This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/905A0AB4E1113938FE14BA91784224FB32812C624455A031A0F69EFD698B5CD7/0/323830333a366264303a3a2f33322d3438203d3e20323734323233.roa
File:                     323830333a366264303a3a2f33322d3438203d3e20323734323233.roa (raw, json)
Hash identifier:          vjkatxcOuZbg+ecCn94QAbAcOUNNErVKhu8PFodz5E8=
Subject key identifier:   C7:14:A1:4F:AA:EC:C8:13:96:1F:75:DA:46:57:79:A1:90:23:A5:30
Certificate issuer:       /CN=43B6751C9B29A4D5E15D773D14DADDFB2A406E59
Certificate serial:       4B6B08C7FB6B95B953B577D24E6825B7CD70AE6E
Authority key identifier: 43:B6:75:1C:9B:29:A4:D5:E1:5D:77:3D:14:DA:DD:FB:2A:40:6E:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43B6751C9B29A4D5E15D773D14DADDFB2A406E59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/905A0AB4E1113938FE14BA91784224FB32812C624455A031A0F69EFD698B5CD7/0/323830333a366264303a3a2f33322d3438203d3e20323734323233.roa
Signing time:             Fri 14 Nov 2025 15:05:00 +0000
ROA not before:           Fri 14 Nov 2025 15:00:00 +0000
ROA not after:            Fri 13 Nov 2026 15:05:00 +0000
asID:                     274223
IP address blocks:        2803:6bd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/905A0AB4E1113938FE14BA91784224FB32812C624455A031A0F69EFD698B5CD7/0/43B6751C9B29A4D5E15D773D14DADDFB2A406E59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/905A0AB4E1113938FE14BA91784224FB32812C624455A031A0F69EFD698B5CD7/0/43B6751C9B29A4D5E15D773D14DADDFB2A406E59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43B6751C9B29A4D5E15D773D14DADDFB2A406E59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 07:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6b:08:c7:fb:6b:95:b9:53:b5:77:d2:4e:68:25:b7:cd:70:ae:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43B6751C9B29A4D5E15D773D14DADDFB2A406E59
        Validity
            Not Before: Nov 14 15:00:00 2025 GMT
            Not After : Nov 13 15:05:00 2026 GMT
        Subject: CN=C714A14FAAECC813961F75DA465779A19023A530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f8:a3:65:d6:cd:a1:a5:a7:76:b3:67:1e:a0:
                    64:5c:38:8f:09:04:07:c0:29:0f:3a:8d:d5:ee:10:
                    89:b7:35:56:3a:27:b7:e0:c7:e2:9b:8c:4b:92:0a:
                    64:59:8b:5b:66:95:b6:d2:df:14:a0:36:ca:d1:24:
                    a3:ed:3c:5e:90:f3:04:71:ac:5b:12:90:bb:2b:cd:
                    81:fe:11:41:0a:b6:70:9b:f1:78:6d:fb:bd:bc:05:
                    a2:e6:43:4b:bd:a6:d5:2f:c6:6d:99:94:4d:1f:f4:
                    95:0d:6e:13:e7:cb:0b:5a:7d:1a:d4:94:86:b4:7c:
                    19:02:d2:4a:6f:c5:94:46:ff:d6:58:bf:ef:84:4d:
                    c2:1c:60:ff:fa:81:8c:83:98:b8:e0:7e:30:ab:9e:
                    5c:fa:a7:5b:ef:65:2e:97:de:f5:c4:95:4e:7e:3b:
                    38:90:79:7c:3e:6a:dc:f1:a8:93:db:94:54:23:21:
                    5e:6d:b6:06:25:e5:03:05:1b:18:de:82:7a:c0:a5:
                    03:bd:74:67:3a:72:4e:2e:4d:00:9b:fd:aa:d3:54:
                    94:39:b8:bb:f3:4c:64:07:00:2d:cf:73:3c:f5:88:
                    f4:ae:04:2e:08:10:fb:ad:f4:9d:af:28:6b:a0:dc:
                    ac:44:73:6b:ec:ba:09:43:71:c7:05:5e:d6:20:02:
                    d2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:14:A1:4F:AA:EC:C8:13:96:1F:75:DA:46:57:79:A1:90:23:A5:30
            X509v3 Authority Key Identifier:
                keyid:43:B6:75:1C:9B:29:A4:D5:E1:5D:77:3D:14:DA:DD:FB:2A:40:6E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/905A0AB4E1113938FE14BA91784224FB32812C624455A031A0F69EFD698B5CD7/0/43B6751C9B29A4D5E15D773D14DADDFB2A406E59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43B6751C9B29A4D5E15D773D14DADDFB2A406E59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/905A0AB4E1113938FE14BA91784224FB32812C624455A031A0F69EFD698B5CD7/0/323830333a366264303a3a2f33322d3438203d3e20323734323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:29:ff:09:64:b8:c4:ad:46:b0:79:31:19:8b:ce:14:a4:09:
         cf:1d:fe:1c:ed:a8:8f:bf:75:b5:2f:a5:39:c9:ce:60:9b:58:
         51:7b:c9:8a:fa:89:bd:a7:eb:b5:a5:f5:ed:d9:e2:0a:bb:03:
         c9:6b:46:8a:8d:04:2b:1a:67:d9:53:c1:c1:4b:92:dc:1a:42:
         9c:bd:c7:12:83:e1:fe:63:db:9b:0f:c3:49:d7:01:20:d5:d3:
         9e:b1:f2:80:a2:56:c5:51:77:b4:27:52:28:df:0c:d0:70:2b:
         b3:e3:43:b4:d7:05:d3:d7:40:ec:d9:14:73:57:4e:17:48:ba:
         21:82:c5:d4:64:7d:59:d9:8b:d1:c8:6f:5a:71:18:ce:b5:80:
         21:cf:85:28:d8:60:bd:3e:c9:1c:48:c8:19:d4:95:bf:da:2d:
         5c:28:28:d8:3a:19:a8:d2:7d:6f:19:65:d8:5c:a7:59:03:63:
         16:f5:bb:e9:84:39:ce:b7:63:d9:93:9d:1d:26:11:e7:84:36:
         79:da:f7:2a:5b:aa:cd:25:53:42:85:b8:b8:3f:66:bd:20:ce:
         11:d8:e5:dd:bd:ce:9f:5a:1a:df:f0:d1:8f:ef:c3:69:06:65:
         2e:88:47:80:cb:2a:64:36:bc:ce:62:da:00:22:19:39:80:b0:
         e9:ba:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:29:09 2025 by rpki-client