This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/323830333a346630303a3a2f33322d3332203d3e203532323835.roa
File:                     323830333a346630303a3a2f33322d3332203d3e203532323835.roa (raw, json)
Hash identifier:          f2KkMkFbwrBg04WcYyPE/0c9oDQc78zcygmzbp0Qpns=
Subject key identifier:   07:87:77:75:3C:B7:1E:B4:75:64:52:34:ED:4B:3E:E2:1B:E2:A6:5B
Certificate issuer:       /CN=B64FACE36B310C0C008A1D26B030764FFFE873D3
Certificate serial:       7424757E89B1496271658AA5A8A0471303B21760
Authority key identifier: B6:4F:AC:E3:6B:31:0C:0C:00:8A:1D:26:B0:30:76:4F:FF:E8:73:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/323830333a346630303a3a2f33322d3332203d3e203532323835.roa
Signing time:             Tue 06 Jan 2026 19:00:24 +0000
ROA not before:           Tue 06 Jan 2026 18:55:24 +0000
ROA not after:            Tue 05 Jan 2027 19:00:24 +0000
asID:                     52285
IP address blocks:        2803:4f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:24:75:7e:89:b1:49:62:71:65:8a:a5:a8:a0:47:13:03:b2:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64FACE36B310C0C008A1D26B030764FFFE873D3
        Validity
            Not Before: Jan  6 18:55:24 2026 GMT
            Not After : Jan  5 19:00:24 2027 GMT
        Subject: CN=078777753CB71EB475645234ED4B3EE21BE2A65B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:98:2d:b1:d4:f1:e7:16:b7:19:59:8d:56:
                    40:28:12:ce:9d:20:d5:4d:56:36:6e:4d:3c:9c:18:
                    e1:41:fd:db:d4:1c:51:af:6d:bb:fe:e4:07:40:e4:
                    c6:ac:07:b4:9d:84:75:04:59:f2:d9:8f:d4:de:99:
                    55:36:8d:16:0c:c2:08:43:ce:c6:83:37:0a:cb:45:
                    3a:18:73:56:30:a5:d9:81:a3:0f:e8:32:72:ca:79:
                    bf:6c:58:b1:ee:2e:58:07:28:61:ce:25:2e:3a:e1:
                    23:ba:24:16:4d:41:f3:00:d0:0a:84:a2:18:35:a2:
                    d7:7f:64:ed:d8:1c:53:ea:ca:d0:41:32:99:56:a0:
                    f6:5b:aa:eb:1d:e6:b9:e4:0a:3c:91:1c:c5:50:04:
                    aa:f2:e2:f5:b9:0c:85:bc:82:18:c3:41:e6:5e:b2:
                    fd:a6:16:16:9c:7d:99:0a:ed:d8:47:ec:fc:f7:12:
                    19:6f:91:e1:7b:37:be:7b:b7:45:70:15:e0:06:9f:
                    60:a6:2b:7a:d9:12:51:b9:28:45:be:cc:8c:3e:05:
                    5e:c1:af:c8:a7:b4:88:fd:4e:7d:db:0b:b7:b0:1b:
                    79:3c:c5:b9:bc:a5:04:45:7d:2b:95:84:12:c6:0b:
                    0a:e1:17:8d:16:4c:57:8c:5b:55:e5:5c:23:c1:69:
                    b6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:87:77:75:3C:B7:1E:B4:75:64:52:34:ED:4B:3E:E2:1B:E2:A6:5B
            X509v3 Authority Key Identifier:
                keyid:B6:4F:AC:E3:6B:31:0C:0C:00:8A:1D:26:B0:30:76:4F:FF:E8:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/323830333a346630303a3a2f33322d3332203d3e203532323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:e3:87:56:60:d8:43:1a:cb:4c:db:21:a4:ba:a8:30:76:9d:
         d1:5d:f1:a7:63:6b:7b:ff:83:56:7f:d2:ca:55:05:fe:86:b0:
         d7:79:0b:5b:c0:fe:3b:41:50:23:c1:a7:98:e7:77:52:d3:66:
         9b:16:56:48:19:5e:5e:71:79:a4:c5:93:10:09:6e:10:7d:e4:
         f9:3c:65:e7:24:9a:02:6c:53:cd:2b:f1:b7:c9:ce:42:c0:08:
         e0:17:73:f7:03:28:ef:ab:36:21:76:09:86:a8:86:d6:8b:09:
         74:f0:32:d6:94:16:8a:b6:75:c9:4a:4e:81:fb:35:ad:12:b6:
         4f:74:e0:8b:11:9d:d0:b5:3b:85:fe:1c:9e:e7:24:98:9f:87:
         96:71:f1:d6:20:6d:ed:23:4b:0a:76:ce:03:7f:56:24:2d:b7:
         ea:dc:4a:15:f9:f3:38:83:25:49:f3:32:ee:8e:da:35:c6:05:
         7a:f2:03:50:78:3b:40:d8:96:a7:6c:47:c9:6c:08:c3:18:13:
         8f:bb:12:30:71:2e:f6:f8:6f:f2:83:ce:33:cc:22:1e:b1:3e:
         e3:c7:f7:3d:a2:64:6a:fe:2e:a9:92:82:ca:ea:d6:41:b5:0c:
         53:c3:90:1f:de:0f:00:66:17:c2:f7:c0:13:36:40:83:00:b0:
         ed:f2:16:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:58 2026 by rpki-client