This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/547F7E77BEB17ABB79DF1550864734FE6AAF50A2E92C309616CDDC461533ADC8/0/323830333a333039303a3a2f33322d3438203d3e20323732313437.roa
File:                     323830333a333039303a3a2f33322d3438203d3e20323732313437.roa (raw, json)
Hash identifier:          Qai0gzhyQ45mFZLebGRmgbMGjeINKiGsQFDrZskDPws=
Subject key identifier:   31:F6:23:C8:0A:61:80:4A:18:AC:E3:6A:08:C6:73:37:47:25:3A:EB
Certificate issuer:       /CN=4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD
Certificate serial:       5050C6125397C4E6C4B560EAC938B7D8E4684B6B
Authority key identifier: 4D:B9:0F:DD:27:25:BA:D8:06:8D:5C:6E:5F:11:AE:8B:57:BC:CF:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/547F7E77BEB17ABB79DF1550864734FE6AAF50A2E92C309616CDDC461533ADC8/0/323830333a333039303a3a2f33322d3438203d3e20323732313437.roa
Signing time:             Tue 06 Jan 2026 19:25:09 +0000
ROA not before:           Tue 06 Jan 2026 19:20:09 +0000
ROA not after:            Tue 05 Jan 2027 19:25:09 +0000
asID:                     272147
IP address blocks:        2803:3090::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/547F7E77BEB17ABB79DF1550864734FE6AAF50A2E92C309616CDDC461533ADC8/0/4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/547F7E77BEB17ABB79DF1550864734FE6AAF50A2E92C309616CDDC461533ADC8/0/4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:50:c6:12:53:97:c4:e6:c4:b5:60:ea:c9:38:b7:d8:e4:68:4b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD
        Validity
            Not Before: Jan  6 19:20:09 2026 GMT
            Not After : Jan  5 19:25:09 2027 GMT
        Subject: CN=31F623C80A61804A18ACE36A08C6733747253AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:f7:88:27:9c:44:4c:e2:01:aa:e8:ab:17:
                    5b:24:47:06:9b:53:06:bf:00:04:fe:a1:dc:b7:bc:
                    07:64:45:cb:e8:99:79:e9:7f:af:bd:dd:b4:cc:dc:
                    b1:fe:45:84:28:02:df:5e:30:56:53:9d:60:cb:97:
                    1d:c6:ad:a3:b4:47:a0:08:6e:58:59:2f:40:85:68:
                    e8:2c:61:95:97:ff:8c:39:07:77:40:7f:67:6a:98:
                    24:53:fe:0a:eb:b0:e3:73:77:7a:5f:bb:d6:26:e9:
                    64:ec:87:da:6f:cf:13:09:bb:be:4c:c9:aa:93:e7:
                    e3:ac:9f:bc:91:5e:1b:69:d4:d7:2b:b3:9c:69:16:
                    dd:96:8f:6d:7d:4e:e9:78:ff:60:f0:e4:ff:88:89:
                    c0:a6:42:6a:3f:8a:45:03:38:89:90:91:63:7f:a9:
                    58:49:aa:e4:13:e6:ec:79:59:90:9b:b9:d0:f5:f3:
                    51:12:a4:c7:e0:98:23:be:45:68:2c:6a:5e:0d:3b:
                    73:d3:93:ba:34:65:1d:2b:ad:12:d4:09:56:f6:ab:
                    9c:23:71:88:8d:3c:4a:35:ea:ea:fd:05:b5:03:d2:
                    be:43:ab:79:36:18:af:db:d3:cf:4a:87:d3:d0:11:
                    75:0f:e5:48:0c:e4:f9:34:18:2f:55:bf:83:cd:89:
                    cc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F6:23:C8:0A:61:80:4A:18:AC:E3:6A:08:C6:73:37:47:25:3A:EB
            X509v3 Authority Key Identifier:
                keyid:4D:B9:0F:DD:27:25:BA:D8:06:8D:5C:6E:5F:11:AE:8B:57:BC:CF:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/547F7E77BEB17ABB79DF1550864734FE6AAF50A2E92C309616CDDC461533ADC8/0/4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DB90FDD2725BAD8068D5C6E5F11AE8B57BCCFAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/547F7E77BEB17ABB79DF1550864734FE6AAF50A2E92C309616CDDC461533ADC8/0/323830333a333039303a3a2f33322d3438203d3e20323732313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3090::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:ce:9f:62:bc:c3:b2:06:df:e7:7b:79:1a:eb:bf:f2:e6:19:
         c5:e9:ea:ce:7c:d1:dd:e6:63:ef:aa:58:be:3d:b2:6e:04:7d:
         77:24:08:c2:81:10:b7:92:11:ba:20:a0:74:ed:76:7e:9c:df:
         ad:e4:e7:16:25:17:1a:03:ab:f7:5f:e3:71:28:0e:3f:75:94:
         19:bf:b6:66:b6:f0:03:e6:c4:63:c7:b7:65:29:0e:62:ad:88:
         ec:70:7a:44:1c:66:15:33:8e:b9:5a:51:35:16:3b:f0:c0:22:
         fe:94:58:18:2a:f3:de:c8:a6:f5:9f:31:af:41:55:78:e5:31:
         36:e6:ab:8a:b2:ab:9a:86:2a:b4:ad:f9:87:b0:05:80:8a:a4:
         c5:a7:7e:cb:c8:75:bc:e3:68:3f:ac:17:52:8a:3c:36:f3:8e:
         51:ee:a5:f8:9c:11:9c:7f:2f:26:69:cf:b9:6a:a7:0f:a0:eb:
         27:a9:c5:27:fa:39:78:f5:3d:7e:e2:b6:61:d5:25:b4:30:07:
         00:75:a6:48:a1:94:aa:d5:b5:60:ad:f5:ea:f3:44:a3:1f:4e:
         86:54:c0:a9:fe:ab:f7:03:20:f9:b5:c8:db:60:9e:29:9b:80:
         2d:9e:3d:d9:e9:60:89:1c:0a:6b:16:e1:4e:5a:ca:93:1b:ca:
         cf:95:0d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:03:45 2026 by rpki-client