This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82B4C75123E272130CF64240C39EA6FFC195C1843748EC079416BA4A787F4CE6/0/323830333a346136303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a346136303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          HMj2zc1h54JLoO92UpgGz2mwPdWfzGXM4dnJZPgDyjM=
Subject key identifier:   BA:0F:0F:59:CA:80:9B:96:28:55:86:F2:40:35:25:37:7B:F1:EA:CB
Certificate issuer:       /CN=480123246439ED8773D61BEAC2230BFA389F0E23
Certificate serial:       09FB48A348A28F8FE3B0CFCFF3FCB0E668DDE4FD
Authority key identifier: 48:01:23:24:64:39:ED:87:73:D6:1B:EA:C2:23:0B:FA:38:9F:0E:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/480123246439ED8773D61BEAC2230BFA389F0E23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82B4C75123E272130CF64240C39EA6FFC195C1843748EC079416BA4A787F4CE6/0/323830333a346136303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:37:01 +0000
ROA not before:           Tue 06 Jan 2026 19:32:01 +0000
ROA not after:            Tue 05 Jan 2027 19:37:01 +0000
asID:                     52468
IP address blocks:        2803:4a60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/82B4C75123E272130CF64240C39EA6FFC195C1843748EC079416BA4A787F4CE6/0/480123246439ED8773D61BEAC2230BFA389F0E23.crl
                          rsync://repository.lacnic.net/rpki/lacnic/82B4C75123E272130CF64240C39EA6FFC195C1843748EC079416BA4A787F4CE6/0/480123246439ED8773D61BEAC2230BFA389F0E23.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/480123246439ED8773D61BEAC2230BFA389F0E23.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fb:48:a3:48:a2:8f:8f:e3:b0:cf:cf:f3:fc:b0:e6:68:dd:e4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480123246439ED8773D61BEAC2230BFA389F0E23
        Validity
            Not Before: Jan  6 19:32:01 2026 GMT
            Not After : Jan  5 19:37:01 2027 GMT
        Subject: CN=BA0F0F59CA809B96285586F2403525377BF1EACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:7d:c3:d7:f0:c5:e6:f9:1a:8f:24:4a:ae:
                    60:a7:db:47:8a:e1:f3:c9:13:48:f3:39:1a:e0:12:
                    1c:f6:f5:a1:f0:75:fd:13:63:e1:65:62:2e:d4:a9:
                    23:ba:59:9e:70:93:37:82:cb:e9:47:07:62:ee:ef:
                    9d:2c:22:e7:e5:56:18:66:dc:d7:2a:aa:af:8d:ba:
                    dd:9c:89:d5:30:f7:e8:11:0f:c2:c9:87:e8:1a:2d:
                    13:c1:81:d7:92:42:be:cc:ca:cb:bd:17:e6:73:e6:
                    e2:de:4a:88:b0:37:5b:f9:4d:c6:3e:a6:b2:b4:04:
                    74:69:ba:d7:22:74:3c:d2:81:ad:6e:67:33:09:49:
                    db:e9:6f:ea:ea:bb:ca:ab:2e:69:ce:55:25:5c:72:
                    f5:70:bc:98:25:2f:19:c3:28:e0:e0:5d:25:6f:36:
                    3a:09:7a:70:bb:d1:02:97:32:b1:d6:de:c5:2d:a4:
                    ce:5c:a9:63:56:36:eb:47:2d:6c:08:1d:1a:1c:a4:
                    7d:ab:47:48:85:d4:54:5a:fb:f1:ca:74:8a:ac:b3:
                    86:54:a2:ea:81:03:90:74:b2:d9:7f:20:e5:2b:8f:
                    cd:9a:44:f2:32:9d:f5:a1:fa:43:9c:0a:7a:1f:bf:
                    92:e3:3b:a8:26:f9:bf:c1:7e:58:5f:d2:44:89:4f:
                    66:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0F:0F:59:CA:80:9B:96:28:55:86:F2:40:35:25:37:7B:F1:EA:CB
            X509v3 Authority Key Identifier:
                keyid:48:01:23:24:64:39:ED:87:73:D6:1B:EA:C2:23:0B:FA:38:9F:0E:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82B4C75123E272130CF64240C39EA6FFC195C1843748EC079416BA4A787F4CE6/0/480123246439ED8773D61BEAC2230BFA389F0E23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/480123246439ED8773D61BEAC2230BFA389F0E23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82B4C75123E272130CF64240C39EA6FFC195C1843748EC079416BA4A787F4CE6/0/323830333a346136303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:b0:a0:08:7f:72:89:ac:ef:ab:e9:a9:56:74:ee:fd:d1:8f:
         0c:9e:80:16:6d:8b:4d:07:77:ed:5c:97:b0:aa:88:ec:32:92:
         6e:fc:c1:d1:1a:06:2c:9e:b3:ab:9e:a9:48:f9:e7:24:ca:8e:
         23:ca:4c:e6:f6:d0:1f:58:25:f4:d8:5e:7a:ff:2f:cc:22:22:
         7c:0b:9a:a7:04:34:87:26:50:48:bc:fb:89:81:6f:ef:c6:8e:
         50:23:83:c9:36:a4:72:13:5e:17:a4:de:58:39:74:24:9b:df:
         98:61:13:b5:e5:7d:32:27:d8:08:d3:ce:0f:27:b6:b1:30:3a:
         36:15:b0:e5:3f:a1:10:84:a6:64:05:e0:26:13:b3:52:6b:7d:
         7b:2a:ad:5e:e7:77:51:88:e6:1b:ca:03:a5:94:ec:51:7f:ac:
         e5:6c:01:61:08:b5:ef:0b:03:b4:e9:70:a7:8f:6e:23:5b:30:
         b0:d6:c0:3b:96:96:e7:21:5f:c3:ac:63:53:3b:dc:a6:ad:f2:
         02:cb:d6:9f:66:f4:4c:86:50:e9:4d:83:be:44:ad:09:99:af:
         6e:b2:ca:8c:fa:39:29:a4:72:fa:40:a7:32:ff:52:4a:84:88:
         38:88:4c:50:82:df:a9:e2:7c:11:9d:34:cb:c4:2b:33:0a:f7:
         47:3c:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:07:13 2026 by rpki-client