This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e20323632313931.roa
File:                     323830313a3138393a3a2f34342d3434203d3e20323632313931.roa (raw, json)
Hash identifier:          24hqPLZN9jYzY+xIvAhVyQfOx4PMbvPM7iP1dtzYZhE=
Subject key identifier:   69:0B:9A:BB:A3:E5:36:37:B7:0C:59:ED:9F:51:9E:AA:F8:97:B3:9E
Certificate issuer:       /CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
Certificate serial:       02BB979AC1311F8627FA233B77E30402FDDA26EF
Authority key identifier: BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 19:42:15 +0000
ROA not before:           Tue 06 Jan 2026 19:37:15 +0000
ROA not after:            Tue 05 Jan 2027 19:42:15 +0000
asID:                     262191
IP address blocks:        2801:189::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl
                          rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bb:97:9a:c1:31:1f:86:27:fa:23:3b:77:e3:04:02:fd:da:26:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
        Validity
            Not Before: Jan  6 19:37:15 2026 GMT
            Not After : Jan  5 19:42:15 2027 GMT
        Subject: CN=690B9ABBA3E53637B70C59ED9F519EAAF897B39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:60:62:59:2c:f1:5d:d9:7c:e3:32:e8:23:3d:
                    28:c1:98:6e:0d:1c:55:b2:26:f3:9e:23:7b:a8:11:
                    36:58:99:48:7e:af:b4:be:c1:15:64:c7:01:31:83:
                    f1:48:6c:94:d8:3a:be:7b:9d:e2:dc:b4:47:ad:ae:
                    28:6c:7f:60:c6:21:62:32:55:06:e8:cb:e9:1d:d8:
                    4e:fb:b4:ca:75:ba:b4:07:50:d6:8f:93:95:b8:a9:
                    b8:d6:3f:96:a4:d3:04:65:6a:1b:db:6e:a3:e1:40:
                    01:2e:a4:35:7c:ee:7c:63:12:93:25:72:4d:37:a6:
                    b5:d0:42:fc:66:1d:85:d4:06:92:13:5a:2e:46:ec:
                    b9:68:e6:4e:64:43:84:8c:af:c6:0a:3a:d9:00:57:
                    57:0e:ea:dd:de:5e:bf:01:4c:1e:0c:33:55:61:75:
                    fe:b5:a6:40:24:eb:56:7c:92:ae:06:6a:52:e9:bf:
                    3f:e8:40:bf:6a:38:19:27:9f:a2:2b:5b:90:29:bf:
                    5a:85:43:b5:7f:4a:5b:3e:78:66:a9:ed:a4:46:5f:
                    9f:af:93:2b:f6:44:f9:60:7f:d1:a3:41:5b:43:16:
                    a3:67:9f:76:48:38:3c:9b:9b:1a:8e:17:8b:cf:17:
                    ca:e8:1b:b9:65:33:3d:9e:d2:73:10:0f:26:91:08:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0B:9A:BB:A3:E5:36:37:B7:0C:59:ED:9F:51:9E:AA:F8:97:B3:9E
            X509v3 Authority Key Identifier:
                keyid:BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:189::/44

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:f0:d9:7b:cd:fe:26:49:7d:87:d1:bb:78:50:76:d5:38:
         56:ff:00:1e:83:d1:51:b0:b6:75:48:c3:86:1f:e9:5d:be:f4:
         25:85:10:08:9f:a5:75:9d:fe:10:ef:8a:98:8c:06:bc:9b:e8:
         dd:e7:08:d7:e9:cb:39:7d:8c:d3:14:86:70:df:dc:8e:c9:a3:
         31:a0:e7:20:00:2b:f4:8f:ab:03:73:1e:eb:6c:b2:98:43:e7:
         22:24:39:66:12:d0:d1:b7:6a:6c:bf:0d:4c:32:f0:c2:0d:2d:
         2c:57:34:99:7e:2f:4c:84:56:5e:51:20:39:be:8b:a6:91:42:
         c4:be:eb:b5:34:21:af:c1:3e:1f:4f:2d:c2:20:03:86:e1:ca:
         f8:ef:05:21:13:f5:0f:7e:59:03:bf:b9:d9:d3:40:62:7c:fa:
         74:9b:aa:7b:d0:37:a0:96:0e:69:07:71:8d:6c:12:96:8d:02:
         b5:d2:a9:8a:c3:3d:9c:22:7b:31:95:c2:9e:43:be:5a:fa:b0:
         61:97:76:3a:db:8b:be:01:76:8f:b8:0c:77:66:38:3c:34:8d:
         fd:fd:2c:14:af:d9:c2:8e:fa:39:5a:0c:56:b9:87:bf:a4:c6:
         77:5b:8c:8b:8d:cc:40:b1:4b:53:b8:13:a3:01:76:16:3f:20:
         69:71:d3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:24:41 2026 by rpki-client