This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/323830333a373030303a3a2f33322d3438203d3e203532333632.roa
File:                     323830333a373030303a3a2f33322d3438203d3e203532333632.roa (raw, json)
Hash identifier:          gvyCUfub6+iZwKNT0bD8Lhmilryn0CnTB8wURm5Xke4=
Subject key identifier:   C3:FE:27:C2:29:F5:7F:88:E4:55:53:24:BF:6A:A3:91:8F:B1:6C:02
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       41A76AFDB24B7E8A152DFCBB2F889589059947DD
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/323830333a373030303a3a2f33322d3438203d3e203532333632.roa
Signing time:             Tue 06 Jan 2026 19:04:13 +0000
ROA not before:           Tue 06 Jan 2026 18:59:13 +0000
ROA not after:            Tue 05 Jan 2027 19:04:13 +0000
asID:                     52362
IP address blocks:        2803:7000::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 02:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a7:6a:fd:b2:4b:7e:8a:15:2d:fc:bb:2f:88:95:89:05:99:47:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Jan  6 18:59:13 2026 GMT
            Not After : Jan  5 19:04:13 2027 GMT
        Subject: CN=C3FE27C229F57F88E4555324BF6AA3918FB16C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:9b:0b:25:af:c7:6a:31:aa:8e:a0:de:13:
                    a1:63:e2:a4:10:e8:84:08:09:c3:62:aa:b3:d2:24:
                    be:eb:b1:ea:2f:a4:57:21:24:fe:6c:52:d2:d5:a1:
                    0e:2d:6a:67:e1:7c:06:1a:31:46:82:6c:3d:aa:0a:
                    d2:c4:25:cc:dc:ae:57:b6:92:dd:61:3f:5a:70:ae:
                    44:db:12:32:22:f9:d0:3c:cc:e0:22:f1:56:c0:d7:
                    b4:d9:c0:72:ed:c2:12:eb:7b:29:81:37:b8:ac:69:
                    bb:56:99:7a:71:93:90:a3:3f:0a:83:a5:ae:c8:95:
                    5f:3b:46:a3:e4:df:d7:47:59:08:0b:c8:f3:ed:9f:
                    c5:b7:c0:25:de:49:48:83:9f:20:bc:6f:f7:5c:6b:
                    eb:fa:86:16:9e:0e:31:2c:3a:fe:66:01:53:6e:00:
                    60:fc:57:88:40:c7:a3:42:20:d1:26:16:44:48:1c:
                    7c:cd:f9:bb:46:fb:91:7e:34:f9:cc:0f:eb:91:b3:
                    97:09:79:68:dc:59:00:26:42:14:74:ff:30:d5:7c:
                    fe:ca:ea:c8:e1:ba:c2:7c:1d:e2:c6:11:f7:db:94:
                    8e:a0:48:c9:8c:1e:8f:d6:33:bb:44:fa:01:79:88:
                    7f:bd:1d:ac:3d:4d:8b:de:42:23:4e:8f:d7:ec:66:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FE:27:C2:29:F5:7F:88:E4:55:53:24:BF:6A:A3:91:8F:B1:6C:02
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/323830333a373030303a3a2f33322d3438203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7000::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:85:0e:70:c1:51:d4:1e:e7:8e:46:ac:5a:66:62:8b:16:97:
         02:af:88:86:ec:5c:cf:fd:71:0a:c7:fc:42:b2:b9:5f:24:32:
         59:28:35:6d:de:b4:02:2e:a7:2a:86:ac:68:5f:8e:97:07:ba:
         da:cf:66:0a:1c:b3:57:b8:b4:ee:0c:e6:04:f5:9a:91:8b:77:
         ee:d9:80:24:d9:5e:05:ae:7f:11:db:66:80:0d:c8:7e:fa:f6:
         c3:28:43:cb:e2:fb:46:9d:5f:9a:6f:d3:ba:2b:39:a7:3d:35:
         d6:95:86:58:f7:75:ab:d7:79:9b:1e:4b:8c:a6:a9:15:5c:11:
         03:4b:90:c0:3d:5c:63:82:a2:6c:5b:ff:dc:a0:51:85:9e:6c:
         2f:ed:86:38:57:77:31:e8:43:3e:e9:24:da:61:f7:f4:12:06:
         bc:74:b0:f9:f9:3b:85:43:8f:54:e7:01:ce:d3:ff:7f:bf:f1:
         a8:3b:f3:10:a2:19:5d:40:43:0d:61:c4:53:86:2c:80:d1:c2:
         cc:9a:72:8b:37:49:7a:50:c0:5e:97:d7:7d:2a:d0:99:c2:74:
         c2:ff:d7:15:c0:6b:3c:90:de:fe:de:28:9a:06:ef:fe:ab:b9:
         9b:7a:0b:f8:ab:a4:db:0a:7d:73:e7:10:79:37:70:50:ef:a2:
         ba:ab:d1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:22:10 2026 by rpki-client