This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5BA21CC4F0602BDF1E7873DFF86802AE44708776B96DDA17BF4AF91D2A9AABF/0/323830333a343065303a3a2f33322d3332203d3e20323639383436.roa
File:                     323830333a343065303a3a2f33322d3332203d3e20323639383436.roa (raw, json)
Hash identifier:          HlyzGMbuXM7pbvsEp1d/ueHaPaQmw6sq/Yw9YDYj3Gs=
Subject key identifier:   44:D6:67:75:CF:5C:A0:82:96:0B:DB:53:FF:E6:F3:14:4F:14:AA:07
Certificate issuer:       /CN=94EF4DE1BCBF246C783D820AFBAC01E740AF2D08
Certificate serial:       294F48508FCCE69B4BFE4E8EED3E2C4F7A40CADF
Authority key identifier: 94:EF:4D:E1:BC:BF:24:6C:78:3D:82:0A:FB:AC:01:E7:40:AF:2D:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5BA21CC4F0602BDF1E7873DFF86802AE44708776B96DDA17BF4AF91D2A9AABF/0/323830333a343065303a3a2f33322d3332203d3e20323639383436.roa
Signing time:             Tue 06 Jan 2026 19:04:05 +0000
ROA not before:           Tue 06 Jan 2026 18:59:05 +0000
ROA not after:            Tue 05 Jan 2027 19:04:05 +0000
asID:                     269846
IP address blocks:        2803:40e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5BA21CC4F0602BDF1E7873DFF86802AE44708776B96DDA17BF4AF91D2A9AABF/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5BA21CC4F0602BDF1E7873DFF86802AE44708776B96DDA17BF4AF91D2A9AABF/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4f:48:50:8f:cc:e6:9b:4b:fe:4e:8e:ed:3e:2c:4f:7a:40:ca:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94EF4DE1BCBF246C783D820AFBAC01E740AF2D08
        Validity
            Not Before: Jan  6 18:59:05 2026 GMT
            Not After : Jan  5 19:04:05 2027 GMT
        Subject: CN=44D66775CF5CA082960BDB53FFE6F3144F14AA07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:a2:24:d3:4e:6a:32:04:a3:79:bf:8a:1d:
                    24:61:25:e7:d6:1e:c1:47:c6:e6:e3:5d:4b:fa:01:
                    6c:0f:56:4a:56:cb:38:48:9f:3c:5d:a0:ae:46:7e:
                    0a:11:3b:bc:b1:8a:50:ef:3a:02:ce:5a:c0:dd:aa:
                    f4:b1:0e:b2:5e:1a:9f:65:09:94:d4:65:f3:ab:b3:
                    68:c7:8a:8c:7b:03:62:0c:e6:15:16:20:67:37:08:
                    50:1f:02:45:50:06:dc:05:57:a5:2b:f3:c2:78:3b:
                    0f:59:a3:16:9f:b6:35:f5:5c:0f:69:b5:06:53:4f:
                    8c:02:06:b0:54:d3:32:40:ad:fa:94:d9:8a:f4:4c:
                    09:49:80:aa:bf:4f:c4:67:8c:8d:82:9f:fc:1c:99:
                    77:42:2a:c2:7a:75:e1:6f:63:0a:36:6e:7d:19:93:
                    39:ec:e1:ea:cb:ef:b0:d0:79:b2:b8:91:e4:63:ce:
                    38:0e:77:b1:58:5f:a3:26:f8:91:34:4b:b1:d2:c2:
                    cd:61:18:3f:8d:22:98:76:fe:1b:94:43:a2:57:09:
                    07:4d:87:e6:6e:3f:d1:93:6f:1e:c7:99:1f:02:da:
                    b8:72:b3:a4:5a:fc:cd:0a:50:6b:3e:9e:ec:f1:3d:
                    8b:d6:e4:7e:2e:21:d7:96:17:da:50:6e:36:10:8e:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D6:67:75:CF:5C:A0:82:96:0B:DB:53:FF:E6:F3:14:4F:14:AA:07
            X509v3 Authority Key Identifier:
                keyid:94:EF:4D:E1:BC:BF:24:6C:78:3D:82:0A:FB:AC:01:E7:40:AF:2D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5BA21CC4F0602BDF1E7873DFF86802AE44708776B96DDA17BF4AF91D2A9AABF/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94EF4DE1BCBF246C783D820AFBAC01E740AF2D08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5BA21CC4F0602BDF1E7873DFF86802AE44708776B96DDA17BF4AF91D2A9AABF/0/323830333a343065303a3a2f33322d3332203d3e20323639383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:40e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:e8:03:48:6a:d9:84:c3:77:04:3f:33:e1:0b:e4:e5:76:ab:
         36:fa:45:01:92:12:ed:c0:25:83:b0:ab:88:49:61:18:0b:25:
         58:3b:71:6a:52:ae:53:90:07:1a:86:97:4e:3a:ca:f9:f6:b4:
         63:c8:6f:9d:b6:43:81:c4:44:5d:d9:95:f4:79:27:0b:9a:3f:
         52:30:98:79:91:31:8f:69:08:b8:fa:ac:c7:ea:96:64:46:65:
         03:4a:45:e3:50:2a:df:90:37:89:ad:ec:9c:e7:74:5c:b4:5d:
         e3:b2:b2:54:3e:e0:3f:2a:99:93:34:1e:46:64:f2:8c:a9:e6:
         d6:aa:00:79:7c:35:49:f9:d7:f5:78:04:5b:8b:85:4f:4a:3a:
         f9:d3:38:a0:0b:71:85:15:c9:2c:3e:40:9c:63:e9:5d:97:da:
         cb:0f:9f:74:16:56:eb:8b:2f:dc:d6:28:09:ee:57:2d:c3:16:
         de:95:f9:af:5b:44:8c:05:b4:f9:cd:e4:23:15:ac:1e:6b:83:
         6c:0b:1b:13:34:9f:39:39:cb:5b:23:66:3f:28:fe:3a:4f:27:
         b8:5e:67:d8:a1:cc:33:06:9f:60:b2:ea:d6:d3:3c:36:24:cb:
         15:e2:c9:f3:ea:99:0a:08:22:d6:0c:50:4e:ff:4f:7b:03:55:
         35:4e:1b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:14:18 2026 by rpki-client