This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3634203d3e20323730313539.roa
File:                     323830363a3365363a3a2f33322d3634203d3e20323730313539.roa (raw, json)
Hash identifier:          dxWEDz7rv3R6PfVYD+E6/8zDJRZ9R3pAhq3HrRvwfn0=
Subject key identifier:   09:F0:FD:BB:4B:19:67:A9:21:51:C9:B2:02:B9:32:6C:1A:BF:38:26
Certificate issuer:       /CN=03C012BF937B42653C39221C7A9AA7F87567EC7A
Certificate serial:       2F5BE99C3C83EAD1D05F956AE53A09A5F1481019
Authority key identifier: 03:C0:12:BF:93:7B:42:65:3C:39:22:1C:7A:9A:A7:F8:75:67:EC:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3634203d3e20323730313539.roa
Signing time:             Tue 06 Jan 2026 19:34:53 +0000
ROA not before:           Tue 06 Jan 2026 19:29:53 +0000
ROA not after:            Tue 05 Jan 2027 19:34:53 +0000
asID:                     270159
IP address blocks:        2806:3e6::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5b:e9:9c:3c:83:ea:d1:d0:5f:95:6a:e5:3a:09:a5:f1:48:10:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03C012BF937B42653C39221C7A9AA7F87567EC7A
        Validity
            Not Before: Jan  6 19:29:53 2026 GMT
            Not After : Jan  5 19:34:53 2027 GMT
        Subject: CN=09F0FDBB4B1967A92151C9B202B9326C1ABF3826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:e7:31:90:fd:b7:3a:95:d4:41:26:8a:26:
                    51:a6:bb:3a:00:49:e1:61:97:c5:5c:81:96:c4:fa:
                    5e:de:6d:c3:ea:80:10:9f:2c:09:04:7f:5f:04:fc:
                    ee:2f:d2:55:aa:d3:12:86:ff:25:57:73:36:1f:5c:
                    07:9d:65:a8:ca:15:ba:8d:46:06:e1:fa:28:4a:44:
                    29:04:dc:12:9f:af:00:1c:27:16:fa:b9:aa:e6:7a:
                    05:bb:75:ea:d5:49:9d:e7:a1:cc:25:6d:c2:5a:63:
                    90:e7:68:ca:be:ce:15:df:cd:24:27:a4:95:02:d5:
                    bc:99:d9:b2:cf:68:af:81:d2:39:0b:51:cf:81:7d:
                    4b:90:f1:33:92:53:1d:dc:02:d1:09:ea:93:c5:e0:
                    33:9a:5f:1c:a1:a6:da:f6:a6:76:67:d6:e8:9f:d2:
                    3d:de:03:8a:83:07:8d:c4:57:78:8e:81:ec:60:47:
                    5b:92:3a:67:92:36:d5:23:8b:25:21:19:12:66:71:
                    c7:0b:dd:0c:b0:73:db:11:fa:32:e2:cf:fb:9a:b3:
                    3c:8a:b7:54:89:1c:bc:11:8b:9a:06:0e:d8:22:6c:
                    7c:f5:87:3e:2c:25:be:17:1d:53:ca:27:61:ea:ec:
                    48:89:79:ea:de:d7:49:37:5c:70:d8:2a:89:d8:6b:
                    33:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F0:FD:BB:4B:19:67:A9:21:51:C9:B2:02:B9:32:6C:1A:BF:38:26
            X509v3 Authority Key Identifier:
                keyid:03:C0:12:BF:93:7B:42:65:3C:39:22:1C:7A:9A:A7:F8:75:67:EC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/323830363a3365363a3a2f33322d3634203d3e20323730313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:f2:4c:bf:63:68:c8:33:dc:d5:30:e0:e0:c7:be:54:0c:10:
         ff:7f:fc:d9:fb:80:52:7d:2d:17:48:79:a3:9b:e2:bf:f7:a3:
         44:d2:da:83:2a:a5:87:ae:85:91:60:8b:a2:fa:0f:6f:b0:cd:
         67:ab:d9:9d:9f:69:31:95:79:62:fd:d0:eb:95:b9:6d:17:54:
         16:3d:c0:03:01:f2:69:db:c5:e4:ec:69:e1:21:57:5f:2a:ee:
         94:ed:0f:0b:8f:07:f5:63:be:83:43:e3:be:ab:ae:59:5a:d3:
         71:1c:bb:90:44:b0:82:4f:0d:1f:f4:72:97:54:13:50:ce:35:
         fe:ec:6d:33:d2:7b:9b:bd:6e:2e:ae:d8:a1:fd:8e:72:bc:c1:
         bd:97:37:a0:26:09:3a:7b:2b:00:d1:c6:d5:0d:2b:e3:8d:00:
         b7:3e:6d:4e:f8:69:a8:db:50:48:18:7e:c7:fd:b0:9b:88:20:
         de:08:a6:19:34:d3:be:3b:c6:ba:88:d8:02:a1:d8:a1:10:20:
         4e:ad:62:b8:2a:b9:60:d2:48:c4:bf:53:8d:c0:e5:31:77:73:
         a3:14:13:38:86:9a:64:ec:c6:a2:4f:d0:d3:b1:fd:d7:27:dc:
         15:27:da:99:20:1c:56:d7:bf:33:37:77:9d:44:ee:98:fc:9f:
         38:e9:f6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:41 2026 by rpki-client