This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3534363a3a2f34372d3438203d3e203532343233.roa
File:                     323830333a363930303a3534363a3a2f34372d3438203d3e203532343233.roa (raw, json)
Hash identifier:          7GWzPboNwV1yNY7peVrMTsNGruJ6A1bPkCaEGQkWlus=
Subject key identifier:   31:EF:F2:85:DE:B3:AB:CC:4B:AF:F6:88:72:54:DF:1A:9B:46:2B:4D
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       47AA9B472677B877083338885FF71EB70B27AE58
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3534363a3a2f34372d3438203d3e203532343233.roa
Signing time:             Tue 06 Jan 2026 19:16:41 +0000
ROA not before:           Tue 06 Jan 2026 19:11:41 +0000
ROA not after:            Tue 05 Jan 2027 19:16:41 +0000
asID:                     52423
IP address blocks:        2803:6900:546::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 04:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:aa:9b:47:26:77:b8:77:08:33:38:88:5f:f7:1e:b7:0b:27:ae:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Jan  6 19:11:41 2026 GMT
            Not After : Jan  5 19:16:41 2027 GMT
        Subject: CN=31EFF285DEB3ABCC4BAFF6887254DF1A9B462B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:62:93:f4:24:74:0a:ba:59:16:a6:4b:db:95:
                    d7:93:79:84:15:fb:8c:11:96:ba:2c:51:bc:9d:c7:
                    da:d4:31:27:80:fe:11:90:c4:6e:07:1b:22:b7:ad:
                    42:23:0a:be:50:50:7b:19:90:9f:c1:45:d0:17:4c:
                    d2:fb:a2:8e:90:9c:45:9d:4a:67:91:00:99:ec:d6:
                    67:7d:02:4f:3b:50:a2:64:e6:2d:b7:3a:56:fe:fe:
                    d0:59:4d:1e:1b:a0:df:b9:15:37:c1:a1:22:5b:5c:
                    8d:6f:43:3c:b5:48:fd:6a:37:0e:b7:cf:fe:04:49:
                    8b:62:df:9a:94:f1:17:0c:96:0c:f2:83:f9:b9:2b:
                    f9:cb:b3:cd:88:3b:5e:cb:52:9e:8d:d2:71:e6:9d:
                    b4:8a:ef:58:09:54:21:a8:c6:fd:3c:e1:84:35:70:
                    22:b6:dd:c1:19:52:2f:d7:95:3a:69:c0:f5:a0:65:
                    a5:8d:27:99:b1:30:9c:05:cd:db:2a:51:95:47:3d:
                    f7:44:a1:ad:52:1f:06:3d:f6:59:56:0b:ce:b0:d2:
                    4b:f8:9b:6f:13:42:e4:3d:22:63:4b:04:9b:4e:df:
                    05:b6:4c:34:4a:cb:6c:0e:38:19:a9:80:90:b6:9b:
                    df:3a:c2:94:69:44:80:07:cc:ed:60:6b:c0:34:3c:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EF:F2:85:DE:B3:AB:CC:4B:AF:F6:88:72:54:DF:1A:9B:46:2B:4D
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3534363a3a2f34372d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:546::/47

    Signature Algorithm: sha256WithRSAEncryption
         38:91:70:ca:b2:a3:bd:89:d9:c0:9c:2f:af:7a:61:af:cf:8c:
         35:7c:bb:3e:ba:7f:17:2b:4e:7c:b5:93:41:83:b0:56:f6:e7:
         3a:8a:8f:96:2d:20:db:8b:d5:1a:0a:8d:16:eb:a5:22:56:08:
         6e:7e:19:cd:bd:6d:5e:67:e7:43:f9:fd:cd:64:8b:62:a0:8a:
         e2:34:f9:d1:e6:e4:07:fa:c0:dd:2f:8c:5d:a1:43:98:eb:9a:
         61:c5:bc:5f:c4:ab:81:5a:30:fb:14:46:a6:c5:19:36:6e:1f:
         47:a0:44:8b:41:c8:22:f4:e9:0b:61:98:d3:4c:01:16:2d:7c:
         9a:0e:d9:d5:73:28:89:77:6b:e9:bb:7c:a6:bc:52:5f:65:ed:
         7c:08:fc:f8:3f:1d:a7:a9:55:f6:87:c0:40:b6:0e:ba:3a:c4:
         b1:1d:a8:c0:90:ed:b5:ed:56:8f:be:c4:02:67:24:45:d3:eb:
         c8:69:ca:db:ca:64:87:50:c8:ee:5c:01:ae:0d:51:25:3f:17:
         bc:41:fe:c2:42:45:4c:10:17:e1:2f:9b:ce:3f:9e:3d:c5:9f:
         ff:f8:85:b5:5b:db:42:85:10:69:60:e3:3c:72:7e:75:1f:dc:
         65:24:3c:31:e2:32:c7:62:36:07:a2:56:15:a9:29:02:d4:0f:
         4e:91:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:50:21 2026 by rpki-client