This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/323830333a343863303a3a2f33322d3438203d3e20323632323037.roa
File:                     323830333a343863303a3a2f33322d3438203d3e20323632323037.roa (raw, json)
Hash identifier:          NQZRZQvArvsn8eXLsmLPAAJtT0owaK5DVYF5gFZ0gdE=
Subject key identifier:   48:4A:9D:7E:C3:8F:74:D3:BE:EE:54:C3:20:BC:03:85:DF:15:2A:FA
Certificate issuer:       /CN=89BE1B948EADFCFCFDF457A0A903F357865A2553
Certificate serial:       1BFC74216763CCDCB120FFFA0F557B0CA3524098
Authority key identifier: 89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/323830333a343863303a3a2f33322d3438203d3e20323632323037.roa
Signing time:             Tue 06 Jan 2026 20:49:32 +0000
ROA not before:           Tue 06 Jan 2026 20:44:32 +0000
ROA not after:            Tue 05 Jan 2027 20:49:32 +0000
asID:                     262207
IP address blocks:        2803:48c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fc:74:21:67:63:cc:dc:b1:20:ff:fa:0f:55:7b:0c:a3:52:40:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89BE1B948EADFCFCFDF457A0A903F357865A2553
        Validity
            Not Before: Jan  6 20:44:32 2026 GMT
            Not After : Jan  5 20:49:32 2027 GMT
        Subject: CN=484A9D7EC38F74D3BEEE54C320BC0385DF152AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:b8:8b:5e:4e:d1:dc:fe:d6:ee:ed:07:68:
                    97:36:3b:51:5e:e6:b2:0f:3b:6a:b3:b3:24:de:29:
                    87:6a:59:b8:43:14:9f:17:f3:d3:85:cb:7a:10:7b:
                    9c:e0:56:da:b7:2d:d4:54:3c:f6:c4:d3:e0:b9:40:
                    c4:b7:67:b1:82:2e:c9:77:d1:ac:56:68:ec:d5:ce:
                    1f:04:aa:92:ff:c6:44:48:ec:da:51:29:45:54:96:
                    78:66:9b:1f:71:1e:5b:0e:2f:4c:0c:de:15:0b:d4:
                    5a:d8:c8:19:10:86:6e:8c:53:ce:3f:ea:f5:fa:4b:
                    f4:60:87:f5:44:95:55:4c:86:a5:55:8d:69:30:76:
                    9f:5a:ec:c9:5b:d4:2e:cb:7f:e0:8c:af:e9:83:7d:
                    95:72:6a:20:d3:8a:1e:b5:c7:72:25:9e:f2:c3:1a:
                    31:e2:9f:6d:68:4f:4f:01:2a:44:e1:a7:df:9a:e1:
                    4c:7a:1b:8a:0e:13:47:e6:9b:86:6f:20:34:a7:ce:
                    df:ab:71:58:62:7e:37:b4:92:ad:37:cf:3e:f7:40:
                    b5:ef:31:c1:c4:38:63:df:5a:e7:6e:10:aa:f3:4d:
                    3d:db:1c:60:61:49:7d:c9:8c:ad:02:36:51:fd:4c:
                    3d:17:4d:21:a2:6e:07:39:a7:29:f5:24:f3:34:f6:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4A:9D:7E:C3:8F:74:D3:BE:EE:54:C3:20:BC:03:85:DF:15:2A:FA
            X509v3 Authority Key Identifier:
                keyid:89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/323830333a343863303a3a2f33322d3438203d3e20323632323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:e8:3c:5a:c2:ae:0b:70:e4:06:d4:28:8a:75:65:05:2f:14:
         97:77:d7:29:a9:fc:24:cb:2e:99:08:fb:68:90:05:88:ee:0c:
         b5:2c:f3:51:c5:e3:dd:07:2f:60:62:5f:e1:fa:ac:f5:38:27:
         f0:0a:d0:1d:84:02:91:15:25:b6:23:9f:e4:3a:f7:08:e7:79:
         2f:9f:0e:95:79:e3:67:48:3a:10:05:1f:7d:34:59:61:a2:81:
         56:aa:18:8e:84:dd:ca:90:35:f0:42:49:4a:a2:85:b3:b2:ab:
         e3:83:18:1a:14:5e:79:cd:34:88:f7:aa:57:f1:ce:d4:1b:15:
         9c:89:20:8f:be:17:10:f7:d5:2f:a4:97:39:33:82:c1:4c:ef:
         cd:77:08:81:b8:8b:b2:5c:57:16:67:34:4a:e6:0b:18:a9:eb:
         20:a0:d8:ec:81:19:f3:15:3e:a9:ac:04:09:2a:12:13:9b:a6:
         56:46:8e:6b:a6:52:10:28:df:64:3a:c3:8b:c2:ea:93:24:30:
         1a:58:88:1b:c9:a1:59:20:e8:f5:ee:c4:2d:31:6f:3a:bf:3d:
         9d:9b:93:9c:c2:c7:e4:41:e4:bd:13:db:82:9c:b8:77:a7:46:
         aa:50:13:73:39:eb:f8:e7:7a:a2:08:19:82:42:4b:23:91:3a:
         a5:5f:db:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:42 2026 by rpki-client