This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/323830333a656538303a3a2f33322d3634203d3e203532353035.roa
File:                     323830333a656538303a3a2f33322d3634203d3e203532353035.roa (raw, json)
Hash identifier:          jncIF+l8YxrcNdBS1Ab0sbx585mu7zixVQMhy9R2qnk=
Subject key identifier:   04:79:6D:CF:62:BA:05:7E:8B:67:AA:22:12:A8:BA:51:92:08:24:E0
Certificate issuer:       /CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
Certificate serial:       0E6E4612DB35C6654CD60C4D22DE4EA719F46B76
Authority key identifier: 48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/323830333a656538303a3a2f33322d3634203d3e203532353035.roa
Signing time:             Tue 06 Jan 2026 19:09:44 +0000
ROA not before:           Tue 06 Jan 2026 19:04:44 +0000
ROA not after:            Tue 05 Jan 2027 19:09:44 +0000
asID:                     52505
IP address blocks:        2803:ee80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6e:46:12:db:35:c6:65:4c:d6:0c:4d:22:de:4e:a7:19:f4:6b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
        Validity
            Not Before: Jan  6 19:04:44 2026 GMT
            Not After : Jan  5 19:09:44 2027 GMT
        Subject: CN=04796DCF62BA057E8B67AA2212A8BA51920824E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b9:78:98:fd:56:e4:22:5c:e5:ba:e3:42:e5:
                    83:f5:20:2a:ab:e5:59:c2:c6:5d:1d:7f:85:01:51:
                    70:31:11:4d:20:99:f8:ec:07:47:a1:cb:ec:2c:34:
                    e5:e1:29:19:e1:b9:b5:a6:b8:20:47:95:e8:c6:07:
                    b6:f4:fa:70:ec:f2:43:77:90:ba:6e:ac:db:00:b5:
                    bf:18:b7:9c:f9:81:b0:67:54:63:a1:26:7d:26:63:
                    8d:76:46:a2:2f:c3:38:2b:4c:f5:58:32:3a:42:44:
                    37:52:f4:5c:fe:64:7e:38:95:48:a7:f2:50:f1:ca:
                    56:4e:1e:0f:79:0e:fe:71:be:1c:25:a4:db:62:01:
                    8e:72:04:fa:36:89:16:f2:80:cf:ac:5b:38:29:1a:
                    a2:6c:11:ac:2e:c4:6d:9e:ee:28:16:2f:75:5c:df:
                    47:ec:37:e3:5a:35:a6:9f:b1:c1:fe:24:1e:b4:41:
                    c3:dc:f0:25:ec:75:9d:61:b2:93:bb:ae:5e:9d:1b:
                    c4:88:54:a7:81:f0:72:58:a8:b2:9e:30:98:d4:57:
                    e4:b2:97:fe:04:76:1d:64:26:eb:15:7b:cd:66:34:
                    10:e3:90:2b:ae:1c:d4:cb:90:0b:0e:c3:9e:ce:b7:
                    da:7f:e1:00:c2:02:39:a9:85:7c:35:24:df:11:6a:
                    6d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:79:6D:CF:62:BA:05:7E:8B:67:AA:22:12:A8:BA:51:92:08:24:E0
            X509v3 Authority Key Identifier:
                keyid:48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/323830333a656538303a3a2f33322d3634203d3e203532353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee80::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:f2:81:c5:e9:38:7d:bd:99:f2:c9:18:b6:80:c4:61:dd:45:
         0a:cf:0c:fd:25:72:28:7d:35:06:36:7c:21:75:84:99:82:85:
         0d:3a:66:45:55:40:27:db:a8:c1:2c:40:0d:0c:fa:89:0b:e3:
         fb:7f:66:7a:93:66:b9:fa:be:20:40:2e:6e:ae:58:76:ed:81:
         90:79:36:11:76:75:c5:98:b9:9a:04:5d:50:a0:3b:8a:47:65:
         11:74:f0:80:b0:df:b9:92:73:d1:e6:7f:1d:e4:ed:3c:c6:02:
         38:2a:f0:6e:82:25:5f:4d:88:00:7a:47:1c:9b:18:39:3c:a9:
         c0:9e:65:48:19:0d:b4:b5:2c:2e:ce:ac:d6:f0:b6:ff:42:f3:
         f9:02:5d:f1:e5:67:f6:78:25:dc:c9:17:7b:3a:eb:03:3d:7a:
         ae:91:46:c2:b2:63:d5:a1:00:e5:5b:92:d7:3e:60:c3:70:62:
         20:e7:5e:ee:05:e8:a3:15:1f:f4:72:f4:80:00:e6:08:20:f5:
         b2:8b:d6:c5:3d:7e:f6:0e:9a:6b:86:73:01:73:80:d9:5f:50:
         cf:e6:ac:44:46:bc:5c:28:24:4d:30:02:98:1e:d3:b4:e2:67:
         ed:5e:41:10:e7:55:4a:e9:bc:19:52:f2:7c:e1:32:e4:51:59:
         35:3f:e5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:17:52 2026 by rpki-client