This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/323830333a373634303a32303a3a2f34342d3434203d3e20323635363933.roa
File:                     323830333a373634303a32303a3a2f34342d3434203d3e20323635363933.roa (raw, json)
Hash identifier:          UmNQg9A/OrQ4AEL3XztJx/8INpRA9L/5TuKt2ku3Fgc=
Subject key identifier:   17:05:2A:9C:84:DA:BC:C4:BB:F7:6F:4B:61:62:66:3E:43:59:27:2F
Certificate issuer:       /CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
Certificate serial:       4F69220753B483ED2C670856A1A5D0F2DA742769
Authority key identifier: BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/323830333a373634303a32303a3a2f34342d3434203d3e20323635363933.roa
Signing time:             Tue 06 Jan 2026 19:42:57 +0000
ROA not before:           Tue 06 Jan 2026 19:37:57 +0000
ROA not after:            Tue 05 Jan 2027 19:42:57 +0000
asID:                     265693
IP address blocks:        2803:7640:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:69:22:07:53:b4:83:ed:2c:67:08:56:a1:a5:d0:f2:da:74:27:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
        Validity
            Not Before: Jan  6 19:37:57 2026 GMT
            Not After : Jan  5 19:42:57 2027 GMT
        Subject: CN=17052A9C84DABCC4BBF76F4B6162663E4359272F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1e:46:ae:87:b0:65:14:9c:d0:3f:2a:aa:e0:
                    de:e2:9d:32:59:ea:6e:81:50:01:a8:8c:48:18:57:
                    8f:86:0f:93:ba:da:e0:e0:2f:1e:cf:e2:6f:3a:b2:
                    a1:c6:f1:1e:7f:5b:1f:2a:f9:a1:fd:72:bd:b4:8d:
                    7a:1e:23:0b:1c:f3:5c:0b:9b:9d:dc:e3:c7:93:ef:
                    97:36:09:39:e5:92:c5:08:ee:b0:69:22:94:08:ef:
                    71:11:b0:bb:82:1a:dd:63:86:8b:45:17:7c:14:15:
                    8c:fe:ef:91:35:c9:71:51:48:26:7c:75:33:73:e5:
                    97:41:ff:3c:ad:73:c1:56:8e:15:9c:e2:1e:5b:e5:
                    43:fb:82:0d:9a:c4:a3:ea:61:01:57:96:89:1f:17:
                    46:40:75:eb:0b:73:48:ea:4e:30:89:e0:9e:51:fe:
                    70:1f:88:53:73:4b:d6:6d:c4:fa:b3:e1:3e:d5:21:
                    f5:86:f5:67:a3:75:c4:bf:77:bb:d6:d7:a4:70:97:
                    bd:b2:22:8c:13:bc:f4:25:73:64:2e:3f:3e:5b:61:
                    bb:7a:92:e7:af:aa:ed:65:8c:72:9a:b1:96:8c:eb:
                    8b:b3:bc:53:9e:4e:3a:7a:3f:2a:2a:e8:a2:c9:86:
                    f2:10:3d:08:ea:50:c5:20:93:04:cb:ad:72:af:60:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:05:2A:9C:84:DA:BC:C4:BB:F7:6F:4B:61:62:66:3E:43:59:27:2F
            X509v3 Authority Key Identifier:
                keyid:BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/323830333a373634303a32303a3a2f34342d3434203d3e20323635363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7640:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:8f:eb:32:e9:b5:dc:f0:46:14:49:f9:17:5c:d5:b4:a4:08:
         f9:e8:f4:98:4c:6f:22:ad:d0:7c:13:3e:9a:41:9f:2c:3d:68:
         72:9c:8d:70:d0:3c:73:2e:9f:48:09:80:46:93:b3:ea:ab:9b:
         8a:97:c7:de:6c:ce:53:f7:4a:12:49:c3:c8:ce:a2:70:da:83:
         86:98:67:08:9c:83:15:51:2d:31:cf:ce:fc:08:2a:75:08:a4:
         da:c9:ed:e8:a9:ed:77:15:8c:4c:a4:67:d1:de:2d:5e:df:e3:
         f3:59:8e:7a:dc:45:9a:a5:07:ea:2c:05:b8:bf:46:ad:b0:76:
         b6:7a:1b:f2:ba:0d:ac:76:0f:2c:c3:60:83:e3:04:35:fc:6e:
         4c:2b:e6:4f:64:90:2f:ef:59:9c:54:39:fb:7c:2c:ec:14:7a:
         c1:18:a3:10:62:91:9b:96:27:97:e7:b1:af:8c:37:38:1e:3d:
         89:4a:6d:ab:ae:96:9d:6e:c2:ba:f7:02:a6:7b:23:b2:23:c7:
         35:82:ff:c0:8f:21:21:f5:fe:f8:d6:29:74:2a:02:fc:b3:9e:
         cc:55:90:f3:4f:0d:62:a8:d5:b3:02:b0:53:64:d1:76:25:de:
         b5:37:df:ed:72:76:01:18:dc:01:65:34:45:31:3a:99:7a:14:
         88:fa:a1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:22:25 2026 by rpki-client