This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/323830333a643130303a3a2f33322d3438203d3e203532333632.roa
File:                     323830333a643130303a3a2f33322d3438203d3e203532333632.roa (raw, json)
Hash identifier:          fkv+YaCf1AmNHDAScpsMN1drDO6qRKYoJKuzmGwCsvs=
Subject key identifier:   ED:28:69:B8:9E:35:9E:00:5E:37:22:22:00:D9:95:24:E9:BF:96:2A
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       1E57B7A4B2CD6196341B0700CCDD8F6C80A40642
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/323830333a643130303a3a2f33322d3438203d3e203532333632.roa
Signing time:             Tue 06 Jan 2026 19:04:15 +0000
ROA not before:           Tue 06 Jan 2026 18:59:15 +0000
ROA not after:            Tue 05 Jan 2027 19:04:15 +0000
asID:                     52362
IP address blocks:        2803:d100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 02:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:57:b7:a4:b2:cd:61:96:34:1b:07:00:cc:dd:8f:6c:80:a4:06:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Jan  6 18:59:15 2026 GMT
            Not After : Jan  5 19:04:15 2027 GMT
        Subject: CN=ED2869B89E359E005E37222200D99524E9BF962A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:c9:67:7b:33:2f:d9:80:40:14:99:84:7a:
                    e0:f2:03:e2:9d:be:dd:50:c4:17:c1:c8:1c:93:f9:
                    1b:93:d9:0b:2d:3d:b9:8a:a8:9e:33:06:7f:11:6d:
                    c8:28:72:03:8c:2d:8c:36:57:14:9f:4d:02:40:98:
                    fc:85:8c:b0:2e:01:a3:4a:1f:6d:b8:bb:3e:a5:c2:
                    3e:1a:aa:00:00:49:c6:b4:25:bc:29:bc:53:00:58:
                    90:d7:d0:d3:9a:67:b0:b9:f7:4b:e9:a9:2c:e3:53:
                    12:1d:c5:28:be:dd:0b:73:50:32:92:71:ed:0d:1f:
                    d0:7c:8a:89:29:e0:8b:11:db:8b:d4:1f:f6:87:6d:
                    3e:8d:1e:30:49:64:dc:5d:25:91:54:9d:6d:11:08:
                    c6:69:87:f4:46:15:d2:03:d7:65:d7:d8:d6:69:a2:
                    1c:d4:57:61:77:bb:d4:00:71:67:04:01:df:40:5b:
                    be:75:82:df:c4:46:be:a3:2c:75:9b:31:36:33:ab:
                    cb:39:f4:0b:2f:23:32:69:98:bd:73:6c:ca:07:fb:
                    d2:9a:ad:b7:52:5e:a7:5c:44:01:08:5e:da:d7:62:
                    d5:14:fc:30:1e:42:1c:33:e6:46:7a:0b:d8:48:64:
                    6e:f4:c9:09:cf:75:f3:b0:bd:2b:a1:e6:89:14:e6:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:28:69:B8:9E:35:9E:00:5E:37:22:22:00:D9:95:24:E9:BF:96:2A
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/323830333a643130303a3a2f33322d3438203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d100::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:d9:4d:d7:ef:75:45:1d:c9:b6:10:5f:c6:59:8f:69:f9:a6:
         ea:9f:05:98:55:a4:e9:74:1f:ea:96:3a:3c:29:0b:00:ac:29:
         b6:f2:52:d7:1f:21:16:fd:b5:fe:99:c4:a0:bb:5f:b2:f0:a0:
         3c:e0:69:c8:79:d9:19:ef:aa:89:5a:85:46:dd:58:21:e9:21:
         d2:e8:8c:33:ef:de:7b:5e:66:18:cd:81:ab:8b:68:3b:da:ff:
         45:74:cf:cc:50:a5:e4:74:75:ea:16:15:0c:14:40:99:86:cc:
         ab:24:02:bd:0a:25:18:13:95:42:e4:30:78:88:79:ab:b7:7e:
         3a:b7:43:83:2d:51:ce:7a:a0:d4:dd:b2:db:b9:21:34:65:01:
         79:f7:b8:a2:60:10:4b:c0:f5:15:f9:50:71:8e:45:59:93:b3:
         2d:fe:6c:18:be:fc:d0:dd:9f:a6:b0:05:6d:21:d0:68:4b:a5:
         f3:a1:80:86:99:5a:18:3e:a4:cc:07:da:08:18:e7:9b:59:34:
         68:8c:36:c0:47:ab:bf:64:97:00:70:95:a7:d8:43:6c:59:c9:
         f5:28:20:7e:7b:7e:ff:58:1b:bf:48:0d:20:81:17:cb:3e:d7:
         cc:5b:24:82:34:7c:92:e8:f4:84:b3:fc:56:aa:93:2b:ab:e8:
         15:bf:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:40:51 2026 by rpki-client