This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/323830333a373634303a31303a3a2f34342d3434203d3e20323635363933.roa
File:                     323830333a373634303a31303a3a2f34342d3434203d3e20323635363933.roa (raw, json)
Hash identifier:          Sl9bmY1EbVZchIyIscb7gUbCX6GwXQqBPYcNX+onh24=
Subject key identifier:   9F:94:24:83:6B:FF:29:9B:73:FF:7E:BB:1A:84:9D:D0:47:3C:F3:AE
Certificate issuer:       /CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
Certificate serial:       7044ADA9EE8BC361529B998EB3917F7058CF7BA3
Authority key identifier: BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/323830333a373634303a31303a3a2f34342d3434203d3e20323635363933.roa
Signing time:             Tue 06 Jan 2026 19:42:57 +0000
ROA not before:           Tue 06 Jan 2026 19:37:57 +0000
ROA not after:            Tue 05 Jan 2027 19:42:57 +0000
asID:                     265693
IP address blocks:        2803:7640:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:44:ad:a9:ee:8b:c3:61:52:9b:99:8e:b3:91:7f:70:58:cf:7b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
        Validity
            Not Before: Jan  6 19:37:57 2026 GMT
            Not After : Jan  5 19:42:57 2027 GMT
        Subject: CN=9F9424836BFF299B73FF7EBB1A849DD0473CF3AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:53:69:fa:7f:49:c2:14:af:9c:09:25:07:53:
                    f5:cc:d5:b3:28:ef:1e:1b:c6:7c:14:0b:72:a0:fe:
                    74:14:6e:26:f8:54:9a:3b:04:4e:c0:a8:6f:6a:de:
                    b7:8e:9f:a6:41:d0:87:e1:99:89:1c:6c:f0:b7:40:
                    6b:c3:f0:19:3d:a0:c1:94:11:ae:83:cb:aa:fd:1a:
                    bb:47:2b:76:14:6f:09:1a:90:b3:44:be:10:3c:97:
                    d7:23:e6:8b:dc:ad:42:cc:30:44:41:02:05:d4:3f:
                    ac:5a:51:e1:bd:14:1d:3b:b0:90:1e:f2:1a:6f:63:
                    36:97:46:d9:ca:9b:0c:ab:24:f9:62:0d:24:1e:1a:
                    26:94:e6:a0:78:31:cb:8e:74:de:79:46:1f:0b:55:
                    e8:dc:6d:98:0f:01:dd:89:6e:72:2b:8f:50:3b:59:
                    56:d1:f6:09:42:07:50:9e:b5:4b:a6:55:8e:8c:ef:
                    51:f7:02:a7:b2:bf:db:39:19:65:1e:df:f2:f3:5f:
                    e3:55:40:23:7e:01:84:77:85:5e:3a:35:f3:56:4f:
                    6c:b0:0e:c5:b5:29:dd:a5:81:6e:9c:1d:0d:5f:53:
                    52:ee:d4:d8:ed:f6:ad:c4:93:0d:27:f6:58:85:33:
                    94:2f:db:1f:ff:dc:51:60:db:60:07:e7:f6:75:4c:
                    ee:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:94:24:83:6B:FF:29:9B:73:FF:7E:BB:1A:84:9D:D0:47:3C:F3:AE
            X509v3 Authority Key Identifier:
                keyid:BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/323830333a373634303a31303a3a2f34342d3434203d3e20323635363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7640:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         60:8c:5f:f5:a3:6d:80:a8:8a:65:b2:cc:32:06:1f:1a:c4:72:
         ff:ce:de:09:49:26:5c:38:ff:17:3b:db:d6:ed:45:42:b6:07:
         f2:12:0f:7f:fc:6c:53:02:63:78:b1:5c:ae:d9:47:06:53:fa:
         c4:03:73:75:9b:d2:6f:8c:f3:46:1d:a6:9e:44:77:a8:57:20:
         47:ad:d2:0d:1a:f6:ef:b5:3b:62:49:b9:20:12:49:eb:77:70:
         4f:40:b5:b0:64:2f:26:61:63:11:f6:f6:22:3b:7b:54:39:90:
         78:9b:fa:34:c8:d3:77:92:36:c8:cb:be:01:16:83:ad:4c:61:
         96:94:7c:c5:ea:9b:b8:28:6c:17:e9:66:e8:18:11:8a:f8:aa:
         1e:0a:0d:8d:07:50:72:a0:33:4a:ed:c0:6d:76:4a:af:c1:04:
         86:ed:ee:a1:cb:3f:5d:32:9d:24:f5:62:f1:6f:54:df:e3:8b:
         84:33:54:95:7d:bb:ce:d9:73:53:dc:ef:40:c2:56:3e:7c:eb:
         b1:1c:cc:7a:66:47:75:c9:b9:32:17:73:cc:53:c5:5f:7e:95:
         99:ba:24:fc:9b:ca:d6:78:1f:c8:28:a9:b6:16:9a:ab:24:29:
         ff:d3:46:54:05:65:11:d7:e0:cf:cf:2c:ad:b9:1d:ac:71:e0:
         b6:9b:08:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:22:25 2026 by rpki-client