This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313530303a3a2f34372d3438203d3e203532343233.roa
File:                     323830333a363930303a313530303a3a2f34372d3438203d3e203532343233.roa (raw, json)
Hash identifier:          gWUVbVar+/MlLacwpJ1ugjsrdLN/2Gp+SdFF+uxPK7U=
Subject key identifier:   E3:65:F3:32:92:6A:59:D5:BE:1E:22:94:56:21:36:38:DC:F6:CE:BC
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       0D1A413D4B00096A3FCBC418A2B8AF385F4CBF58
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313530303a3a2f34372d3438203d3e203532343233.roa
Signing time:             Tue 06 Jan 2026 19:16:45 +0000
ROA not before:           Tue 06 Jan 2026 19:11:45 +0000
ROA not after:            Tue 05 Jan 2027 19:16:45 +0000
asID:                     52423
IP address blocks:        2803:6900:1500::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 04:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1a:41:3d:4b:00:09:6a:3f:cb:c4:18:a2:b8:af:38:5f:4c:bf:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Jan  6 19:11:45 2026 GMT
            Not After : Jan  5 19:16:45 2027 GMT
        Subject: CN=E365F332926A59D5BE1E229456213638DCF6CEBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:ac:44:db:ed:dc:7e:b8:3f:08:1d:23:55:
                    90:74:c9:ee:48:5f:89:6a:be:69:6b:6e:86:6e:2e:
                    53:cb:2f:9f:62:e1:e9:56:ae:b2:28:f1:9c:9c:7f:
                    bb:9c:a3:cc:db:0f:31:8f:5b:d6:37:4e:9d:76:b5:
                    95:66:75:a2:c9:c7:ca:52:2e:18:ea:95:f0:cd:a5:
                    07:1a:7f:0b:37:0c:10:ac:3a:1b:9b:64:c5:a4:f6:
                    c1:ce:a5:06:a6:6e:dd:13:bb:09:cf:d0:a6:5a:c6:
                    65:1d:52:1e:fc:f6:b8:bf:fd:9f:50:1e:14:1d:52:
                    28:ea:8b:39:55:93:02:5e:86:08:dd:af:61:58:4d:
                    90:af:76:9e:20:64:74:d3:d9:a8:33:62:df:ed:d3:
                    a5:86:87:87:67:ac:10:9f:bb:00:27:00:65:85:d3:
                    fc:a1:21:4b:75:4a:fc:8c:d0:59:3e:25:c5:de:0b:
                    39:ed:c1:70:58:9d:9e:a3:f1:82:c7:4d:3d:1b:15:
                    98:cf:48:9d:77:2d:93:85:70:68:6b:67:87:49:48:
                    fd:a5:cf:f2:48:16:f9:09:80:e2:e6:a6:65:c2:4c:
                    e5:80:1b:57:5d:12:cb:84:4c:ae:07:62:e0:11:06:
                    e6:92:17:f1:20:34:dc:cf:c6:0f:3f:48:0d:e6:b5:
                    da:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:65:F3:32:92:6A:59:D5:BE:1E:22:94:56:21:36:38:DC:F6:CE:BC
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313530303a3a2f34372d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:1500::/47

    Signature Algorithm: sha256WithRSAEncryption
         85:44:eb:4b:82:13:4e:7b:31:de:66:59:73:79:f0:df:52:75:
         64:a7:18:0d:f2:65:2e:fc:bd:be:6c:77:7c:21:11:cb:cc:4f:
         4d:82:fe:9f:5d:e4:e3:a4:c2:4e:44:30:56:b4:42:dd:9a:57:
         14:72:d1:0f:8e:f3:71:ce:70:0a:5b:6a:36:af:f7:4e:65:81:
         95:3c:61:23:7a:0d:9d:19:9b:5a:f4:20:ce:49:33:fb:6e:58:
         05:aa:c0:07:7d:64:52:23:64:09:79:cb:f4:4e:f2:60:46:b8:
         75:89:5e:b1:b2:6d:60:34:f3:54:3e:af:69:b0:11:22:34:bb:
         19:dc:12:1a:d6:cc:90:c8:4c:24:b3:81:7e:a7:bc:22:81:73:
         87:0d:85:b1:07:6f:60:17:4f:56:16:6a:02:be:f7:24:cd:c1:
         c6:c1:30:45:01:7a:d0:95:c5:f9:28:0f:5c:25:9d:49:07:a9:
         9f:19:ab:6c:8f:0f:1e:c8:86:0f:f3:6d:99:6f:51:0b:ed:77:
         a5:ea:00:e6:a3:5c:45:15:c8:0d:1e:d0:03:ab:77:76:5b:e4:
         ee:6f:2b:ee:71:74:17:60:01:d2:ba:ce:dd:d5:5d:d4:53:cb:
         01:bc:72:c1:f9:9e:82:9f:d8:a5:e9:58:9a:72:1e:e1:65:a0:
         ee:2b:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:50:21 2026 by rpki-client