This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a383a3a2f36342d3634203d3e203532343538.roa
File:                     323830333a3438303a383a3a2f36342d3634203d3e203532343538.roa (raw, json)
Hash identifier:          AeanIbWZ+XfAzDWXn2FXiwtM4WL/iUgJP0EmFF2bDmI=
Subject key identifier:   4B:1D:C0:BB:B4:93:26:68:16:E1:5A:5C:17:7D:20:F0:03:1E:D4:9F
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       04D0BE562554A87666D968F057A931EB8A07E80C
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a383a3a2f36342d3634203d3e203532343538.roa
Signing time:             Tue 06 Jan 2026 19:19:50 +0000
ROA not before:           Tue 06 Jan 2026 19:14:50 +0000
ROA not after:            Tue 05 Jan 2027 19:19:50 +0000
asID:                     52458
IP address blocks:        2803:480:8::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 01:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d0:be:56:25:54:a8:76:66:d9:68:f0:57:a9:31:eb:8a:07:e8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Jan  6 19:14:50 2026 GMT
            Not After : Jan  5 19:19:50 2027 GMT
        Subject: CN=4B1DC0BBB493266816E15A5C177D20F0031ED49F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:e8:f3:e9:ad:a1:dd:1d:df:60:31:e5:58:
                    6f:46:26:dc:02:83:85:cb:d5:2a:ed:b9:e1:50:48:
                    27:60:74:7d:22:0d:d7:33:07:f4:38:19:a8:4f:01:
                    cc:05:9a:65:16:43:8c:3c:0b:f5:24:b1:05:cb:8f:
                    6e:d6:94:42:8d:6b:db:67:72:0d:05:af:9e:44:32:
                    a9:42:23:64:cb:4d:c1:12:e7:ed:5f:19:4c:46:a9:
                    77:ae:b1:3f:35:f4:ea:d1:ea:61:95:ce:05:e1:a7:
                    bc:15:9a:0d:f9:0a:d4:0b:41:fa:eb:8f:97:41:1e:
                    37:57:57:d6:6d:d7:4f:df:8c:40:79:59:79:e4:a4:
                    d1:d8:a9:9e:7f:49:57:6e:1a:56:8a:fe:c5:42:04:
                    40:d0:7c:19:27:eb:69:90:70:2e:ff:43:e0:e7:fe:
                    3c:55:b9:71:8b:98:84:c6:2b:70:37:68:08:94:2c:
                    39:71:31:ff:3d:f2:64:51:c6:18:a0:9b:d6:bf:6f:
                    d3:39:23:02:69:9b:63:30:93:52:0d:10:03:0c:44:
                    46:d8:64:8b:af:c1:b9:4b:b5:ac:19:55:42:49:54:
                    7e:90:d9:92:e1:35:c8:72:7b:59:fa:86:46:4a:cd:
                    6f:da:e7:ac:17:e4:ff:3d:f2:23:c6:94:5a:72:d3:
                    07:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1D:C0:BB:B4:93:26:68:16:E1:5A:5C:17:7D:20:F0:03:1E:D4:9F
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a383a3a2f36342d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:8::/64

    Signature Algorithm: sha256WithRSAEncryption
         52:73:85:0b:a4:97:79:3b:3d:9f:76:77:26:91:92:67:63:7a:
         3b:93:ed:9a:07:df:a1:df:a1:7c:40:3d:98:53:4c:86:ad:3d:
         e2:44:4d:9a:5a:39:5d:6d:f3:e6:8e:4b:9e:0b:49:c7:f8:92:
         27:ca:8a:d5:16:7a:21:b0:b1:ea:c7:e9:17:79:a9:66:95:e9:
         46:90:12:d6:a3:fa:6f:7a:62:12:18:71:ff:78:21:13:e6:eb:
         19:61:5f:83:a7:1d:62:1a:33:0d:74:f9:6d:56:bf:10:76:ab:
         bc:f8:b8:05:22:cf:f6:0f:58:8f:87:2b:22:76:79:d1:6e:18:
         fd:74:d3:cb:0b:29:d0:26:0e:21:fa:bf:e5:60:f9:34:90:e4:
         98:00:84:b6:14:62:d0:0a:55:19:14:2c:a6:e5:0a:26:90:11:
         da:49:6c:89:8e:b7:88:37:68:37:84:12:f4:7e:7e:24:00:29:
         9e:fe:4f:9b:1e:be:5f:4c:fa:b0:7e:0e:b8:a9:b2:ae:09:c5:
         d8:a0:8d:aa:3b:29:13:33:ac:13:1f:e6:f8:3c:53:3e:93:9f:
         92:ee:ca:d2:99:b8:a2:5d:6f:59:fc:6e:04:9d:75:06:3c:72:
         0f:15:3c:be:f3:ce:88:ae:63:ad:4b:ac:1d:b0:a3:f1:59:95:
         54:b2:79:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 18:11:12 2026 by rpki-client