This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/323830333a326636303a3a2f33322d3438203d3e203532343936.roa
File:                     323830333a326636303a3a2f33322d3438203d3e203532343936.roa (raw, json)
Hash identifier:          c4QVl9V7OVI8hNmMOlTV/f74ehgMSXeBFQW2Ml1aORw=
Subject key identifier:   4B:BC:74:90:BB:F7:12:3F:47:D9:F8:E0:DD:15:77:77:CC:E6:4E:71
Certificate issuer:       /CN=52644702D94F3D876A774ED4C8509A38B1587D80
Certificate serial:       534A93CACA3A11B4736D52B2A6BDFE72219B0AC1
Authority key identifier: 52:64:47:02:D9:4F:3D:87:6A:77:4E:D4:C8:50:9A:38:B1:58:7D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/323830333a326636303a3a2f33322d3438203d3e203532343936.roa
Signing time:             Tue 06 Jan 2026 19:28:33 +0000
ROA not before:           Tue 06 Jan 2026 19:23:33 +0000
ROA not after:            Tue 05 Jan 2027 19:28:33 +0000
asID:                     52496
IP address blocks:        2803:2f60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4a:93:ca:ca:3a:11:b4:73:6d:52:b2:a6:bd:fe:72:21:9b:0a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52644702D94F3D876A774ED4C8509A38B1587D80
        Validity
            Not Before: Jan  6 19:23:33 2026 GMT
            Not After : Jan  5 19:28:33 2027 GMT
        Subject: CN=4BBC7490BBF7123F47D9F8E0DD157777CCE64E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:22:bc:7c:58:29:60:84:81:d0:7b:db:f2:
                    45:a2:bb:97:3c:79:6f:42:f6:6c:ba:49:fa:4e:a7:
                    71:12:d0:25:ca:ef:4a:82:8c:1a:e7:8e:3b:00:8f:
                    a3:44:b1:af:07:f6:df:86:bf:6e:c6:c2:97:a1:3a:
                    53:42:35:58:1c:ce:f0:f3:22:1d:9f:cd:5a:2b:70:
                    00:37:30:2e:fd:de:8b:3c:35:70:7d:f5:6c:81:ca:
                    42:8d:ce:68:55:f4:bc:d6:b1:5e:ee:af:c8:63:92:
                    8a:18:4f:09:22:07:ef:c5:ea:a7:a9:1e:13:23:1f:
                    b4:c8:b8:4c:94:20:bd:5e:8e:8a:f5:20:c4:5f:42:
                    2b:0c:68:ea:f3:1a:6b:66:16:99:d9:82:ac:c9:5e:
                    ee:9d:02:d2:19:b9:51:41:03:04:84:29:b4:5a:88:
                    f4:7e:f3:41:65:d4:4f:6e:3c:cc:a9:33:1c:cd:fb:
                    ce:5a:0c:be:f4:81:86:cd:1c:1d:05:26:4d:80:b9:
                    65:f4:09:36:7a:ed:df:89:b8:bc:03:fd:ff:44:1c:
                    2c:a7:12:8a:65:41:54:bf:84:1d:fd:d0:36:ae:7e:
                    70:0b:66:b9:8a:0a:7d:4a:bf:7d:da:8f:60:f0:53:
                    9c:07:ca:51:63:05:ad:a3:f0:c9:ce:fe:f0:37:aa:
                    5a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BC:74:90:BB:F7:12:3F:47:D9:F8:E0:DD:15:77:77:CC:E6:4E:71
            X509v3 Authority Key Identifier:
                keyid:52:64:47:02:D9:4F:3D:87:6A:77:4E:D4:C8:50:9A:38:B1:58:7D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/323830333a326636303a3a2f33322d3438203d3e203532343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:45:8b:fd:4b:80:bf:2f:e2:d5:b3:33:b0:90:0e:03:44:65:
         4b:e7:90:c1:7a:29:96:fe:40:15:43:d2:a1:c7:73:6f:d8:3e:
         d0:bf:e1:05:b1:f1:6f:e1:54:bf:a1:6b:3d:ae:78:13:1f:86:
         0c:f0:b6:dc:5d:06:b5:d4:21:39:82:58:09:f6:ac:2e:7a:23:
         10:1b:01:45:d2:da:f6:aa:9d:46:ce:ee:f4:44:32:de:bf:12:
         b6:6b:78:0a:73:4f:6e:1c:56:a0:44:e1:c0:f6:88:79:e5:3c:
         90:bb:7b:d4:0e:3e:a6:c6:24:6a:36:53:05:37:ec:d2:28:09:
         20:92:4d:cb:42:34:72:17:d4:82:b4:17:f5:12:9f:d9:e4:c8:
         29:55:96:64:b6:05:f0:c0:3e:a9:bf:c4:71:65:af:79:46:ac:
         b4:5a:dd:b8:16:4b:9c:1a:be:ef:5d:00:c9:c8:c5:25:b8:bc:
         e7:ab:8a:e6:99:61:e5:82:7f:e0:85:0a:d6:23:ea:1d:ad:48:
         50:06:46:39:bf:4f:dc:09:4d:59:4f:69:86:11:a5:e4:87:16:
         4b:dc:56:8d:7f:5d:a3:78:4e:8f:81:36:2b:ef:80:fb:89:fc:
         76:62:16:b7:0e:6a:dc:88:be:6a:59:11:c7:e3:0b:62:83:3d:
         1f:af:b7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:15 2026 by rpki-client