This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/323830333a326332303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a326332303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          GxDV8dp+215ZAIKudlKevdZUfVkDq4BMz3oeGIzSy5s=
Subject key identifier:   C3:15:97:E4:18:9F:5E:2C:34:85:74:5E:C2:42:45:08:57:3F:4C:DE
Certificate issuer:       /CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
Certificate serial:       482AA59AC6642E6E156019E9B30107DE54668CCB
Authority key identifier: F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/323830333a326332303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:11:24 +0000
ROA not before:           Tue 06 Jan 2026 19:06:24 +0000
ROA not after:            Tue 05 Jan 2027 19:11:24 +0000
asID:                     52468
IP address blocks:        2803:2c20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2a:a5:9a:c6:64:2e:6e:15:60:19:e9:b3:01:07:de:54:66:8c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
        Validity
            Not Before: Jan  6 19:06:24 2026 GMT
            Not After : Jan  5 19:11:24 2027 GMT
        Subject: CN=C31597E4189F5E2C3485745EC2424508573F4CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6f:bf:b8:b8:ff:39:85:47:75:ce:0a:0b:af:
                    19:c9:32:66:10:95:6d:61:62:4a:88:ea:a6:7b:c0:
                    c2:dc:b1:f7:39:bd:3a:36:e6:ca:d8:88:56:d4:15:
                    fd:f6:83:da:e0:84:cd:bf:50:12:b9:16:cc:9b:90:
                    13:8a:14:98:9a:79:56:4b:86:90:fd:b0:c3:52:90:
                    57:61:e5:8f:bb:54:66:94:56:c0:08:3b:e4:f5:a1:
                    ff:e8:a5:42:f6:38:6d:36:19:6d:d5:45:97:23:ff:
                    20:8e:06:8d:dc:5f:36:a8:79:06:50:af:3e:d6:29:
                    12:72:d9:98:96:44:78:c3:6e:da:5e:61:9a:fe:f7:
                    e1:ba:59:39:44:e4:71:60:f9:40:c6:88:28:2b:4d:
                    be:3b:b8:d8:d4:6e:8c:eb:0d:ef:a2:3d:23:d5:0e:
                    ad:9f:22:e0:ce:78:42:39:e3:68:85:f0:90:e1:5c:
                    dd:ca:89:7d:d0:0b:f8:59:35:93:88:2e:4e:2b:c5:
                    89:87:ff:3b:b5:68:41:c7:50:b3:15:7f:39:49:67:
                    74:d8:f8:c0:7f:27:bf:32:56:ae:91:d3:bd:55:59:
                    94:33:86:d7:6d:38:88:b4:4e:4a:54:eb:54:a6:b6:
                    ed:af:09:2a:8d:6e:2f:0c:b9:86:7e:21:d6:27:27:
                    e4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:15:97:E4:18:9F:5E:2C:34:85:74:5E:C2:42:45:08:57:3F:4C:DE
            X509v3 Authority Key Identifier:
                keyid:F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/323830333a326332303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:21:3f:83:7d:80:75:19:9f:c1:20:77:da:d6:41:a3:05:58:
         79:00:e6:f1:31:a9:31:aa:a9:09:68:c9:c0:27:81:dd:d3:98:
         be:66:39:6a:b7:1c:46:c1:a1:48:3d:3c:f5:e5:1b:13:53:60:
         d2:04:57:8e:71:c6:34:63:e1:ef:3e:f0:e0:37:65:39:67:f0:
         93:e0:43:e2:cc:8b:a9:2e:e9:85:9d:1e:f0:40:71:63:b7:51:
         03:70:14:8f:04:1b:9b:bd:de:35:18:9e:73:f4:27:c2:c5:ec:
         3f:a1:e9:bf:d7:e8:42:fc:9d:d4:8b:92:85:58:8f:1c:9d:4b:
         bf:c8:23:93:f2:41:c6:d4:ec:c7:9b:e8:55:48:43:af:4d:05:
         c3:f5:25:c9:dc:8d:dd:25:c5:ae:d0:7f:ea:01:93:b7:39:16:
         9f:33:6d:16:3e:6a:ce:a1:3a:0c:0e:87:b4:19:8a:c7:ca:3d:
         7c:be:27:07:ea:21:65:91:7a:f4:5b:f1:8d:4a:94:a7:44:dc:
         1c:38:07:95:c3:21:34:83:69:c8:f7:a3:f2:c5:2a:61:2e:17:
         b4:f7:d8:0a:0a:40:b6:4b:45:00:91:13:0d:30:50:57:9f:e1:
         32:1b:84:a2:36:c3:e4:6f:43:bd:5e:12:26:16:05:14:26:79:
         51:d7:cc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:52 2026 by rpki-client