This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a393a3a2f34382d3634203d3e203532343538.roa
File:                     323830333a3438303a393a3a2f34382d3634203d3e203532343538.roa (raw, json)
Hash identifier:          CIajfro2zpyHMhV5eQXpQBHIwOpiXVx9hjIAzTELmtw=
Subject key identifier:   27:73:5F:1D:70:51:39:E7:14:CB:04:73:9F:9B:EC:50:BC:5F:D1:9D
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       4C8EB7ACCC34BB49EF66024136A298EAA2DED27D
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a393a3a2f34382d3634203d3e203532343538.roa
Signing time:             Tue 06 Jan 2026 19:19:50 +0000
ROA not before:           Tue 06 Jan 2026 19:14:50 +0000
ROA not after:            Tue 05 Jan 2027 19:19:50 +0000
asID:                     52458
IP address blocks:        2803:480:9::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 01:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8e:b7:ac:cc:34:bb:49:ef:66:02:41:36:a2:98:ea:a2:de:d2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Jan  6 19:14:50 2026 GMT
            Not After : Jan  5 19:19:50 2027 GMT
        Subject: CN=27735F1D705139E714CB04739F9BEC50BC5FD19D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:b0:28:ed:24:b1:3e:3d:65:b3:30:b2:40:
                    b3:24:c9:f1:5d:04:ac:92:a2:2f:3d:99:10:ad:98:
                    50:1d:f7:73:5c:6d:00:36:57:2d:07:32:11:96:2f:
                    ce:e2:b9:01:81:a7:3d:97:b8:6a:19:83:e0:9a:35:
                    b4:b1:c9:d1:74:da:ab:5b:e8:24:13:ed:d3:e8:c0:
                    53:bf:ed:cb:9a:a1:f7:9f:ea:14:00:bf:e0:2d:77:
                    23:d8:5d:ad:16:97:57:c2:de:dd:60:cd:e8:81:eb:
                    eb:ad:57:20:e2:95:9e:7e:07:05:b2:93:db:97:72:
                    d1:2c:e3:00:dc:b4:45:4e:f7:96:3e:75:f5:bb:c0:
                    47:3f:8f:32:f8:7f:68:ed:a8:01:74:a7:be:f4:76:
                    25:7d:d8:0c:f1:4a:3f:0f:af:fe:48:6e:22:77:7b:
                    67:fc:d5:d2:e9:d0:c2:45:99:69:c5:1f:7b:f7:bd:
                    d1:1e:a9:03:8c:21:db:8a:0e:b9:ee:f7:cc:20:0e:
                    54:fa:43:c1:e2:7c:65:75:cf:57:d5:d7:65:eb:5d:
                    e3:9e:66:aa:01:3c:37:7a:d4:13:8f:bd:5a:e1:d9:
                    cc:bb:d1:60:23:2f:c8:b7:3e:8f:45:75:a6:cf:5c:
                    30:56:49:e9:4b:73:b6:dc:20:80:cd:24:7b:53:25:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:73:5F:1D:70:51:39:E7:14:CB:04:73:9F:9B:EC:50:BC:5F:D1:9D
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a393a3a2f34382d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:f3:9e:02:51:ba:33:0f:60:85:57:af:a5:ef:73:8e:fd:95:
         0a:5d:f2:58:1f:79:bb:18:6c:29:d6:e7:85:2f:f5:4a:93:aa:
         b2:90:37:d0:5a:02:10:86:8b:85:af:98:52:82:f9:39:95:95:
         50:6a:f8:f3:67:ca:f8:aa:f8:d3:85:d7:6b:2d:50:f8:cf:5b:
         2e:01:25:04:91:59:94:6f:28:52:d1:7f:ea:39:16:41:39:5b:
         76:16:49:6b:c4:00:bc:ee:1a:92:da:79:c6:c1:6e:23:08:a2:
         b6:80:eb:13:4c:0f:bf:c5:cd:18:95:6f:83:5f:38:a9:38:84:
         e2:ed:1c:f3:a4:d9:b7:b3:54:3e:a3:17:3a:c4:c2:ec:d1:5f:
         8f:01:47:b5:60:2c:01:6c:01:22:f1:b4:64:29:a4:2f:9b:1f:
         62:bf:82:da:e6:0a:2b:3d:ab:8a:64:56:0d:ae:be:1e:20:07:
         d7:8f:fa:a3:fa:24:c1:e1:9d:40:a2:b4:77:87:e6:91:78:52:
         62:7c:1a:90:ed:59:78:3b:e2:26:2a:14:cd:08:e4:f8:8f:70:
         87:7a:91:26:ba:c9:aa:7f:d7:c3:69:f4:92:d5:a0:8f:d9:a4:
         4a:c8:26:0a:7b:b5:5a:3e:85:83:7f:6b:06:44:56:48:24:a0:
         59:f4:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 18:11:22 2026 by rpki-client