This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/323830333a626330303a3a2f33322d313238203d3e203532343338.roa
File:                     323830333a626330303a3a2f33322d313238203d3e203532343338.roa (raw, json)
Hash identifier:          ls7OUD7h/axL6Yc/jVuOqDqpkAsFP/Kz9YMuCeRsUFI=
Subject key identifier:   53:BA:DA:AA:18:EE:DA:7D:CE:0D:10:EF:B5:32:71:5D:A1:D5:F6:0C
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       28DD477C39BD162A97915C0378293295B975CA7E
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/323830333a626330303a3a2f33322d313238203d3e203532343338.roa
Signing time:             Tue 06 Jan 2026 19:19:54 +0000
ROA not before:           Tue 06 Jan 2026 19:14:54 +0000
ROA not after:            Tue 05 Jan 2027 19:19:54 +0000
asID:                     52438
IP address blocks:        2803:bc00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 09:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:dd:47:7c:39:bd:16:2a:97:91:5c:03:78:29:32:95:b9:75:ca:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: Jan  6 19:14:54 2026 GMT
            Not After : Jan  5 19:19:54 2027 GMT
        Subject: CN=53BADAAA18EEDA7DCE0D10EFB532715DA1D5F60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:d1:5b:21:25:d2:43:1c:26:71:fa:65:25:
                    4a:dc:4b:af:30:a6:ef:26:05:27:da:50:b5:3b:76:
                    90:08:dc:7d:04:c9:1b:24:8b:76:3e:90:7c:a0:62:
                    cd:d5:bf:c5:62:04:e6:7d:63:fc:32:80:be:9d:b4:
                    ad:59:43:9c:7f:67:ef:0b:f0:d5:46:1d:01:f2:61:
                    c9:18:84:0f:5f:cc:2e:c3:11:5f:68:6d:c2:2f:43:
                    b7:7c:bc:2e:b2:b6:c6:a6:99:78:32:40:36:3f:23:
                    c9:7e:1f:44:1a:e9:bb:21:30:19:8b:59:0c:0c:02:
                    24:9f:88:30:b0:8c:aa:3e:54:0c:a5:9a:c7:66:f3:
                    87:76:96:61:8f:92:56:16:d1:56:ce:cb:23:b6:16:
                    8a:50:33:cd:22:28:98:94:30:e9:fd:1b:0f:94:90:
                    9b:34:f5:e5:b8:da:4b:2f:cf:d8:32:ee:01:81:f6:
                    f2:99:f8:8c:ca:86:78:c5:62:63:63:41:74:8d:ec:
                    4b:be:7e:2a:93:8e:fe:bf:f1:6c:90:6c:43:8d:70:
                    ce:01:35:7c:45:b9:b0:55:7b:c4:df:ee:9a:a2:01:
                    bd:07:65:b3:ce:81:83:bc:e8:a0:ea:4b:bf:8c:e1:
                    f3:c5:70:a5:b1:c5:0c:d8:52:79:bd:ba:83:a2:df:
                    7a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BA:DA:AA:18:EE:DA:7D:CE:0D:10:EF:B5:32:71:5D:A1:D5:F6:0C
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/323830333a626330303a3a2f33322d313238203d3e203532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:98:60:e1:a8:09:08:16:24:17:dd:d6:6d:36:19:20:ab:74:
         ea:69:a8:1a:fc:90:25:a1:57:0e:82:50:11:e5:4e:c6:f2:1e:
         c4:77:63:2b:00:c0:bb:e5:e1:b7:53:49:dd:0d:67:43:6b:0a:
         24:ef:8f:a2:ec:d6:48:5d:e8:0b:8a:59:fa:8b:b5:78:4b:1b:
         5b:67:f6:2d:44:9e:1e:61:33:71:da:93:5e:be:af:2c:d2:aa:
         88:2f:6c:84:99:87:8b:d4:eb:98:30:90:d9:d9:96:95:7d:ba:
         98:b0:e2:c3:77:39:62:b6:b5:28:7c:6b:09:2a:4e:51:a4:39:
         f5:16:86:bf:7b:bd:f6:86:0b:33:76:ef:c1:98:5d:15:b6:af:
         a4:0e:e6:38:ad:2b:aa:65:d1:2d:d6:d3:ee:d1:3f:89:89:82:
         da:85:97:a5:0a:6b:d7:9f:b0:f7:09:89:d4:ef:d5:b0:01:d0:
         39:a3:3d:ba:88:f3:ae:56:85:d0:ca:ee:ee:71:34:87:f3:48:
         5a:db:6c:84:87:7a:90:7c:e3:70:01:5e:9f:16:1a:46:94:88:
         56:ac:47:12:b3:b3:21:67:a6:f0:fb:8b:90:9b:05:22:0d:d5:
         1e:af:e3:b2:66:5c:15:a8:4f:8a:1c:53:3b:73:38:9f:4d:d5:
         2f:0a:82:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:21:41 2026 by rpki-client