This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/323830333a336530303a3a2f33322d3332203d3e203532343134.roa
File:                     323830333a336530303a3a2f33322d3332203d3e203532343134.roa (raw, json)
Hash identifier:          k7vV4bS7q+U9oh1lV/m95lEs7fZcVywf/an5Tbvzr78=
Subject key identifier:   DB:00:2D:81:64:2D:1E:33:17:E2:88:8B:98:4F:FB:17:D7:4C:7E:A4
Certificate issuer:       /CN=93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE
Certificate serial:       5ADEFEC43DAF1A33DECFDF032F04614DB1D704EB
Authority key identifier: 93:D4:1B:39:91:54:33:1C:4C:0A:A0:C4:EB:C1:94:AA:0A:5D:EE:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/323830333a336530303a3a2f33322d3332203d3e203532343134.roa
Signing time:             Tue 06 Jan 2026 20:48:29 +0000
ROA not before:           Tue 06 Jan 2026 20:43:29 +0000
ROA not after:            Tue 05 Jan 2027 20:48:29 +0000
asID:                     52414
IP address blocks:        2803:3e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 04:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:de:fe:c4:3d:af:1a:33:de:cf:df:03:2f:04:61:4d:b1:d7:04:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE
        Validity
            Not Before: Jan  6 20:43:29 2026 GMT
            Not After : Jan  5 20:48:29 2027 GMT
        Subject: CN=DB002D81642D1E3317E2888B984FFB17D74C7EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:56:ab:27:90:d0:8c:84:1d:e8:f9:a7:d0:cb:
                    b9:02:45:98:b6:d7:04:35:10:03:21:2f:e2:fb:a3:
                    74:28:d7:d7:b2:d5:0d:00:c2:80:fd:22:62:64:e2:
                    e1:73:31:56:e8:00:9f:74:a9:a7:18:7f:b7:6d:f3:
                    e1:e0:3d:93:72:0f:a0:7e:72:81:40:8a:4e:6d:f9:
                    df:a1:7a:07:c7:35:bd:a5:75:3f:74:b9:5f:ed:61:
                    5f:c4:f3:db:49:bc:8e:ba:cb:13:9a:c4:15:f7:92:
                    36:94:6f:5f:0b:b7:d5:2a:ea:d9:fe:c8:31:e7:99:
                    b5:ac:8e:03:95:13:70:bb:40:f8:51:a1:80:2b:28:
                    db:4a:9f:68:6a:b5:79:33:70:ed:19:70:2d:35:a3:
                    c5:94:ec:ed:47:63:68:ce:d8:e2:61:82:75:2e:ea:
                    da:64:41:e9:d1:39:d8:84:06:ef:3e:c0:92:42:8d:
                    64:d7:eb:9e:a0:75:b3:d3:d9:f0:26:de:30:38:7c:
                    69:3f:ce:db:b6:7f:4b:fd:9f:53:fb:8c:ee:b4:d8:
                    90:0f:46:28:8f:6e:0b:d2:71:e6:30:b6:0b:a4:61:
                    48:d0:80:54:c0:71:12:0f:da:17:b5:5c:d3:af:f7:
                    78:10:da:0b:13:68:b0:11:bf:e0:f1:99:2e:0e:31:
                    36:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:00:2D:81:64:2D:1E:33:17:E2:88:8B:98:4F:FB:17:D7:4C:7E:A4
            X509v3 Authority Key Identifier:
                keyid:93:D4:1B:39:91:54:33:1C:4C:0A:A0:C4:EB:C1:94:AA:0A:5D:EE:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D41B399154331C4C0AA0C4EBC194AA0A5DEEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47FD219419FE4F5820B51A63E3BDD4E9AEA4240391510CD653FD6B11EACC1ED0/0/323830333a336530303a3a2f33322d3332203d3e203532343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:37:8d:01:8a:99:4b:20:4f:eb:e6:21:9d:fb:81:72:d6:a1:
         ca:b7:da:b6:9c:90:27:1c:9f:78:5e:4e:24:e8:1e:af:e5:dd:
         01:4b:38:d0:a3:f8:9d:d9:bf:4f:c3:0b:44:79:0a:b9:1a:06:
         fb:42:83:c3:e4:62:16:f0:2b:f5:1d:5e:03:f8:ff:3e:ba:b7:
         9f:cd:d0:30:54:64:83:6a:95:e4:45:00:6e:5c:7b:43:c4:c2:
         9a:f8:d8:91:2f:af:74:71:96:fc:a7:16:d9:f1:41:6e:42:ae:
         83:8e:95:cf:44:fc:44:11:12:46:e8:f7:07:6d:53:73:50:90:
         45:52:54:83:54:33:9c:14:0f:68:63:26:cf:4f:bc:20:61:65:
         6f:7f:1a:74:89:f4:3c:4d:27:a7:e4:f4:77:56:28:17:d6:87:
         ee:4d:cb:c7:ab:b3:af:da:98:35:a1:14:2c:88:77:4b:69:3c:
         8b:f4:cc:9b:de:0d:5b:ba:22:c9:72:52:9d:ee:d1:fb:c1:fc:
         d3:7a:a2:eb:44:fe:16:2f:d3:c6:16:59:a9:a4:c6:93:c4:d0:
         56:c3:d8:69:33:cc:3f:de:48:8f:a4:86:1d:6b:4d:77:11:16:
         ca:f9:81:18:27:a6:ad:e4:15:0f:41:44:a0:81:61:98:3c:ff:
         1e:01:32:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:27:32 2026 by rpki-client