This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/323830333a333731303a3a2f33322d3438203d3e203532343233.roa
File:                     323830333a333731303a3a2f33322d3438203d3e203532343233.roa (raw, json)
Hash identifier:          VKpWDMNM7550+5/JkSK1bhQHeXombV9oloyCY0J3S9A=
Subject key identifier:   A9:86:9A:6C:05:CC:04:DB:F0:A9:D0:D5:1B:A9:D6:A4:1A:14:73:36
Certificate issuer:       /CN=1194051239F45F659AED4103422CF78311E1B146
Certificate serial:       2633C2DB2A1603EE328B6E28647F0F8D499CA0EC
Authority key identifier: 11:94:05:12:39:F4:5F:65:9A:ED:41:03:42:2C:F7:83:11:E1:B1:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1194051239F45F659AED4103422CF78311E1B146.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/323830333a333731303a3a2f33322d3438203d3e203532343233.roa
Signing time:             Tue 06 Jan 2026 19:33:20 +0000
ROA not before:           Tue 06 Jan 2026 19:28:20 +0000
ROA not after:            Tue 05 Jan 2027 19:33:20 +0000
asID:                     52423
IP address blocks:        2803:3710::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/1194051239F45F659AED4103422CF78311E1B146.crl
                          rsync://repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/1194051239F45F659AED4103422CF78311E1B146.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1194051239F45F659AED4103422CF78311E1B146.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:33:c2:db:2a:16:03:ee:32:8b:6e:28:64:7f:0f:8d:49:9c:a0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1194051239F45F659AED4103422CF78311E1B146
        Validity
            Not Before: Jan  6 19:28:20 2026 GMT
            Not After : Jan  5 19:33:20 2027 GMT
        Subject: CN=A9869A6C05CC04DBF0A9D0D51BA9D6A41A147336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:99:a1:82:9f:58:1f:13:2b:7c:b0:ba:7e:
                    e5:71:81:bd:07:d9:36:eb:31:13:61:a0:9b:07:22:
                    83:be:d3:df:73:6b:5f:67:91:da:c9:40:5a:c1:7a:
                    e7:99:0d:a8:1f:c3:15:a9:f3:d3:86:14:52:da:3f:
                    75:91:23:56:55:d1:9c:da:e4:f4:da:3d:38:0b:2b:
                    0a:79:db:8c:4c:fe:e9:98:52:b9:9c:e2:a9:91:22:
                    3e:e5:96:dc:dd:ae:83:cc:c7:c5:f0:21:fa:8c:54:
                    c0:30:ae:62:b7:c8:5c:79:50:f7:73:e9:a7:47:63:
                    34:4d:e4:16:8f:d3:68:e0:82:0f:3a:f5:d3:ab:61:
                    c8:87:55:77:8a:45:84:db:90:dc:ab:5a:55:53:59:
                    50:f7:9e:05:9e:3a:b3:2c:a4:79:7f:c8:3a:cd:78:
                    5d:50:b1:9b:55:9f:70:78:f8:31:09:c7:f5:ed:9d:
                    84:09:2b:2b:0e:d9:88:98:4d:66:c5:e7:bb:56:92:
                    b6:55:77:89:9f:e0:ee:14:ea:8e:28:21:7e:5f:a9:
                    7c:82:90:55:df:3a:9b:d1:8a:51:5b:fc:0e:9d:1d:
                    8e:12:78:d6:36:77:cc:75:a5:22:01:66:3e:cc:e0:
                    1e:8e:9d:0b:d9:a8:5f:38:c1:84:92:9a:25:1c:40:
                    be:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:86:9A:6C:05:CC:04:DB:F0:A9:D0:D5:1B:A9:D6:A4:1A:14:73:36
            X509v3 Authority Key Identifier:
                keyid:11:94:05:12:39:F4:5F:65:9A:ED:41:03:42:2C:F7:83:11:E1:B1:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/1194051239F45F659AED4103422CF78311E1B146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1194051239F45F659AED4103422CF78311E1B146.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/453E7200E60D395D58A879824C383B37FDD4ADAF75BAB99B11B581ED89BCE45D/0/323830333a333731303a3a2f33322d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3710::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:d4:c6:71:99:da:d8:ce:2b:4a:c0:19:65:06:f5:37:c4:42:
         b2:d5:90:6f:5c:d3:7b:17:4f:d1:ed:86:45:52:d2:a6:81:d3:
         73:c8:25:c5:a8:30:ea:e4:f1:b3:5c:b8:6e:c3:d4:9e:57:47:
         16:12:ad:5f:07:0d:1f:0c:4a:aa:e7:5f:de:b9:d8:19:6f:ac:
         35:d1:47:94:49:90:20:db:6c:d5:7d:01:da:5e:4a:f7:3a:e1:
         c1:71:cf:3d:93:a5:23:e9:c8:66:b9:08:ca:8a:08:ab:0e:d1:
         0e:c1:6b:25:f9:93:a9:f0:8a:fc:6e:85:db:82:a2:66:6f:6f:
         73:f9:44:42:63:ed:d3:cc:2c:b6:e1:e5:56:8c:af:49:d6:7a:
         57:21:4f:a0:66:0d:de:5d:d1:42:b5:90:62:08:f9:3a:b2:02:
         07:5e:ba:cb:75:c5:31:7e:a3:aa:07:72:40:5b:ea:fd:c8:0f:
         05:90:b4:1b:a7:84:2f:6f:13:89:7b:f9:c6:84:25:c5:9b:4d:
         2e:a6:08:e1:03:9b:b8:57:5a:c7:7d:d4:33:a1:0b:bd:23:8e:
         65:21:99:9c:42:65:24:39:5d:f3:77:da:31:c3:75:16:1d:3a:
         9c:a2:f3:33:81:27:19:b9:33:07:44:aa:d5:bd:c8:bf:ac:f2:
         59:32:82:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:00:00 2026 by rpki-client