This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31393a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a31393a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          patGxgTp04u3qhYtRlg2AqjtM7HWxynrF9SKmTwgSsI=
Subject key identifier:   97:47:90:DC:39:83:6D:D8:98:63:AC:83:4E:33:84:34:10:9B:58:11
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       5CDBA0290F9C5D5FD980E3060B7F02E494A8C3DC
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31393a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 06 Jan 2026 19:19:52 +0000
ROA not before:           Tue 06 Jan 2026 19:14:52 +0000
ROA not after:            Tue 05 Jan 2027 19:19:52 +0000
asID:                     52458
IP address blocks:        2803:480:19::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 01:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:db:a0:29:0f:9c:5d:5f:d9:80:e3:06:0b:7f:02:e4:94:a8:c3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Jan  6 19:14:52 2026 GMT
            Not After : Jan  5 19:19:52 2027 GMT
        Subject: CN=974790DC39836DD89863AC834E338434109B5811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:d9:44:3b:ca:23:73:39:20:87:55:d7:ba:
                    3b:02:fd:8a:ae:ad:04:b4:7e:7c:a3:31:22:86:34:
                    ae:d7:c1:3f:2d:b9:c4:3e:44:5b:d4:36:11:a9:e2:
                    7c:30:81:ff:55:33:2d:14:17:bc:70:af:39:fc:8d:
                    e6:6a:85:78:6b:02:25:c5:ae:e5:9a:f2:be:db:7d:
                    a2:fa:50:be:35:44:c2:ac:21:16:97:9c:73:ff:5c:
                    93:b3:4c:40:1a:31:9f:1f:fa:f6:a5:a9:a2:55:46:
                    41:f6:eb:e1:8b:10:b4:c1:38:35:fe:b5:53:6a:b8:
                    5e:57:fe:fe:d1:d5:02:4d:ac:ee:3e:45:b4:38:17:
                    ea:14:80:18:9d:11:81:d4:72:59:ee:88:42:df:03:
                    6c:54:0b:39:54:c4:c0:48:4a:fe:64:31:ae:2a:19:
                    a7:21:66:f0:1a:8d:46:12:0b:72:93:eb:86:9f:2c:
                    53:12:ea:eb:39:29:87:f2:d9:0b:96:1a:2a:bb:a0:
                    ab:80:58:c7:d7:95:0f:15:32:19:cd:a2:34:e2:51:
                    f3:5e:40:bd:74:39:71:55:9e:89:bc:e1:05:15:bb:
                    c3:a1:10:c5:c8:da:ea:2f:7b:1f:69:8f:c8:39:e7:
                    a6:b0:7e:30:d2:2d:63:c3:f6:04:2b:58:0b:a2:3c:
                    d7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:47:90:DC:39:83:6D:D8:98:63:AC:83:4E:33:84:34:10:9B:58:11
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a31393a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:19::/64

    Signature Algorithm: sha256WithRSAEncryption
         57:02:b9:93:89:22:80:65:db:30:8f:3c:64:78:28:48:68:72:
         f0:f5:c6:b9:18:15:2a:f2:f3:04:40:74:89:f1:fe:5d:46:7e:
         da:7b:fa:32:7e:ae:93:71:e7:c9:9e:ca:1d:ed:78:4a:7e:4c:
         79:1c:0b:38:99:30:bc:8c:43:97:ef:fd:df:77:32:46:01:1d:
         8a:bf:c5:2e:7a:1a:eb:ec:05:76:a8:05:3d:a1:a4:51:90:dc:
         ea:a6:6d:f5:f2:2f:33:3a:c8:e7:70:87:c9:06:df:37:17:4b:
         d5:d3:1f:02:24:ac:50:95:b1:d5:78:30:3a:cc:e6:e9:b6:4e:
         8d:39:45:75:e6:7b:4a:82:96:d8:67:a0:5c:9b:a4:da:c4:e8:
         3e:09:d7:7b:2b:82:24:66:3f:9f:c2:af:19:30:18:90:54:48:
         13:a3:95:69:fc:9e:0f:c5:ca:36:9d:73:45:63:16:e6:4f:62:
         fa:13:47:d2:34:aa:e0:c9:68:2b:e8:7e:ca:58:f3:21:9e:2f:
         06:c6:b1:e0:66:56:1c:eb:9f:04:10:99:1b:4c:24:d1:b8:b8:
         24:15:9b:e0:55:ae:85:e7:85:35:85:59:fa:35:b5:00:36:4d:
         fd:aa:b6:56:be:aa:7c:3b:db:45:08:e9:8f:21:76:26:d3:97:
         4b:b3:83:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 18:10:36 2026 by rpki-client