This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/905164745AE225E97CBE989FCDD382285E4679BE78C0C92B4BADC12EF454717A/0/323830333a353365303a3a2f33322d3634203d3e203532343638.roa
File:                     323830333a353365303a3a2f33322d3634203d3e203532343638.roa (raw, json)
Hash identifier:          B1XJY+ph4g7nUwNoYSXfx4oFdQ1Hsz2beTR8GBtk5gY=
Subject key identifier:   C1:FA:77:02:DF:5D:E6:26:DC:B4:6A:47:53:93:EF:6E:4F:8B:3C:89
Certificate issuer:       /CN=88924512785DEB429CCCBECC2E1BACE2027B5961
Certificate serial:       7A496C812979129A29181DB266E09F331E23B9AF
Authority key identifier: 88:92:45:12:78:5D:EB:42:9C:CC:BE:CC:2E:1B:AC:E2:02:7B:59:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88924512785DEB429CCCBECC2E1BACE2027B5961.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/905164745AE225E97CBE989FCDD382285E4679BE78C0C92B4BADC12EF454717A/0/323830333a353365303a3a2f33322d3634203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 20:48:56 +0000
ROA not before:           Tue 06 Jan 2026 20:43:56 +0000
ROA not after:            Tue 05 Jan 2027 20:48:56 +0000
asID:                     52468
IP address blocks:        2803:53e0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/905164745AE225E97CBE989FCDD382285E4679BE78C0C92B4BADC12EF454717A/0/88924512785DEB429CCCBECC2E1BACE2027B5961.crl
                          rsync://repository.lacnic.net/rpki/lacnic/905164745AE225E97CBE989FCDD382285E4679BE78C0C92B4BADC12EF454717A/0/88924512785DEB429CCCBECC2E1BACE2027B5961.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88924512785DEB429CCCBECC2E1BACE2027B5961.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 04:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:49:6c:81:29:79:12:9a:29:18:1d:b2:66:e0:9f:33:1e:23:b9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88924512785DEB429CCCBECC2E1BACE2027B5961
        Validity
            Not Before: Jan  6 20:43:56 2026 GMT
            Not After : Jan  5 20:48:56 2027 GMT
        Subject: CN=C1FA7702DF5DE626DCB46A475393EF6E4F8B3C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:40:42:fd:71:d1:86:bf:b8:55:1a:ba:a9:2e:
                    e9:0b:9d:9b:f6:f3:81:b1:40:7f:38:a3:49:78:1f:
                    a3:47:f4:94:39:58:a2:be:0c:06:a5:4a:d5:67:1b:
                    db:9d:82:48:3a:e9:4f:26:e7:96:d1:f0:50:b4:7f:
                    ce:b0:37:e1:56:94:2c:68:7f:83:4c:2f:65:7f:df:
                    6b:9d:7b:4c:e4:c9:7f:87:75:f6:18:d7:66:bd:62:
                    be:57:7e:fc:94:50:4b:72:66:da:e5:a5:94:0b:0b:
                    90:61:73:a9:37:a5:96:1b:fb:52:81:87:e9:54:fe:
                    4f:1a:8a:22:8d:ae:96:5f:5d:1a:10:f2:15:2d:b8:
                    dc:7c:3d:8c:58:10:6d:da:95:e2:c7:c3:e3:c7:38:
                    e0:e0:7c:4c:db:33:2d:36:54:70:04:65:e0:36:21:
                    b3:e4:e5:3f:70:5c:1b:0c:6e:ba:e1:2c:97:a7:cc:
                    dc:f1:bd:57:64:55:72:e5:fd:39:e2:70:dc:9d:23:
                    24:7d:fd:e0:0e:3f:e7:31:d2:a5:80:f6:a1:c4:eb:
                    1a:b3:bc:d8:a6:ca:c4:57:05:e4:f6:45:11:b2:31:
                    11:d0:c5:53:c0:58:24:58:de:8c:36:5b:b4:e6:06:
                    cc:ae:17:6d:63:02:df:d1:45:5a:2c:0d:1c:4b:63:
                    62:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FA:77:02:DF:5D:E6:26:DC:B4:6A:47:53:93:EF:6E:4F:8B:3C:89
            X509v3 Authority Key Identifier:
                keyid:88:92:45:12:78:5D:EB:42:9C:CC:BE:CC:2E:1B:AC:E2:02:7B:59:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/905164745AE225E97CBE989FCDD382285E4679BE78C0C92B4BADC12EF454717A/0/88924512785DEB429CCCBECC2E1BACE2027B5961.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88924512785DEB429CCCBECC2E1BACE2027B5961.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/905164745AE225E97CBE989FCDD382285E4679BE78C0C92B4BADC12EF454717A/0/323830333a353365303a3a2f33322d3634203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:53e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:b4:59:be:b7:8c:1f:4c:fe:72:02:62:66:26:a8:ce:84:5d:
         51:f3:75:51:0a:6d:38:b4:d7:1c:e0:eb:d5:68:b0:f8:2e:85:
         01:96:15:17:c3:de:36:fd:df:24:54:6e:39:ba:29:5c:0d:10:
         f8:b6:93:e4:3f:4b:5b:84:5f:e5:26:8e:5d:ee:71:d2:02:3c:
         ce:d7:a8:3b:d3:97:bb:fa:46:77:d3:5c:b3:a6:78:db:6e:e8:
         87:2e:b2:80:1e:04:bd:6e:32:e6:f4:9c:92:ab:8d:5d:6b:19:
         59:0a:03:60:33:81:8a:77:5f:06:d5:8b:6f:47:7d:13:28:be:
         61:90:7d:71:26:a4:d1:d2:5d:a4:a8:2d:1a:53:43:d9:3e:98:
         05:8c:91:7a:ce:20:0c:7a:2c:15:f6:2c:de:4b:c4:f7:66:ec:
         06:fe:e8:a3:ab:d8:01:1f:79:24:32:0d:fb:29:ee:92:b7:6b:
         ae:8d:3d:86:05:e9:61:b7:07:0c:fc:0e:a9:fc:a2:fe:89:74:
         9a:c7:00:35:68:d9:b0:16:cc:46:78:17:14:3e:e5:fd:9f:b7:
         a6:55:6d:62:ac:09:aa:89:b7:8a:c2:1c:e2:f6:08:9e:8b:f3:
         b7:89:08:f7:fb:cf:15:33:77:00:83:d4:d1:8d:9e:49:8c:90:
         4b:34:b8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:57:45 2026 by rpki-client