This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/323830333a343432303a3a2f33322d3438203d3e203532333237.roa
File:                     323830333a343432303a3a2f33322d3438203d3e203532333237.roa (raw, json)
Hash identifier:          fi9QLiVaFEbwW14gZ0Vyty0ZNNhggDuwLNiesxRf+E0=
Subject key identifier:   83:07:C7:1D:09:CD:2F:98:94:AB:7B:70:65:F2:97:97:05:B2:FA:F6
Certificate issuer:       /CN=49D8CCEA8049862215045F45EF0D87C4CB0A6F15
Certificate serial:       6B8411F5CCC42A04480B7207E4810DE8CC070B54
Authority key identifier: 49:D8:CC:EA:80:49:86:22:15:04:5F:45:EF:0D:87:C4:CB:0A:6F:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/323830333a343432303a3a2f33322d3438203d3e203532333237.roa
Signing time:             Wed 07 Jan 2026 19:59:16 +0000
ROA not before:           Wed 07 Jan 2026 19:54:16 +0000
ROA not after:            Wed 06 Jan 2027 19:59:16 +0000
asID:                     52327
IP address blocks:        2803:4420::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 21:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:84:11:f5:cc:c4:2a:04:48:0b:72:07:e4:81:0d:e8:cc:07:0b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49D8CCEA8049862215045F45EF0D87C4CB0A6F15
        Validity
            Not Before: Jan  7 19:54:16 2026 GMT
            Not After : Jan  6 19:59:16 2027 GMT
        Subject: CN=8307C71D09CD2F9894AB7B7065F2979705B2FAF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7a:cb:c7:e3:af:43:f1:07:17:d6:cf:9d:72:
                    cd:97:2c:77:cb:b7:8b:8d:48:c5:c7:ac:20:a5:63:
                    02:07:1f:e6:14:11:9f:77:c3:fa:ce:39:55:76:0e:
                    d1:2d:2e:02:c2:a3:5a:31:95:68:1d:55:c3:48:69:
                    a9:7a:df:92:42:3e:53:22:46:82:8e:bc:98:24:b6:
                    f4:31:0a:c7:f7:8d:09:0f:b2:ec:3d:6c:b8:23:eb:
                    13:d5:d0:7e:80:f3:1d:d1:bc:1b:34:23:d0:71:77:
                    92:11:33:94:fa:37:b8:21:cb:1c:dc:2c:af:17:67:
                    97:29:30:3a:24:a0:9b:ef:02:58:65:16:e8:a5:26:
                    2c:85:b1:7e:bc:ab:a3:7d:59:a9:0e:3e:86:0c:f1:
                    3e:6d:00:e8:23:42:6a:5a:4e:16:6b:bd:b1:71:51:
                    73:01:0c:1f:03:3e:98:b3:37:3e:fd:b8:11:88:e6:
                    57:5d:26:c2:7a:9c:42:16:a8:c4:87:23:63:e7:74:
                    54:09:9e:fd:ca:6e:db:90:b9:d9:ca:8a:ed:f9:35:
                    47:b1:d1:bc:f3:8e:8b:e5:47:aa:07:c3:35:33:ea:
                    c6:3f:18:28:ff:98:da:53:1a:e1:ea:e0:0c:63:cc:
                    52:38:9e:98:93:f4:95:44:d8:c9:73:bb:ff:5f:1f:
                    1f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:07:C7:1D:09:CD:2F:98:94:AB:7B:70:65:F2:97:97:05:B2:FA:F6
            X509v3 Authority Key Identifier:
                keyid:49:D8:CC:EA:80:49:86:22:15:04:5F:45:EF:0D:87:C4:CB:0A:6F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49D8CCEA8049862215045F45EF0D87C4CB0A6F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/460D27E9FC973E897B3D223FACFD951C198498BEE67D61D926787E35FB9B9B25/0/323830333a343432303a3a2f33322d3438203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4420::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:27:86:3e:68:f1:12:32:3d:f9:53:02:f5:e6:e4:68:c1:f8:
         86:b5:c0:8c:84:97:e5:73:bb:d1:23:eb:df:67:0d:fc:3a:25:
         e4:c7:d1:e2:5f:3e:09:44:0b:b9:01:40:94:3a:85:a8:f5:84:
         cc:d7:44:0c:55:de:a3:7e:42:57:cf:6b:f2:37:a4:1b:88:0d:
         b4:f7:1d:8c:0e:a8:b0:31:4f:76:fa:f2:4b:62:69:e0:65:fb:
         40:f8:3e:d0:d7:95:27:38:e0:c7:49:16:f6:10:2a:9e:4f:9f:
         d4:72:a5:0e:23:45:5f:17:df:82:22:16:f0:b5:12:bc:35:fc:
         06:4f:4d:d4:47:5a:ce:0a:e0:c2:4e:6e:3e:1f:33:23:ae:8b:
         b9:80:c3:5f:12:df:e7:66:73:78:78:fe:20:68:2e:45:b2:ae:
         ba:f2:76:bf:40:ef:e5:fb:98:fb:52:d4:d3:dd:24:b1:ef:80:
         6e:1c:09:15:52:09:06:9c:21:a6:69:87:5b:cb:e3:31:dc:37:
         93:8a:a5:43:b3:4c:3f:24:f4:06:ae:64:90:e6:7e:d3:99:c9:
         1a:25:22:e2:33:9f:38:23:24:a2:99:88:7e:0d:a9:65:28:9d:
         35:bb:77:c5:28:0d:2a:a4:0b:3c:0e:e6:73:f6:0c:51:61:9b:
         f5:59:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:18:07 2026 by rpki-client