This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/323830333a373830303a3a2f33322d3438203d3e20323633373033.roa
File:                     323830333a373830303a3a2f33322d3438203d3e20323633373033.roa (raw, json)
Hash identifier:          FApn5WJQlUnf8TGQI8LolyTHK/uQBvp52rn63vvNwEc=
Subject key identifier:   1E:E5:5E:69:79:F6:58:87:49:29:B1:95:B8:7F:05:68:92:80:E4:CA
Certificate issuer:       /CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
Certificate serial:       370AD3225673F234E5BC20E8EE3ED16EA5FA99A3
Authority key identifier: C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/323830333a373830303a3a2f33322d3438203d3e20323633373033.roa
Signing time:             Tue 06 Jan 2026 19:21:24 +0000
ROA not before:           Tue 06 Jan 2026 19:16:24 +0000
ROA not after:            Tue 05 Jan 2027 19:21:24 +0000
asID:                     263703
IP address blocks:        2803:7800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0a:d3:22:56:73:f2:34:e5:bc:20:e8:ee:3e:d1:6e:a5:fa:99:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
        Validity
            Not Before: Jan  6 19:16:24 2026 GMT
            Not After : Jan  5 19:21:24 2027 GMT
        Subject: CN=1EE55E6979F658874929B195B87F05689280E4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:ec:de:91:54:21:fc:5f:1b:0f:a1:b0:8c:
                    ae:df:9b:ac:2b:cd:20:b5:2d:3b:a5:6b:ab:06:a9:
                    7a:1b:8f:58:d6:ec:f3:5b:ea:d0:87:59:15:e5:38:
                    fa:71:0b:92:42:d2:0f:22:8d:e7:94:fd:f1:29:c6:
                    13:f5:37:b6:1c:36:57:78:a0:1e:ae:4e:d3:a8:a7:
                    46:28:18:2f:c1:27:f1:d4:2f:21:5a:af:31:07:cd:
                    13:a3:05:f9:aa:03:88:bf:4a:a4:db:77:3a:88:b0:
                    09:96:50:c1:d8:53:27:41:95:e9:02:7d:30:58:9c:
                    15:5a:21:03:20:b9:4f:5e:68:9a:ae:19:ba:9e:b2:
                    f0:2e:64:6b:74:9a:22:a9:ca:c5:7f:49:d2:64:d0:
                    09:e9:eb:a4:7c:2c:4b:a2:ed:af:d8:40:f5:33:8a:
                    3a:c8:fb:a2:46:89:e2:44:3c:bd:2c:0a:c7:1b:3a:
                    d9:65:6e:96:40:1f:0f:c1:be:e6:ce:ca:62:aa:14:
                    6c:9b:18:cc:90:8e:55:9e:00:83:76:5b:07:68:71:
                    3c:9f:ee:a3:5e:88:88:80:45:53:ad:c6:fd:46:5e:
                    1a:8b:25:f7:10:ce:a5:e4:22:7a:62:d8:48:ac:9f:
                    bd:f3:00:22:14:cc:8a:be:6f:a9:37:56:4f:43:fe:
                    ec:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E5:5E:69:79:F6:58:87:49:29:B1:95:B8:7F:05:68:92:80:E4:CA
            X509v3 Authority Key Identifier:
                keyid:C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/323830333a373830303a3a2f33322d3438203d3e20323633373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:a0:52:f4:ad:6b:d5:b2:79:f0:d8:b0:e6:72:ca:b5:d6:38:
         11:57:ec:48:62:b9:a6:67:85:8d:0b:04:06:27:51:4e:7a:a9:
         fa:83:59:00:71:e3:0c:a3:96:ed:6d:f6:e4:52:f8:f8:46:83:
         94:11:f0:95:f3:1f:b1:36:27:60:56:73:c8:df:e9:08:78:b4:
         04:91:bf:21:2a:af:96:97:b2:2d:03:63:9d:f9:39:70:d6:68:
         21:87:39:57:ad:26:34:d8:bc:07:58:6d:48:ee:e3:c4:9b:a0:
         a5:e0:3b:6e:28:cb:44:64:c8:61:c8:58:d2:50:c5:57:ea:e5:
         9f:40:9c:f0:92:9f:d0:3f:6d:af:f0:e8:47:2d:13:fa:0c:b7:
         ca:12:1d:45:c8:92:4b:fc:ec:4b:46:3a:3d:aa:9d:4d:c3:1f:
         70:3e:29:63:a5:8c:3b:fc:21:bd:ac:2d:ca:dd:e3:14:80:95:
         b9:a3:d5:da:03:3a:69:13:ad:8e:bf:2b:15:e7:90:4a:ae:83:
         d8:4a:03:1e:5d:36:02:81:45:41:b3:fa:68:5c:a2:83:11:c1:
         c1:ac:31:7c:82:cf:7c:7e:6a:68:0a:14:69:40:a3:7f:b3:69:
         60:d7:1f:a8:cc:d6:02:89:84:15:02:7d:2c:df:f8:0d:71:86:
         38:0b:a0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:00 2026 by rpki-client