This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/323830333a626332303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a626332303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          BxShP4F4YvVOxtomzhpqF76WqydwZ7MB/bp9O4r3/MQ=
Subject key identifier:   F7:F0:CB:A1:92:23:83:03:BC:50:65:40:B2:7B:06:D9:60:70:79:C0
Certificate issuer:       /CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
Certificate serial:       23AD9EACF370C44D0C086855A8D7FC0B66C77AE3
Authority key identifier: 39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/323830333a626332303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:36:35 +0000
ROA not before:           Tue 06 Jan 2026 19:31:35 +0000
ROA not after:            Tue 05 Jan 2027 19:36:35 +0000
asID:                     52468
IP address blocks:        2803:bc20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 01:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ad:9e:ac:f3:70:c4:4d:0c:08:68:55:a8:d7:fc:0b:66:c7:7a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
        Validity
            Not Before: Jan  6 19:31:35 2026 GMT
            Not After : Jan  5 19:36:35 2027 GMT
        Subject: CN=F7F0CBA192238303BC506540B27B06D9607079C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:74:3c:06:b2:c7:c1:03:fb:65:79:3c:95:
                    67:6a:46:e3:8c:41:d4:ca:c6:55:c4:89:b7:ba:e5:
                    2e:be:bc:7f:b2:28:b3:47:73:20:88:ec:d3:a3:90:
                    bd:58:f8:d8:bb:1e:29:d4:7d:d7:8c:24:38:20:60:
                    df:b6:6f:79:0a:be:fe:49:aa:c4:84:79:73:99:20:
                    8c:6d:25:c0:62:90:74:08:fe:82:c8:b3:b3:1c:a8:
                    3a:fc:85:b0:e6:af:c3:f9:80:a8:02:6f:45:69:b4:
                    16:18:99:f0:e3:65:20:c3:db:29:d5:22:ff:d2:31:
                    e0:92:cb:c2:3f:5a:dd:a6:68:22:cc:1d:80:10:cd:
                    bf:8d:bc:bb:47:6b:ab:da:12:04:8e:76:84:49:96:
                    4d:54:f6:12:fd:ea:0c:d3:2e:dd:c9:90:c5:2b:0c:
                    a6:66:be:2b:62:bb:3f:c0:41:2d:8a:f4:9c:df:d4:
                    40:42:a3:df:79:ab:13:23:a2:61:36:77:25:44:6c:
                    7d:38:2e:40:78:ec:65:fd:a8:c6:73:77:ad:56:bc:
                    cc:f1:b7:2e:a1:50:ac:9f:b2:62:36:10:98:84:1c:
                    87:cb:a2:68:b8:ed:25:2d:6a:23:59:e4:bb:eb:f3:
                    da:f5:1e:34:e2:b4:fe:c7:a6:c0:3a:b4:33:2f:89:
                    b8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F0:CB:A1:92:23:83:03:BC:50:65:40:B2:7B:06:D9:60:70:79:C0
            X509v3 Authority Key Identifier:
                keyid:39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/323830333a626332303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:e3:fd:10:b6:c2:0d:4f:a7:b7:00:b6:10:cc:0d:22:20:89:
         4a:2b:90:7d:ab:2e:cc:a6:7a:8c:b4:8a:6e:5a:24:ad:90:84:
         e8:70:2d:1f:46:f6:8b:22:b1:6c:b5:98:11:c9:e1:28:56:e8:
         65:4d:0a:95:b6:a3:6c:88:05:44:00:45:30:81:ea:b7:5a:44:
         6c:0e:4e:5e:37:20:e5:57:84:0a:6c:c7:62:ff:ee:e6:03:01:
         7a:e2:2c:43:80:6d:ba:65:48:8b:02:ac:79:1c:d6:06:50:24:
         8f:56:9e:ac:6b:11:45:34:75:1d:40:9c:fe:e6:53:ca:04:0d:
         4b:4e:15:05:88:f0:7d:c2:dd:3a:93:cc:24:a8:ae:59:39:37:
         a4:b5:54:82:1c:3e:5b:36:55:38:a6:ef:eb:40:a8:fc:f8:98:
         5e:6c:d5:1b:b7:27:ac:e7:c3:d1:93:89:76:a0:bf:90:92:a5:
         46:2c:e2:4b:b2:3f:89:63:75:fd:79:ce:72:29:64:07:15:12:
         f8:04:7b:f0:21:f7:f4:e6:12:cd:d0:37:c2:4c:ce:5f:64:07:
         9f:8e:08:e6:c1:e8:4e:78:f1:1b:94:1a:31:fd:46:c2:db:2a:
         52:95:80:91:0c:30:35:d1:9b:82:b9:be:3d:3c:16:d6:8a:d8:
         33:17:3e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:40:01 2026 by rpki-client