This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a3a2f33322d3333203d3e203634313335.roa
File:                     323830333a393931303a3a2f33322d3333203d3e203634313335.roa (raw, json)
Hash identifier:          gMpi+YLuN6sOwIx6UeuHThStDq6VZIlzcrruLF1Yc0s=
Subject key identifier:   D9:72:75:5C:A0:8A:83:A3:26:30:14:07:15:91:BB:B2:A8:19:F7:C1
Certificate issuer:       /CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
Certificate serial:       4993FBC145D8E3D86A6D2D2D10448448E4997B47
Authority key identifier: 08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a3a2f33322d3333203d3e203634313335.roa
Signing time:             Tue 06 Jan 2026 19:19:40 +0000
ROA not before:           Tue 06 Jan 2026 19:14:40 +0000
ROA not after:            Tue 05 Jan 2027 19:19:40 +0000
asID:                     64135
IP address blocks:        2803:9910::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:93:fb:c1:45:d8:e3:d8:6a:6d:2d:2d:10:44:84:48:e4:99:7b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
        Validity
            Not Before: Jan  6 19:14:40 2026 GMT
            Not After : Jan  5 19:19:40 2027 GMT
        Subject: CN=D972755CA08A83A3263014071591BBB2A819F7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:06:3e:d4:4b:86:08:e8:f4:62:4a:0b:46:fd:
                    15:17:67:48:3f:c6:c5:a0:6e:8c:cf:64:19:b5:3f:
                    34:cf:25:a9:53:f5:45:33:49:fa:9e:f7:5d:36:c0:
                    f4:f6:e7:18:03:87:ef:c5:97:46:3c:8b:8f:e4:49:
                    6f:89:82:12:db:ab:30:4e:ea:81:c3:cc:2c:50:d3:
                    bb:63:53:91:17:0c:e6:2b:88:d8:86:84:05:ab:96:
                    e5:2d:a7:00:5d:90:c6:cb:9a:27:2e:77:b1:79:4f:
                    42:bb:16:7f:f5:e0:be:32:ce:5c:51:c9:43:39:d7:
                    04:3c:2a:ce:ac:42:f7:e3:1d:97:6e:a8:fa:64:ff:
                    3e:60:dd:b0:d1:15:b5:bb:ba:41:7e:5d:3f:69:df:
                    c5:28:6e:8f:a5:1a:2b:f7:39:70:99:2f:e6:2f:64:
                    f4:1f:2d:3c:02:b2:20:0f:3a:16:ce:82:bd:c0:f5:
                    58:04:9f:45:a8:31:22:aa:dc:d8:98:80:4b:ac:44:
                    4f:0f:0b:eb:79:38:38:d0:71:1d:6f:38:56:c0:f4:
                    72:a4:ae:ed:89:a9:d8:87:d6:b8:fd:4f:8f:41:7e:
                    10:0b:51:36:9c:85:5b:2f:fc:66:6f:c7:f7:d1:2d:
                    c1:a8:0b:72:ee:56:aa:f5:f1:f1:4e:39:2d:43:71:
                    54:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:72:75:5C:A0:8A:83:A3:26:30:14:07:15:91:BB:B2:A8:19:F7:C1
            X509v3 Authority Key Identifier:
                keyid:08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/323830333a393931303a3a2f33322d3333203d3e203634313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9910::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:d0:ad:8f:2b:81:6f:36:62:9c:b4:cb:db:1c:6d:2f:84:40:
         25:18:3d:40:7d:e1:84:0c:43:91:a1:77:b6:be:0a:7f:46:48:
         65:2c:f2:e0:d8:80:fc:d1:e0:cc:5b:42:e1:3e:80:62:88:69:
         f4:84:d3:10:cf:72:28:58:c8:1d:7d:69:f8:f7:a3:03:e8:10:
         f2:bb:8f:fb:4b:54:7f:1b:88:99:26:43:a1:5e:f2:81:76:a3:
         42:24:bd:bc:36:01:3b:50:80:43:29:dc:9e:8f:1b:f3:c0:8c:
         ff:7f:80:e5:a9:cd:7b:e9:26:9c:f2:77:e5:54:cb:97:d2:a3:
         66:42:40:fa:9f:21:74:db:de:66:a7:19:77:b1:e3:52:11:79:
         85:1c:81:e9:2a:01:60:dc:a4:6e:bc:bf:e5:11:de:ad:42:00:
         6e:c8:14:17:9a:af:ff:35:5f:65:14:f9:ba:94:5d:af:df:34:
         70:19:91:da:12:fd:29:50:a8:63:e8:83:25:ab:86:87:44:d0:
         5c:8a:ad:9f:d1:f8:d3:d3:a6:c6:a6:b4:8a:92:28:fd:52:8c:
         02:76:7a:4f:4b:14:40:7e:01:6d:1e:29:a4:27:a5:86:db:44:
         5a:b7:8f:d1:48:51:a2:05:90:00:07:b5:6b:8e:13:a6:cc:26:
         4d:80:4c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:46 2026 by rpki-client