This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2FA4526391DCCF0A7A34631F3E3D15ECEC49D8879255F2526C3E5BF8BAA81F4/0/323830333a353364303a3a2f33322d3438203d3e20323734303336.roa
File:                     323830333a353364303a3a2f33322d3438203d3e20323734303336.roa (raw, json)
Hash identifier:          HojHHC/nD6giuI+vsk+C8O7vjKw86E6VwG9IAw5rl1Q=
Subject key identifier:   E8:1B:99:2F:FA:AA:A8:B7:0A:0E:73:9D:B2:41:6E:B7:A3:42:AC:66
Certificate issuer:       /CN=A47E2E33E158272009AD8E7C1E7BE86D93C52A1D
Certificate serial:       1C95199AF737585F660DC8A0F25342B27FF93558
Authority key identifier: A4:7E:2E:33:E1:58:27:20:09:AD:8E:7C:1E:7B:E8:6D:93:C5:2A:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A47E2E33E158272009AD8E7C1E7BE86D93C52A1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2FA4526391DCCF0A7A34631F3E3D15ECEC49D8879255F2526C3E5BF8BAA81F4/0/323830333a353364303a3a2f33322d3438203d3e20323734303336.roa
Signing time:             Tue 11 Nov 2025 12:05:00 +0000
ROA not before:           Tue 11 Nov 2025 12:00:00 +0000
ROA not after:            Tue 10 Nov 2026 12:05:00 +0000
asID:                     274036
IP address blocks:        2803:53d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2FA4526391DCCF0A7A34631F3E3D15ECEC49D8879255F2526C3E5BF8BAA81F4/0/A47E2E33E158272009AD8E7C1E7BE86D93C52A1D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2FA4526391DCCF0A7A34631F3E3D15ECEC49D8879255F2526C3E5BF8BAA81F4/0/A47E2E33E158272009AD8E7C1E7BE86D93C52A1D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A47E2E33E158272009AD8E7C1E7BE86D93C52A1D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Dec 2025 12:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:95:19:9a:f7:37:58:5f:66:0d:c8:a0:f2:53:42:b2:7f:f9:35:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E2E33E158272009AD8E7C1E7BE86D93C52A1D
        Validity
            Not Before: Nov 11 12:00:00 2025 GMT
            Not After : Nov 10 12:05:00 2026 GMT
        Subject: CN=E81B992FFAAAA8B70A0E739DB2416EB7A342AC66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:a3:85:ff:5b:52:25:1d:a2:1b:e2:94:ad:
                    5e:86:94:dc:2b:ac:e9:53:0c:9e:84:ad:12:e9:f7:
                    1b:a7:26:22:44:13:4e:d6:25:45:43:49:df:1c:6e:
                    40:d3:cf:92:ce:74:44:ca:4c:66:c5:9a:0d:7d:2a:
                    df:5b:39:3b:e8:65:d1:4b:4d:fd:4d:03:c7:44:c4:
                    5e:29:5c:0b:c1:fd:36:71:d1:d6:fd:7d:fa:5b:11:
                    e9:6b:09:af:ec:d5:3a:cc:f9:f8:b5:d7:25:ce:8c:
                    7c:53:04:cc:55:e8:4d:1b:bc:0a:4c:a6:87:f0:28:
                    d4:ea:c5:14:48:af:66:af:a1:e7:d6:67:e5:86:94:
                    4a:88:00:6d:24:72:03:a4:f3:43:69:d8:de:5c:1f:
                    cb:97:c8:10:ab:15:92:5a:e9:30:3c:44:74:a3:4e:
                    5a:cf:9a:c6:1f:48:64:9c:58:43:63:7a:94:e4:f8:
                    88:37:ea:e0:78:a2:4e:22:42:26:70:96:b8:32:c5:
                    d8:3b:0c:55:b6:28:f5:62:6d:59:50:c9:bb:42:c5:
                    52:a5:ad:d8:31:54:c2:23:3f:48:df:09:6f:df:43:
                    89:8a:8a:58:c0:13:8e:c0:5c:c1:be:93:da:36:31:
                    66:0b:93:e0:73:c5:71:3a:24:2d:02:51:dd:9e:df:
                    99:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1B:99:2F:FA:AA:A8:B7:0A:0E:73:9D:B2:41:6E:B7:A3:42:AC:66
            X509v3 Authority Key Identifier:
                keyid:A4:7E:2E:33:E1:58:27:20:09:AD:8E:7C:1E:7B:E8:6D:93:C5:2A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2FA4526391DCCF0A7A34631F3E3D15ECEC49D8879255F2526C3E5BF8BAA81F4/0/A47E2E33E158272009AD8E7C1E7BE86D93C52A1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A47E2E33E158272009AD8E7C1E7BE86D93C52A1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2FA4526391DCCF0A7A34631F3E3D15ECEC49D8879255F2526C3E5BF8BAA81F4/0/323830333a353364303a3a2f33322d3438203d3e20323734303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:53d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:14:9a:f5:4c:e8:dd:ed:3a:8c:ae:f0:8f:29:8f:c7:30:84:
         90:b1:18:ab:e8:b3:1a:2d:bc:f5:74:b4:7d:20:d2:89:1a:8c:
         e9:0b:e9:bf:0b:7d:f5:eb:57:fc:e2:02:97:78:f1:31:09:8f:
         14:15:f0:d1:f8:e4:7b:d5:c7:11:ed:1c:e8:de:c7:2a:c4:95:
         2c:f8:bb:20:39:8f:79:a3:67:90:7e:6f:ab:1e:1e:de:36:48:
         98:9e:96:04:bf:12:00:b2:0a:93:27:fa:7a:4c:49:43:3c:17:
         f4:10:63:53:e8:aa:26:24:13:5c:bb:22:22:5d:4f:d1:a4:82:
         1c:ff:29:a9:85:11:15:f0:40:de:bc:2a:08:df:88:df:d7:ce:
         16:a7:16:a7:f9:03:3c:6e:4e:0c:f8:a7:c2:ce:b3:03:fe:ab:
         c5:40:24:a9:42:31:98:8e:8e:20:f6:2c:6a:70:7e:5b:b8:50:
         92:5f:30:f9:18:14:96:4f:1b:f2:c9:d7:47:19:30:e5:b9:66:
         f0:de:7c:d0:1a:39:11:a6:fa:4d:fd:0d:f6:51:8e:31:de:20:
         9f:7f:ed:52:ce:1a:1c:0f:17:ed:e1:c0:fa:18:b6:9a:9e:95:
         ce:06:b3:e2:99:b2:f3:ea:91:c8:36:41:cd:53:30:a0:35:7e:
         63:0a:b3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 21:29:56 2025 by rpki-client