This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313530333a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a313530333a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          6QLrjmmtmsqc1gKL59JzTeINCILNzJyC7daAUjnUhdI=
Subject key identifier:   DE:A3:2C:E8:34:E7:13:07:AE:A2:11:8A:0E:9D:65:2F:91:E3:98:5C
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       E3862B043BE2A2833B205455509F71D7333B91
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313530333a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 06 Jan 2026 19:16:37 +0000
ROA not before:           Tue 06 Jan 2026 19:11:37 +0000
ROA not after:            Tue 05 Jan 2027 19:16:37 +0000
asID:                     52423
IP address blocks:        2803:6900:1503::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 04:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e3:86:2b:04:3b:e2:a2:83:3b:20:54:55:50:9f:71:d7:33:3b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Jan  6 19:11:37 2026 GMT
            Not After : Jan  5 19:16:37 2027 GMT
        Subject: CN=DEA32CE834E71307AEA2118A0E9D652F91E3985C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:6d:2f:bc:b3:25:73:1a:43:36:4a:2d:11:
                    d9:89:80:ec:27:5b:38:fe:b2:d6:15:a6:80:77:82:
                    0b:aa:73:1a:43:79:4c:9c:ac:00:e6:b7:75:37:a1:
                    04:e6:05:7c:3b:8a:7f:f8:34:1a:5d:e5:04:7d:38:
                    d0:64:69:60:0c:9e:f4:d8:85:1b:4a:3b:98:48:d1:
                    3b:1b:1c:5a:59:3c:a1:eb:38:50:4b:7d:04:3b:08:
                    cf:40:79:18:86:b9:50:2a:08:6d:7f:9a:6f:e7:a7:
                    f3:cf:2a:fd:6f:aa:80:90:e2:b4:22:10:b9:a3:5e:
                    b7:ab:e3:82:cf:50:49:15:12:48:98:c8:58:46:92:
                    a5:2d:8d:4f:30:2a:12:43:8b:50:58:19:88:5d:64:
                    96:49:b1:b5:3e:d0:c8:22:23:a9:8e:72:d5:36:1c:
                    e4:0d:4b:27:88:da:45:4f:17:ab:90:8c:1f:c8:30:
                    b3:f3:89:c3:3c:b8:ed:3b:8f:6f:1b:85:20:f5:77:
                    db:09:a9:8a:73:39:2f:65:9d:94:0f:6f:ed:92:de:
                    04:69:a5:4b:68:15:f8:90:8e:57:d2:8d:df:d7:39:
                    11:c3:ed:ea:4e:bb:00:b4:97:da:da:52:40:52:89:
                    b2:c7:0c:af:5f:6d:54:04:14:77:ae:d9:1a:b3:eb:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A3:2C:E8:34:E7:13:07:AE:A2:11:8A:0E:9D:65:2F:91:E3:98:5C
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313530333a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:1503::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:00:b6:db:1d:e8:31:f3:03:fa:01:7a:b8:2c:de:25:31:96:
         cb:8f:f8:4e:f7:70:25:85:62:6f:ed:e1:b4:42:71:bb:ba:8e:
         69:2b:41:f1:72:a3:2b:9f:19:e0:b6:97:c8:e3:30:bb:5d:a5:
         fc:c3:1d:45:a2:ab:77:86:d6:e7:b0:56:b4:d2:35:de:c5:a6:
         6f:97:fe:93:b5:c6:a8:53:f8:dc:24:94:33:20:11:ee:e5:6e:
         0e:8e:f3:0c:02:18:9e:f9:a1:a5:d8:31:e3:96:f5:b9:60:82:
         75:90:b5:48:1a:87:73:40:e4:66:2f:0e:6d:1f:dd:fa:9a:45:
         a7:de:f0:04:42:dd:d5:45:b5:a9:66:c6:be:06:fe:59:ae:10:
         a4:c9:2e:b9:6c:b1:9d:82:32:73:71:ed:5c:1f:81:c3:dd:29:
         44:89:ad:5a:db:5d:c8:ad:f5:69:81:c6:66:10:29:30:a9:ea:
         0a:a4:57:fc:4d:c5:85:11:b4:4d:73:96:43:67:8c:74:4b:a9:
         34:71:38:5d:d6:d0:9a:d1:4b:9a:dc:8d:16:8c:bd:1d:e7:6e:
         df:1f:d7:d7:95:f4:4f:fd:ab:81:ab:33:bf:da:39:84:50:f6:
         2e:37:cf:c8:23:91:6a:0a:ce:d9:45:5e:83:a7:27:19:da:f0:
         40:51:f6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:50:20 2026 by rpki-client