This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3533343a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3533343a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          VKz+jN2/lwuG7o9KHnESm1Gs4dXf6jM7/7PLSuIhIC0=
Subject key identifier:   D9:35:B1:05:A7:4B:C6:BB:01:37:7F:E0:AA:B6:4A:64:18:92:0C:23
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       3180B0704253C49F3ED54040BB2A008F7BF418E8
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3533343a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 06 Jan 2026 19:16:39 +0000
ROA not before:           Tue 06 Jan 2026 19:11:39 +0000
ROA not after:            Tue 05 Jan 2027 19:16:39 +0000
asID:                     52423
IP address blocks:        2803:6900:534::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 04:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:80:b0:70:42:53:c4:9f:3e:d5:40:40:bb:2a:00:8f:7b:f4:18:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Jan  6 19:11:39 2026 GMT
            Not After : Jan  5 19:16:39 2027 GMT
        Subject: CN=D935B105A74BC6BB01377FE0AAB64A6418920C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:06:60:97:aa:c4:b0:c3:0e:d4:7d:7f:b7:
                    48:c0:56:37:74:84:7e:92:63:67:8c:cf:dd:c4:af:
                    35:c6:d4:73:df:8c:1b:5e:6d:6f:ba:3c:85:6e:54:
                    ae:34:0b:bd:dc:c7:1b:43:e2:b5:dc:ae:14:89:b9:
                    3a:04:ea:04:9e:a7:2a:9c:4e:9b:a3:d2:27:8d:98:
                    b7:eb:58:dd:49:78:a8:a3:01:f5:2b:44:58:3e:f7:
                    7d:c8:35:8e:df:4e:b4:13:66:3f:33:27:fc:4c:2a:
                    5e:ee:f4:89:a4:8e:9f:4c:35:f2:60:24:f7:f2:3c:
                    f2:cb:39:f4:01:2f:cb:f4:6e:2c:74:da:1e:45:1a:
                    fc:4c:e7:55:81:f3:2f:df:aa:ae:42:d1:be:f1:bf:
                    69:46:00:0e:00:e5:1a:9d:70:06:ba:63:35:97:4d:
                    f3:cd:16:6c:4e:9f:f1:f7:d6:0f:d1:c8:84:a2:0e:
                    cf:7f:41:bd:08:12:09:13:30:f6:50:85:ab:3f:43:
                    a1:3d:06:80:cd:8c:d6:5c:c2:42:08:7a:e3:cb:da:
                    52:c8:cd:f0:a9:08:69:0c:a1:7b:6d:71:81:3b:ae:
                    a9:5b:8d:bd:d8:eb:d4:61:dc:5e:47:ac:57:c5:b6:
                    7a:3c:9d:a3:b6:f8:ee:1d:ca:a6:0c:6b:26:2b:b3:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:35:B1:05:A7:4B:C6:BB:01:37:7F:E0:AA:B6:4A:64:18:92:0C:23
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3533343a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:534::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:ad:06:e1:e2:a9:50:ee:94:ca:87:3b:b6:1b:78:79:8c:60:
         0d:ce:e9:a1:1e:7f:a7:bc:c4:02:a7:67:a8:b9:21:9a:dc:4c:
         49:e7:f9:01:b7:57:26:63:2b:a7:f9:b0:14:db:b7:a2:07:09:
         51:50:3f:05:c9:aa:a6:4c:90:1f:48:7e:b2:db:2a:19:21:27:
         32:2a:f9:2c:ee:37:b9:4a:9c:ef:c1:d2:84:f7:95:31:d4:04:
         69:e9:f8:78:c5:92:02:af:1c:2b:a9:20:7c:1b:ed:61:3d:95:
         e7:70:2a:5d:cc:08:0f:8d:8d:bb:dc:a4:6a:e8:3e:ac:87:9c:
         06:36:31:a9:3e:a6:be:6a:6f:0d:3d:2a:19:16:32:7f:a9:ee:
         13:37:40:f2:91:aa:f2:75:7a:4f:bf:ef:b1:94:fc:b6:17:6f:
         12:2a:fa:73:75:c6:23:dd:e0:1c:a5:66:d3:19:2c:be:6a:04:
         23:be:a1:79:6b:a0:05:c9:9f:fc:be:48:bb:78:67:40:7b:65:
         77:35:0a:8c:39:da:d6:e2:1b:93:56:6a:a2:14:ef:68:d1:d3:
         91:48:55:51:57:b5:06:f4:c1:00:0c:de:78:74:e1:d9:f2:c6:
         0b:44:8d:63:1a:99:2b:5a:77:50:8b:78:99:25:31:df:06:3a:
         89:d5:ab:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:50:20 2026 by rpki-client