This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3535393a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3535393a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          LmUBsgzziWqUaClVMf2WtFX813ldFIszminmbht1278=
Subject key identifier:   9C:E6:5B:CE:04:80:5B:61:F1:C4:68:70:72:93:BF:34:A5:AF:FD:1C
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       63492BD4DAD8C6019E5DF7F842D7FBD056AE80
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3535393a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 06 Jan 2026 19:16:44 +0000
ROA not before:           Tue 06 Jan 2026 19:11:44 +0000
ROA not after:            Tue 05 Jan 2027 19:16:44 +0000
asID:                     52423
IP address blocks:        2803:6900:559::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 04:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:49:2b:d4:da:d8:c6:01:9e:5d:f7:f8:42:d7:fb:d0:56:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Jan  6 19:11:44 2026 GMT
            Not After : Jan  5 19:16:44 2027 GMT
        Subject: CN=9CE65BCE04805B61F1C468707293BF34A5AFFD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:f7:44:76:5b:7a:b1:2e:9c:f2:ae:58:e1:
                    6e:57:85:6c:69:48:3e:06:15:75:7e:c6:67:3f:73:
                    76:83:5e:e8:57:77:43:db:9c:40:ec:50:2c:5d:ee:
                    a1:8d:a4:d6:4d:0a:52:c5:9d:92:d5:99:1d:84:fb:
                    6d:fd:5d:43:b1:55:03:eb:97:e0:a7:08:3a:0e:36:
                    41:9b:4b:a5:57:e0:51:28:cc:0c:17:67:cb:76:11:
                    90:a2:fe:45:fe:c0:77:cc:7d:cc:9e:f2:2c:b5:de:
                    50:5e:91:0d:64:f7:90:7e:a3:75:81:03:d5:3e:f9:
                    8d:03:2c:06:53:2d:7a:a4:95:d1:6e:85:73:89:cd:
                    60:9d:ba:44:26:61:1b:db:02:3d:64:ea:71:d7:a4:
                    bd:57:31:11:2e:73:ed:d7:7f:88:6f:ab:27:f4:f2:
                    93:02:9e:6d:a7:49:53:58:e1:ec:1b:e5:1b:16:5b:
                    b9:a5:d2:6a:a8:2e:26:12:99:4b:2f:bd:57:eb:aa:
                    01:46:1c:e3:a0:b0:88:e5:34:32:9c:a5:b3:b6:dc:
                    49:48:7c:df:d1:fb:09:f9:5f:a5:65:8e:6e:a2:39:
                    de:8e:a9:45:0e:07:cc:32:26:92:5f:bc:2b:63:2c:
                    ef:ac:80:01:d4:55:c7:46:5a:c3:32:00:50:ae:94:
                    a4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E6:5B:CE:04:80:5B:61:F1:C4:68:70:72:93:BF:34:A5:AF:FD:1C
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3535393a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:559::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:3e:b7:4c:a9:2e:83:7a:20:16:0b:85:3d:b6:5f:c8:cc:0a:
         14:e6:5b:12:d2:31:c5:50:2b:2f:04:d1:f4:5e:90:6b:d5:bc:
         63:bd:6b:c7:62:57:78:ae:d3:18:2c:0f:1f:9e:d7:07:69:db:
         33:0e:5e:47:3b:a2:11:65:7d:b2:4c:99:a9:ac:0f:68:f0:f0:
         fc:83:09:53:96:59:c6:27:f2:59:f0:55:6b:3d:d7:42:77:e4:
         d8:a8:e1:c6:c8:63:3c:aa:ff:92:ec:19:8d:cf:ee:88:61:5b:
         66:28:35:5b:0e:1f:1f:48:0c:f6:b0:e6:b5:f5:8b:77:5d:bc:
         9f:6c:c5:28:00:5e:f5:da:00:45:8f:f1:7d:af:a1:a5:c5:fa:
         98:5c:d4:71:37:c7:a7:a1:d7:03:4a:5a:e8:c8:4b:e0:cf:54:
         20:6c:86:de:a1:50:10:55:2d:f3:64:86:56:6d:84:43:7e:d9:
         ea:e4:14:2c:42:c1:08:ab:01:c0:c1:b4:69:c0:5b:fc:d0:63:
         9a:cc:3b:1a:6e:f0:23:b3:e3:ad:10:b0:8e:4a:a1:b7:18:e8:
         91:a3:ce:6d:c6:22:7f:6e:3f:cd:e4:ee:21:b0:25:7b:80:6a:
         7e:be:76:96:45:cd:2e:97:bc:5c:a9:eb:f0:a3:78:f5:2c:93:
         d5:82:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:50:19 2026 by rpki-client