:1c:c8:d3:09:04:ee:58:f7:c4:e9:35:3b:37:32:ae:9d:
         a0:7b:8e:36:86:b0:4f:91:49:e3:4b:7c:bf:a1:94:7c:44:9f:
         6f:90:47:63:e0:a0:7c:b4:86:4a:25:50:88:22:cc:87:2f:bf:
         3b:71:17:8c:39:0f:98:a5:04:a9:b7:3d:d6:47:19:97:8e:c6:
         00:b9:6d:a6
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIURcRc+TCJbV/gq7SVS0r/IA3+u6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRDRDAyRjU4NjFBMjkwQ0I4NzIyRjQ5NUQwODdDNUZD
MzRFQjNBODAeFw0yNTEyMTYxNzQwMDBaFw0yNjEyMTUxNzQ1MDBaMDMxMTAvBgNV
BAMTKENBNzM1RkE4NTYxRDUzQUVBNkFFOTdBM0RDMDk5OENCMzY3NThGNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkJAUBY8vFtQMkbDKuzHlyq2N
ez8Ea3nvU8uh77+PvoX3KnK/OLKGnPAWF6URmXknNMXzhwbWeec8mIVQM7Ur1HQ0
xOVzwfkOrRnmUWPhZxPF+MIRkeXgHCeS/dx3jVUYFQhb3SYc2L8h/InWX+FlX5aD
CxRKE6W+VNJsYEfJB+/VPje+QAiRicKpU9p1HJTC9fYzjEIMWyOTDcs0ZygCqfGZ
GnCM0UqGb5iTum1VbqNwze8iXC3jXUOd758mwjPg4UQaGtyLz+NRAhvzWsVsZK4P
P3GSz42gK1ZKP5gs8OTkngtQN1iMtjj79HF3+1ZuoZU7ULBfglJKuY9tXslPAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUynNfqFYdU66mrpej3AmYyzZ1j2swHwYDVR0j
BBgwFoAUJM0C9YYaKQy4ci9JXQh8X8NOs6gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQ0UwMjhGM0ZEMkUyQTY4RkU0QTk4RjRFQkM3QzE4MDYw
MDlFNkYwOTY0Qjk0QkExQUYwQjU2NjU1RjVGMjJCLzAvMjRDRDAyRjU4NjFBMjkw
Q0I4NzIyRjQ5NUQwODdDNUZDMzRFQjNBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNENEMDJGNTg2MUEyOTBDQjg3
MjJGNDk1RDA4N0M1RkMzNEVCM0E4LmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRENFMDI4RjNGRDJFMkE2OEZFNEE5OEY0RUJDN0MxODA2MDA5RTZGMDk2
NEI5NEJBMUFGMEI1NjY1NUY1RjIyQi8wLzMyMzgzMDMzM2E2NTYzMzYzMDNhNjY2
NjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMTMxMzYzNjM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAKAPsYP8wDQYJKoZIhvcNAQELBQADggEBAD52GyckAGGgywG8Q2SeMh4UpO9S
7G/HRadwtk002/vSyoSK6qjh3yTaWF85k67ktv/lq1+yq59qM87MY//ZVSWaUzlO
2ULqVw1n4yV8j0OfzRbY8NWY3sw0X9gta6e3x6pepjPXzDbXNA9c27pr3zOQ/kdk
7YiQl8Sw/kxxmSJ5tdA58507461PUe+tEnCtPAuVH6r/+TBJi+zxkZz4avHYiIwn
pgGkVr2HzGaKLgLNStUs4m37HMjTCQTuWPfE6TU7NzKunaB7jjaGsE+RSeNLfL+h
lHxEn2+QR2PgoHy0hkolUIgizIcvvztxF4w5D5ilBKm3PdZHGZeOxgC5baY=
-----END CERTIFICATE-----
Generated at Fri Dec 19 13:10:01 2025 by rpki-client