This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a3a2f33332d3438203d3e203634313335.roa
File:                     323830333a393931303a3a2f33332d3438203d3e203634313335.roa (raw, json)
Hash identifier:          wXsw50YIqErPI4r/l+KbaOXZZpdGjw6X+qIGC2+0hxg=
Subject key identifier:   42:BE:1B:B0:7F:F8:DD:D9:F3:02:21:D6:73:85:1D:11:B2:3C:C1:23
Certificate issuer:       /CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
Certificate serial:       406B4C4912DA1EA01272F564ACA6BBB29549403A
Authority key identifier: 08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a3a2f33332d3438203d3e203634313335.roa
Signing time:             Tue 06 Jan 2026 19:19:39 +0000
ROA not before:           Tue 06 Jan 2026 19:14:39 +0000
ROA not after:            Tue 05 Jan 2027 19:19:39 +0000
asID:                     64135
IP address blocks:        2803:9910::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 03:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6b:4c:49:12:da:1e:a0:12:72:f5:64:ac:a6:bb:b2:95:49:40:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
        Validity
            Not Before: Jan  6 19:14:39 2026 GMT
            Not After : Jan  5 19:19:39 2027 GMT
        Subject: CN=42BE1BB07FF8DDD9F30221D673851D11B23CC123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:32:73:60:71:c7:5c:7d:69:05:49:27:a4:
                    52:a8:d3:7c:cf:ab:1d:78:36:5b:63:d8:f3:be:35:
                    02:a3:c5:4c:c0:3e:a3:e3:54:6b:a1:18:3e:69:db:
                    47:78:ca:e6:33:c6:d4:6a:5d:b0:3f:6d:28:f8:17:
                    27:e8:b5:c2:04:ea:0c:c7:b2:88:a4:d1:e6:03:6f:
                    51:4b:03:2e:fd:cc:30:3e:82:7c:a1:04:99:bf:40:
                    b1:bc:e1:80:19:05:85:48:8f:96:e3:39:20:56:ca:
                    14:eb:2e:90:4e:2b:39:62:98:5d:8f:20:2f:00:e5:
                    05:18:99:91:92:69:9f:62:4e:85:ca:57:1a:eb:75:
                    e5:8a:2a:fc:93:34:ac:b7:75:f0:d2:5a:18:15:80:
                    1a:05:8c:fe:76:b7:46:5d:4e:83:9d:88:03:41:2e:
                    7d:54:ae:72:50:bb:d8:32:10:33:9f:9b:04:e0:d3:
                    ba:f7:fc:e8:ea:3b:83:08:fb:5b:88:68:e8:e0:3c:
                    52:3a:7d:d3:ff:e7:4e:f4:76:0c:ed:54:31:6b:84:
                    a1:e1:67:f5:10:65:c0:79:9a:e3:2c:7d:b5:b1:fe:
                    3e:6a:62:be:81:a5:f3:fa:38:c8:89:f0:fc:82:2f:
                    c2:c0:16:eb:e0:20:89:38:b7:27:29:b4:2e:3e:5e:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BE:1B:B0:7F:F8:DD:D9:F3:02:21:D6:73:85:1D:11:B2:3C:C1:23
            X509v3 Authority Key Identifier:
                keyid:08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a3a2f33332d3438203d3e203634313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9910::/33

    Signature Algorithm: sha256WithRSAEncryption
         46:3a:a0:cf:43:91:11:43:97:f5:a0:6d:2a:54:c3:0d:67:85:
         02:3e:3d:8f:b9:ba:55:a3:a8:b8:d3:63:a8:40:91:ce:03:99:
         44:e5:74:67:72:9e:b7:f5:64:15:b6:bc:e4:44:ba:1f:70:6d:
         a4:a4:16:12:4f:26:d4:a9:46:e1:12:6a:51:e8:f2:a9:96:50:
         99:34:ff:1a:14:38:2b:41:64:fe:6b:0b:83:7f:9b:2a:90:65:
         74:15:dd:a1:14:b5:c0:76:1f:b3:52:2d:b5:b4:fa:01:52:c0:
         ba:a7:e5:56:e5:9e:87:f7:d1:dc:13:c0:4b:15:ff:af:b6:44:
         a1:0c:7d:70:68:c7:70:92:07:c7:30:15:1c:85:72:82:7f:3c:
         b7:a7:14:df:2d:e2:37:ab:dc:4f:96:c9:73:8a:c5:09:88:38:
         dc:55:e2:0d:4e:fb:59:8b:97:6e:53:8d:56:cf:fe:59:12:65:
         97:8d:42:4e:a6:11:4a:f8:83:15:3f:b4:23:4c:12:e0:31:4f:
         12:8f:25:1e:06:b2:d2:b5:df:cf:d6:24:c0:bc:f3:8d:a5:81:
         f5:96:63:ab:28:c7:f7:bd:40:ec:fa:3c:7c:2f:ae:9e:44:53:
         a9:1b:5d:39:0d:6a:2c:8b:b8:a4:d6:ca:36:00:8b:33:5e:ac:
         5f:5a:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:45 2026 by rpki-client