This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/323830333a363030303a3a2f33322d313238203d3e203532323238.roa
File:                     323830333a363030303a3a2f33322d313238203d3e203532323238.roa (raw, json)
Hash identifier:          vsH43yZzwMyXZS83mIyEohXVWf2TsUiJPznn6Shy5Ls=
Subject key identifier:   82:B2:BA:13:10:3B:F5:72:E3:31:9E:5F:FE:53:CC:71:35:80:6C:9A
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       48A14F86D44C8AE980E8E1083210761E954B4E55
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/323830333a363030303a3a2f33322d313238203d3e203532323238.roa
Signing time:             Tue 06 Jan 2026 19:00:10 +0000
ROA not before:           Tue 06 Jan 2026 18:55:10 +0000
ROA not after:            Tue 05 Jan 2027 19:00:10 +0000
asID:                     52228
IP address blocks:        2803:6000::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a1:4f:86:d4:4c:8a:e9:80:e8:e1:08:32:10:76:1e:95:4b:4e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Jan  6 18:55:10 2026 GMT
            Not After : Jan  5 19:00:10 2027 GMT
        Subject: CN=82B2BA13103BF572E3319E5FFE53CC7135806C9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:fd:fb:19:59:20:19:18:a5:a0:0a:6f:67:
                    ca:ac:35:7d:1f:0c:a8:c7:23:d6:31:d3:1c:7e:ca:
                    c7:38:54:bf:50:c7:95:62:49:f8:56:ad:c8:cc:95:
                    ee:8b:31:dc:15:4c:46:70:3b:54:7f:bd:9c:91:17:
                    68:db:7b:76:b3:45:50:2a:63:0d:31:64:b8:8c:47:
                    4a:e0:c6:79:f4:69:a0:6c:02:3b:1b:b0:0b:8b:1f:
                    93:8d:a9:34:05:a1:e6:7f:70:dd:24:39:14:ff:00:
                    9d:f9:c7:c6:42:13:9c:03:40:c5:67:b3:68:3e:57:
                    31:a4:37:cd:fc:98:d2:17:c3:60:39:a8:ac:6d:4d:
                    47:cf:ab:d3:de:85:37:fe:8b:eb:b2:cb:2b:d4:3a:
                    a7:14:48:2f:38:2e:71:55:50:e7:57:fd:ca:f0:a2:
                    df:85:c0:0f:89:26:ea:18:d3:25:89:4d:96:49:b9:
                    6e:f1:33:4b:42:cb:dc:9d:41:1a:51:a8:ce:90:fc:
                    db:92:31:27:9a:42:c5:88:9e:1b:09:90:19:e8:31:
                    b9:72:0e:16:3e:21:65:f8:78:b7:09:19:c9:ca:8e:
                    fc:4d:ab:a3:69:7e:be:79:33:c9:25:4a:eb:f6:ad:
                    a7:a5:07:57:6e:9b:46:b6:84:2e:4f:b4:fd:14:8b:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B2:BA:13:10:3B:F5:72:E3:31:9E:5F:FE:53:CC:71:35:80:6C:9A
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/323830333a363030303a3a2f33322d313238203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6000::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:cd:9a:f6:df:2b:3f:26:a2:91:70:9b:1b:b8:8a:17:b4:c1:
         d2:c6:32:25:ea:41:2a:d7:80:fc:28:0d:02:5b:51:55:f6:54:
         82:60:6d:3a:9a:28:1b:5c:cf:c8:95:e6:b4:a1:cc:7d:27:fc:
         b9:80:3f:07:e3:06:31:be:2c:32:35:99:42:7f:e3:32:04:e4:
         a0:d7:ff:05:ad:9c:71:b7:9e:63:b7:93:99:de:21:12:be:1a:
         99:63:43:12:f0:12:1a:4c:62:fc:c4:6b:81:a3:f9:13:d6:e2:
         ae:ed:77:73:15:17:94:b2:64:5d:ad:e5:ca:af:10:c4:30:36:
         d5:92:4a:af:f7:5e:cb:04:dc:4a:3a:52:0f:80:43:f1:13:50:
         25:ec:30:17:15:b5:6b:ef:36:14:a0:4f:28:84:b0:55:8b:4d:
         fb:4a:9e:11:a3:2b:b3:c7:80:ba:07:f1:f0:8e:16:ba:f0:37:
         f3:07:24:02:a7:a7:d2:80:44:5b:33:7e:1a:84:63:dc:36:32:
         fd:ce:29:ec:bc:c8:b5:f0:42:bb:06:33:3e:9e:f3:96:92:8e:
         ff:32:5d:b1:e7:18:06:83:f7:63:ec:37:01:4a:e5:19:e5:47:
         d6:2d:21:48:a7:92:20:e6:91:eb:34:26:cb:c9:11:59:d0:b8:
         5c:ba:aa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:31 2026 by rpki-client