This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a3a2f34342d3434203d3e20323732393039.roa
File:                     323830313a3161393a3a2f34342d3434203d3e20323732393039.roa (raw, json)
Hash identifier:          U7oUDHyTDhblaUmWMfDj+2/IieGmVN6mcBA3MkQDeO4=
Subject key identifier:   DF:6C:40:F7:05:3A:DA:1F:B2:F9:9F:17:21:4E:87:92:3D:09:31:71
Certificate issuer:       /CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
Certificate serial:       4418A0CFD4E70F30ABE726E28413857E68E3C1DA
Authority key identifier: BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a3a2f34342d3434203d3e20323732393039.roa
Signing time:             Tue 06 Jan 2026 19:34:21 +0000
ROA not before:           Tue 06 Jan 2026 19:29:21 +0000
ROA not after:            Tue 05 Jan 2027 19:34:21 +0000
asID:                     272909
IP address blocks:        2801:1a9::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:18:a0:cf:d4:e7:0f:30:ab:e7:26:e2:84:13:85:7e:68:e3:c1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
        Validity
            Not Before: Jan  6 19:29:21 2026 GMT
            Not After : Jan  5 19:34:21 2027 GMT
        Subject: CN=DF6C40F7053ADA1FB2F99F17214E87923D093171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:8d:9b:82:4c:31:7c:70:9d:b4:54:af:19:
                    96:a7:7a:17:09:85:7a:e1:fb:be:97:32:dc:ec:6f:
                    b8:40:c4:d5:f5:30:6a:42:ce:a2:ae:57:b2:19:f2:
                    45:ac:df:57:28:cf:5e:c1:11:3d:30:05:99:23:8a:
                    8c:f2:c9:df:29:63:72:e9:91:07:39:92:eb:aa:73:
                    cf:fc:e7:89:5f:e6:6e:69:75:0b:e8:17:73:11:50:
                    01:06:9b:03:46:41:14:5e:b5:5d:bc:ed:d0:b6:39:
                    66:38:ef:ed:cf:47:a3:30:64:5d:4b:e5:be:79:46:
                    1b:83:47:b6:c7:43:ee:60:37:69:df:8d:76:2c:9b:
                    12:be:00:7e:9b:16:35:98:28:41:e8:75:54:1b:c7:
                    52:05:2c:9d:5d:f2:e6:fa:4c:09:16:70:4f:e3:6d:
                    9c:6b:fd:04:39:e8:6e:81:d3:d8:b7:0f:1f:48:19:
                    c4:6b:33:02:7f:15:18:5a:55:20:5e:58:31:2f:a3:
                    8b:bb:9a:af:aa:ce:a3:0e:dc:82:0c:15:eb:a7:06:
                    45:4d:24:ac:14:6a:bf:b5:33:07:1a:c1:80:44:09:
                    68:5b:ac:fe:f8:67:86:09:2b:e4:df:51:3a:aa:3d:
                    7f:03:9e:15:65:2a:6b:a1:3f:2f:4f:cb:97:3d:35:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6C:40:F7:05:3A:DA:1F:B2:F9:9F:17:21:4E:87:92:3D:09:31:71
            X509v3 Authority Key Identifier:
                keyid:BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a3a2f34342d3434203d3e20323732393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a9::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:f7:df:25:4e:88:d6:33:7a:3f:41:bb:ca:90:85:39:4f:e2:
         5c:bc:49:66:ab:78:c1:94:da:c5:18:01:ec:ca:a5:ca:fc:86:
         a5:54:ba:96:c4:20:4f:a9:37:44:65:b3:c9:ce:fd:e1:1f:5d:
         a2:40:a6:02:0a:88:bb:cc:58:e0:99:f8:f1:0a:18:61:5d:91:
         63:68:11:23:ac:a3:7f:fb:6b:39:92:fd:58:76:ae:eb:20:22:
         f0:9a:f6:e5:6e:74:e8:5c:97:d7:00:c8:82:84:39:be:f2:90:
         51:5f:43:5f:cf:93:1e:c8:e0:ba:58:45:42:bd:5d:3c:5b:9f:
         85:31:5e:9c:9f:f2:4e:af:37:6a:2c:90:42:5e:79:69:3b:d1:
         bd:76:d0:4e:43:7f:1a:6c:7f:e1:d3:d1:e6:c0:2c:85:fe:67:
         f5:f3:41:a5:88:5d:22:e7:d7:16:c1:a5:be:82:94:47:fd:0a:
         c0:56:c4:82:57:39:0e:64:88:12:d5:4b:8b:df:67:63:ee:0c:
         f6:c5:eb:2b:69:d5:0e:e2:e9:2a:3f:ec:0f:39:11:b6:33:64:
         45:49:91:c0:4b:28:82:8d:44:d7:df:a5:d0:9e:e3:c3:2a:b5:
         f1:69:6d:67:0c:ca:c1:e4:3e:6b:82:e7:b9:7b:a6:41:ac:f3:
         8c:30:3a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:07:56 2026 by rpki-client