This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a6230303a3a2f34302d3430203d3e20323732373939.roa
File:                     323830333a356365303a6230303a3a2f34302d3430203d3e20323732373939.roa (raw, json)
Hash identifier:          fpoItB8j6sJI6Gr73xmdPHX22DQd4GzcVvVn2CHKXEI=
Subject key identifier:   06:D8:9F:22:D5:D9:CD:5F:7D:44:63:A9:AA:4F:FA:D9:4C:37:D3:55
Certificate issuer:       /CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
Certificate serial:       6D28F267843D1D96CA74F9CB6A715922A02AA534
Authority key identifier: 52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a6230303a3a2f34302d3430203d3e20323732373939.roa
Signing time:             Tue 06 Jan 2026 19:18:37 +0000
ROA not before:           Tue 06 Jan 2026 19:13:37 +0000
ROA not after:            Tue 05 Jan 2027 19:18:37 +0000
asID:                     272799
IP address blocks:        2803:5ce0:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:28:f2:67:84:3d:1d:96:ca:74:f9:cb:6a:71:59:22:a0:2a:a5:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
        Validity
            Not Before: Jan  6 19:13:37 2026 GMT
            Not After : Jan  5 19:18:37 2027 GMT
        Subject: CN=06D89F22D5D9CD5F7D4463A9AA4FFAD94C37D355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:75:23:d8:97:73:7c:ed:fa:3d:c7:7f:e6:
                    31:a1:c3:97:3f:af:b4:ec:a2:ac:d8:4b:b7:5e:51:
                    06:53:7c:10:37:69:a5:a8:d4:3e:f7:bf:72:dc:2a:
                    9e:1f:8e:d3:43:79:82:01:23:2c:cc:63:c4:d5:0c:
                    e1:da:88:10:f9:bc:20:1f:40:c4:40:12:93:82:21:
                    92:ee:7c:8b:39:3a:c4:08:b6:e0:0a:3e:0a:9a:26:
                    82:26:4c:17:1c:0b:9e:0a:3b:31:5e:b4:5d:8f:eb:
                    4e:1e:53:8b:16:f0:bc:6b:05:25:4a:bb:bd:2b:8d:
                    8e:36:ee:9c:d9:87:db:af:95:54:d7:90:f7:d2:4b:
                    d9:7c:cc:a9:92:62:26:61:f7:04:04:bd:ab:e0:9e:
                    66:f9:14:6f:12:41:74:2d:be:b9:4d:cd:ca:d1:75:
                    58:75:41:5b:91:0f:71:21:31:b7:7c:13:44:89:ee:
                    d5:27:78:8d:97:e2:84:70:ee:25:a1:ec:ec:63:41:
                    f0:a0:55:3e:7e:11:56:c7:8e:f6:00:00:95:7a:9b:
                    f9:ee:f5:75:5d:ee:0b:12:24:03:45:b0:05:53:07:
                    25:2d:0e:e8:a4:ca:9b:86:8d:65:bc:0a:c2:12:6a:
                    e1:e9:17:64:8e:20:ad:ae:eb:50:ed:79:03:c2:a0:
                    f7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D8:9F:22:D5:D9:CD:5F:7D:44:63:A9:AA:4F:FA:D9:4C:37:D3:55
            X509v3 Authority Key Identifier:
                keyid:52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a6230303a3a2f34302d3430203d3e20323732373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:34:e8:1e:7c:43:94:b2:85:a2:db:1f:74:c2:f5:f8:2f:70:
         78:d7:ac:52:d0:bd:98:8c:c3:b4:61:f5:2f:27:df:ad:f0:7f:
         97:0d:c4:29:05:cd:be:e2:35:10:0b:3d:48:8b:da:09:8c:09:
         28:25:71:af:19:ff:36:15:c3:90:18:74:1b:82:ef:ef:84:4f:
         0e:65:3b:ca:fd:b0:10:ad:0a:e8:0a:e2:f2:be:dc:b5:f2:0d:
         b0:18:2a:55:a3:25:07:b8:c8:f0:3e:02:af:fb:99:10:85:09:
         72:04:b6:ab:1e:8a:28:e6:5a:94:c5:75:b7:48:31:8c:44:33:
         81:12:bd:d1:70:fd:c6:19:63:9c:b8:3e:b8:63:cf:21:73:e6:
         bd:57:d3:68:57:89:b0:89:f4:d3:d7:ca:57:ca:75:eb:d9:6e:
         d0:ef:0e:13:b3:72:55:ff:0e:a1:37:4c:87:a9:59:98:a7:c0:
         0e:13:5f:76:b5:bf:b5:a5:98:18:6a:f3:af:c3:bb:45:c6:33:
         02:27:f6:5f:d5:49:d8:68:a3:b7:9c:98:f3:b1:c6:3e:c4:e8:
         8a:82:dc:62:16:4c:43:99:93:f0:b0:7a:4b:d2:34:92:b3:58:
         79:d6:15:d2:23:c8:4d:5c:50:0f:fd:75:81:97:5b:5e:b3:a6:
         35:86:d0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:01:55 2026 by rpki-client