This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e20323732313533.roa
File:                     323830313a3138393a3a2f34342d3434203d3e20323732313533.roa (raw, json)
Hash identifier:          OWZgNXVPeUr7qUWFTqLsiNIWwrCGzDj/XT2s3MQ5pCE=
Subject key identifier:   07:7F:3E:66:9E:E4:88:AF:F6:93:15:D6:9B:A9:9D:87:B8:19:CF:06
Certificate issuer:       /CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
Certificate serial:       0CB90AF016AAC214F4A4FFFD77A9C7B54B683DDA
Authority key identifier: BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e20323732313533.roa
Signing time:             Tue 06 Jan 2026 19:42:16 +0000
ROA not before:           Tue 06 Jan 2026 19:37:16 +0000
ROA not after:            Tue 05 Jan 2027 19:42:16 +0000
asID:                     272153
IP address blocks:        2801:189::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl
                          rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b9:0a:f0:16:aa:c2:14:f4:a4:ff:fd:77:a9:c7:b5:4b:68:3d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
        Validity
            Not Before: Jan  6 19:37:16 2026 GMT
            Not After : Jan  5 19:42:16 2027 GMT
        Subject: CN=077F3E669EE488AFF69315D69BA99D87B819CF06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:cd:e1:00:8e:6e:8a:1e:7b:4d:8d:c5:9c:
                    e6:22:7e:70:35:e3:0f:47:b9:02:13:bf:8c:31:66:
                    bb:c2:c7:67:cd:1f:ec:6d:69:02:7c:54:54:7e:97:
                    ba:a3:1c:9d:5d:28:1c:41:dc:4c:75:e7:a6:ac:01:
                    4e:42:b6:86:40:8a:ce:b9:99:02:89:98:61:dc:3a:
                    91:c1:a1:8b:ab:5b:28:d4:c8:4f:8c:e7:09:42:69:
                    c4:a4:01:43:7d:fd:44:a3:ca:38:2d:91:84:4f:20:
                    2b:16:2a:8b:91:6f:cd:f0:90:6c:ea:44:3e:18:36:
                    8c:8e:e6:24:3a:b5:c5:c9:16:ef:f6:ae:bd:d1:10:
                    2d:57:ec:34:6d:25:83:f1:1a:69:65:7a:8c:4c:ca:
                    1a:34:4e:09:91:cb:a1:5d:ed:11:a0:63:b9:0a:c3:
                    be:11:c2:ef:b7:14:e3:4e:dc:04:c2:20:1a:12:66:
                    f7:9f:c6:af:f7:aa:1e:49:f7:b9:52:61:9b:be:ad:
                    11:26:83:c6:e5:9f:0e:ce:6e:ef:71:b8:4b:53:10:
                    7c:7f:4c:bc:0d:ba:6b:b0:5e:32:42:25:9c:84:3d:
                    b8:ec:10:fc:48:9f:75:6e:3f:4e:2c:67:60:dd:55:
                    82:42:e6:f0:89:54:fa:fc:db:72:b8:f8:99:bc:2b:
                    fa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7F:3E:66:9E:E4:88:AF:F6:93:15:D6:9B:A9:9D:87:B8:19:CF:06
            X509v3 Authority Key Identifier:
                keyid:BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a3a2f34342d3434203d3e20323732313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:189::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:fe:34:78:7b:45:ff:8e:cc:63:c3:97:57:76:f9:4a:80:36:
         cf:ec:9c:25:f3:2a:f3:93:76:a2:c9:1a:97:70:06:c3:78:94:
         55:00:9d:b4:16:8e:91:74:d2:39:bb:5d:19:84:ed:ae:7c:ce:
         9f:53:d1:3d:3c:9f:45:c9:a0:a5:1c:10:41:2b:42:09:be:3c:
         25:b7:12:01:4a:2b:ba:2b:4d:30:97:73:c4:78:99:2e:97:ab:
         e0:e6:c6:f9:a4:7b:6e:e5:2a:a2:ce:c0:8f:e5:bb:6b:49:ab:
         f4:c3:35:a9:0b:9a:82:55:de:55:ca:95:95:01:f1:89:c4:6d:
         f7:a0:7a:fc:d8:18:fa:a0:e9:5b:05:a5:f2:7e:b0:51:0d:bf:
         3a:31:ae:ee:96:50:16:48:2e:ef:26:71:b6:f5:b6:87:cb:14:
         ba:88:de:1e:dd:bc:e8:fe:4d:ea:83:fd:34:6b:dd:5c:1e:ee:
         69:21:fb:8e:97:d9:0c:93:d9:66:68:b9:99:d1:0e:40:8e:64:
         e0:a1:06:0e:a9:47:53:64:7f:b6:fc:b9:e7:46:bd:71:e9:cb:
         6c:11:f6:e9:15:1f:84:1c:6f:8e:8f:89:1e:b6:e4:8a:d7:c7:
         73:b5:33:41:76:c8:0d:30:d9:08:a0:67:65:69:e7:dd:cf:a8:
         01:b0:74:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:46:37 2026 by rpki-client