This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/323830333a396130303a62623a3a2f34382d3634203d3e20323632323339.roa
File:                     323830333a396130303a62623a3a2f34382d3634203d3e20323632323339.roa (raw, json)
Hash identifier:          vYb7vzVxmdfTiSirtA8iRp86D8+wYpVG3NNt9KYPi+4=
Subject key identifier:   D3:3D:E4:0F:1C:EC:EB:1B:94:72:61:0C:99:45:28:6C:72:45:8D:3E
Certificate issuer:       /CN=39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF
Certificate serial:       705226B049461C838A1F5876AC559553746CAF50
Authority key identifier: 39:44:6F:5E:8A:4A:60:A5:A4:F4:26:FB:E7:E7:29:68:C1:6C:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/323830333a396130303a62623a3a2f34382d3634203d3e20323632323339.roa
Signing time:             Tue 06 Jan 2026 18:59:59 +0000
ROA not before:           Tue 06 Jan 2026 18:54:59 +0000
ROA not after:            Tue 05 Jan 2027 18:59:59 +0000
asID:                     262239
IP address blocks:        2803:9a00:bb::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:52:26:b0:49:46:1c:83:8a:1f:58:76:ac:55:95:53:74:6c:af:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF
        Validity
            Not Before: Jan  6 18:54:59 2026 GMT
            Not After : Jan  5 18:59:59 2027 GMT
        Subject: CN=D33DE40F1CECEB1B9472610C9945286C72458D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:e7:23:e4:e9:2d:42:d9:1c:bf:17:a3:39:
                    36:5b:5f:66:7d:f9:28:9d:49:71:e8:a0:03:32:e8:
                    27:29:ac:0a:a7:74:c2:14:40:06:e7:fb:db:ec:74:
                    e9:06:4a:a9:c4:27:6a:47:25:bb:7f:1e:d3:ac:f9:
                    c0:99:b1:ae:f1:08:7b:d5:8c:2a:d1:7d:e5:b4:94:
                    50:17:1a:f3:28:5b:6c:96:a0:6d:f5:1a:1e:cf:61:
                    14:10:21:94:fd:4d:63:8c:f9:7c:fc:0d:9e:8f:3a:
                    7f:9c:fa:44:9e:bf:04:99:a8:b3:00:50:9d:d8:b3:
                    b8:70:00:3d:51:bb:06:92:89:63:59:01:e0:e5:d0:
                    2e:b5:cb:c5:25:24:4d:e7:e3:67:8f:03:ff:67:a5:
                    b6:7a:29:ff:1a:68:42:bb:a8:25:13:c4:1c:d4:a0:
                    68:50:5f:44:b1:0c:90:b6:cd:35:67:3e:99:02:22:
                    2f:f3:5e:8d:cb:1d:84:82:22:eb:e4:48:63:aa:8c:
                    6f:74:7c:ce:37:fd:c5:86:b4:c6:7b:2a:1c:55:8c:
                    72:03:ad:c0:62:63:12:6b:88:5f:0a:1d:c2:ac:df:
                    86:4c:a7:74:25:81:48:55:c4:b1:c1:38:da:5d:a1:
                    be:4a:e4:d3:ad:ca:9c:1d:3b:2e:27:ee:16:df:f5:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3D:E4:0F:1C:EC:EB:1B:94:72:61:0C:99:45:28:6C:72:45:8D:3E
            X509v3 Authority Key Identifier:
                keyid:39:44:6F:5E:8A:4A:60:A5:A4:F4:26:FB:E7:E7:29:68:C1:6C:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39446F5E8A4A60A5A4F426FBE7E72968C16C1EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB47BEC5845FEF89B4F49F9AED43CA62E31AA56C53BA38AEC090599569E48945/0/323830333a396130303a62623a3a2f34382d3634203d3e20323632323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a00:bb::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:c7:7e:88:75:22:59:38:eb:1f:f2:61:66:d0:36:cf:ee:a8:
         87:2a:60:0a:18:0d:24:c6:6e:5c:4b:9b:4e:dc:76:60:44:40:
         33:f1:30:3e:af:d0:3e:e6:ba:a7:c3:6f:45:47:d9:a3:e7:39:
         8c:ba:74:f5:b0:70:ad:67:06:91:fa:a5:c6:81:95:39:e3:c9:
         41:d2:b5:b8:bf:b9:f9:85:c4:b3:4c:0e:db:fa:4d:5c:86:d1:
         12:06:bc:bc:b6:98:8b:17:e4:31:3d:e4:64:7c:fb:09:da:f6:
         82:1b:cf:56:0b:d8:f5:c4:9c:34:7f:54:77:e9:e0:7c:ed:be:
         dc:8f:3b:a7:0b:d7:0d:8b:f3:ec:3b:0e:c2:46:13:b4:56:11:
         88:76:10:87:08:e2:e3:eb:4f:26:2e:d7:87:09:f9:3b:a1:6f:
         fe:5a:b5:e2:0f:9b:8f:11:f0:be:17:d5:11:86:b8:f4:f2:71:
         d8:04:6f:4f:a0:a8:51:fd:89:aa:70:3e:ec:5e:8d:65:c1:60:
         8a:51:8a:6e:ea:98:ca:3d:22:d7:2b:bb:89:b1:20:09:f4:75:
         77:22:ea:f9:aa:fd:4c:c7:6d:61:2d:2c:52:90:74:0b:fe:35:
         b5:c6:09:50:07:0d:e0:0d:48:70:54:63:ff:c9:ca:a7:83:23:
         7c:3d:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:38:57 2026 by rpki-client