This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/323830333a636365303a3a2f33322d3332203d3e20323639393036.roa
File:                     323830333a636365303a3a2f33322d3332203d3e20323639393036.roa (raw, json)
Hash identifier:          oo4nTMoHFEmc2rziShnB65Us8gunD75B2zl8uWP9ETE=
Subject key identifier:   5A:76:B9:6C:21:20:86:9A:46:48:53:39:8F:50:0C:9C:01:29:C2:2C
Certificate issuer:       /CN=C39BCEACF9BA6680E0AD24A39B266940F1AD975A
Certificate serial:       011F34190F55E7542EC6487BD1F4C7DB0E2338C3
Authority key identifier: C3:9B:CE:AC:F9:BA:66:80:E0:AD:24:A3:9B:26:69:40:F1:AD:97:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/323830333a636365303a3a2f33322d3332203d3e20323639393036.roa
Signing time:             Tue 06 Jan 2026 20:51:51 +0000
ROA not before:           Tue 06 Jan 2026 20:46:51 +0000
ROA not after:            Tue 05 Jan 2027 20:51:51 +0000
asID:                     269906
IP address blocks:        2803:cce0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1f:34:19:0f:55:e7:54:2e:c6:48:7b:d1:f4:c7:db:0e:23:38:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C39BCEACF9BA6680E0AD24A39B266940F1AD975A
        Validity
            Not Before: Jan  6 20:46:51 2026 GMT
            Not After : Jan  5 20:51:51 2027 GMT
        Subject: CN=5A76B96C2120869A464853398F500C9C0129C22C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a8:c1:79:71:4a:62:6b:7f:e6:41:2f:a0:9b:
                    09:02:bd:90:0f:9f:3a:8a:21:a5:31:58:5b:5a:de:
                    28:99:b6:2f:8a:53:8e:55:28:1c:b1:84:bf:8f:43:
                    0d:bb:b7:cb:ca:0c:35:50:b9:64:91:ea:36:14:79:
                    9a:d1:fa:e6:25:dd:40:2f:04:6c:75:1f:47:88:b9:
                    69:54:6c:6e:97:49:9a:1d:f7:b7:2c:5d:73:e2:87:
                    e8:06:57:be:64:dd:97:12:da:1f:d7:a3:bc:e4:b0:
                    5a:40:23:29:6c:c6:c3:11:59:e5:04:8d:fc:e6:ca:
                    3c:f5:8d:c3:62:3c:b4:2a:02:1b:e7:c2:9c:6c:c2:
                    9e:77:6f:17:8b:27:35:78:23:95:39:3b:dc:28:67:
                    83:84:bc:62:af:ee:05:25:6e:2e:cb:91:43:1a:0e:
                    78:29:8f:53:44:ee:19:95:94:64:6c:23:5e:0b:16:
                    35:f9:3a:2d:85:60:72:7b:85:05:c3:e1:91:5d:59:
                    93:3a:fe:08:bc:21:b5:da:fb:77:cc:7c:d9:fe:44:
                    86:c2:80:d9:9f:b6:8b:db:b0:28:f5:ee:6f:47:17:
                    34:35:16:e3:bd:67:71:40:d4:6e:04:84:97:45:e4:
                    11:4d:4b:0c:04:32:34:c1:40:5e:73:94:3c:b1:0c:
                    06:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:76:B9:6C:21:20:86:9A:46:48:53:39:8F:50:0C:9C:01:29:C2:2C
            X509v3 Authority Key Identifier:
                keyid:C3:9B:CE:AC:F9:BA:66:80:E0:AD:24:A3:9B:26:69:40:F1:AD:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/323830333a636365303a3a2f33322d3332203d3e20323639393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:be:94:46:11:e7:58:74:64:98:72:31:16:66:38:e9:a9:
         aa:e8:90:e8:77:a6:ab:2a:6b:a2:f0:bc:23:ca:82:fe:ef:c9:
         d1:be:69:d3:ab:67:73:cc:a6:f3:0f:b4:cf:08:b6:5a:9e:e6:
         f5:35:06:da:84:ad:cb:03:4d:ca:3f:e5:cf:c0:26:f1:62:17:
         9d:14:4b:df:3a:89:52:5b:e4:3c:be:85:37:30:e4:0c:d9:04:
         0f:13:86:03:f4:36:df:dd:50:e2:25:c1:5d:e0:a7:8f:d4:9f:
         c6:be:54:93:05:fe:bf:79:de:c6:22:bc:a0:62:ab:52:23:9c:
         d6:8a:2f:c0:d1:62:fd:19:1e:27:6d:f4:25:64:5a:31:1a:fd:
         75:60:09:9c:81:49:af:70:ac:40:b4:2b:41:8b:b2:b5:ed:8d:
         e4:66:b0:f6:13:81:42:fd:fd:90:12:0d:bc:02:0f:00:84:86:
         d8:2b:eb:98:33:c6:4a:0b:b0:e3:2b:cd:01:5b:47:d1:9b:d7:
         9f:4f:96:be:2b:19:ce:57:7d:1d:93:71:24:29:3c:89:55:39:
         bf:17:44:b7:ca:9f:30:a3:c5:c7:f1:36:b7:b8:81:f8:f8:e3:
         0d:3b:99:c5:f1:d6:7c:ac:47:b5:77:11:c6:91:35:06:74:4e:
         f2:10:51:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:56 2026 by rpki-client