This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/323830333a386332303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a386332303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          pIRFMGMBKoqiRyoLR1QK8/cCWAFxMkQlVJNA4G0zoTA=
Subject key identifier:   11:0D:85:5C:26:FB:31:27:BA:30:A1:3A:69:39:FD:CF:DB:01:55:F7
Certificate issuer:       /CN=BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355
Certificate serial:       1B3CFA6F7E6525D826F067726AB9DFC7F0CA4972
Authority key identifier: BE:6B:84:F3:8B:EB:E6:F3:5E:C7:9C:B8:35:CA:E0:A3:F9:21:B3:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/323830333a386332303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:21:59 +0000
ROA not before:           Tue 06 Jan 2026 19:16:59 +0000
ROA not after:            Tue 05 Jan 2027 19:21:59 +0000
asID:                     52468
IP address blocks:        2803:8c20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3c:fa:6f:7e:65:25:d8:26:f0:67:72:6a:b9:df:c7:f0:ca:49:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355
        Validity
            Not Before: Jan  6 19:16:59 2026 GMT
            Not After : Jan  5 19:21:59 2027 GMT
        Subject: CN=110D855C26FB3127BA30A13A6939FDCFDB0155F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:ff:35:a9:c5:6d:11:84:35:d5:df:50:6c:
                    d2:a3:3b:0e:ac:c9:1c:4c:fa:66:dd:42:aa:98:4f:
                    04:7a:08:d3:49:01:78:10:9e:6d:90:bb:02:a0:09:
                    ef:21:35:b9:ab:64:9f:5a:51:18:34:cc:29:6a:06:
                    8f:fd:56:46:28:27:fa:36:6e:d5:50:e0:8f:c7:e7:
                    9b:e4:99:15:c8:a2:b0:4b:14:ed:ac:2b:e6:79:84:
                    71:0d:85:ba:c9:b0:6d:72:48:a3:2a:2e:39:57:4f:
                    cc:93:24:71:23:12:7e:8d:7a:6d:25:c9:a1:09:39:
                    7c:6b:bf:4a:cc:ee:94:c0:8f:5e:05:97:e8:86:e2:
                    33:6c:3b:1b:35:76:3a:99:fa:84:4c:0e:f5:92:e1:
                    94:ea:30:7b:cc:32:52:ba:83:c7:28:c8:68:de:b0:
                    f5:87:3a:80:7b:c4:98:3a:a2:99:3a:1f:b5:e2:53:
                    9b:f9:20:34:db:db:bd:a7:14:09:d5:21:15:78:c2:
                    a7:53:3c:c7:ba:ff:f1:53:c3:d6:6c:b9:54:a6:82:
                    b0:75:d7:47:05:b3:90:d8:cc:79:a9:c7:1d:8c:e9:
                    c3:39:2d:23:a5:be:e1:6b:b6:85:b1:d1:b3:35:85:
                    a5:14:90:f5:8e:05:7f:82:4a:3e:64:17:bb:b0:57:
                    f2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0D:85:5C:26:FB:31:27:BA:30:A1:3A:69:39:FD:CF:DB:01:55:F7
            X509v3 Authority Key Identifier:
                keyid:BE:6B:84:F3:8B:EB:E6:F3:5E:C7:9C:B8:35:CA:E0:A3:F9:21:B3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/323830333a386332303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:e5:d6:ca:37:35:fe:d8:ee:2a:f7:d5:33:01:1b:6f:52:ce:
         72:d9:7d:d6:b3:c0:fe:2b:54:ed:a0:82:99:da:4a:60:ee:cc:
         2e:16:67:6b:ed:97:e2:21:9d:67:69:15:e0:d6:d8:d7:4c:04:
         2c:46:2f:ac:15:02:d7:7c:eb:78:3d:52:77:63:92:4c:ca:78:
         ce:a2:40:6c:1c:88:25:19:3c:6d:3b:e3:6a:fc:33:45:71:61:
         99:e5:a1:13:0d:dd:90:5f:ea:72:e2:52:e5:4b:f3:40:b6:77:
         ac:2c:f0:a6:56:2e:72:90:c6:2a:dc:00:fc:ad:5f:01:ea:ee:
         68:40:e5:4b:cb:55:2b:dd:e2:66:d1:d5:e0:e9:4d:27:6c:0a:
         45:0e:d3:c3:3a:1d:c8:af:a8:97:b0:19:db:0e:c3:29:5d:d3:
         ff:17:40:de:32:97:9a:90:f5:28:88:66:d1:55:7e:65:b5:03:
         15:95:89:4e:2a:08:54:a9:25:2f:ec:ee:07:07:3d:b2:51:5e:
         30:cd:c1:7a:42:94:fc:61:81:ad:73:33:46:96:4d:13:02:32:
         06:66:0f:1a:87:4c:1f:4c:ba:4c:45:21:c0:8e:e5:bf:92:64:
         1a:6a:4d:9b:c1:c6:4e:fc:b7:c2:51:b2:e7:fc:c2:9f:72:fd:
         cd:f7:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:55 2026 by rpki-client