This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/323830363a3430393a3a2f33322d3438203d3e20323730313930.roa
File:                     323830363a3430393a3a2f33322d3438203d3e20323730313930.roa (raw, json)
Hash identifier:          oOQfHjo2WzSBs/8SwgmuE4guKtakj9CvIGqMCPLE74A=
Subject key identifier:   F8:C2:44:46:C0:0A:37:D1:03:E4:9E:2A:EA:83:5B:CB:35:AA:35:4A
Certificate issuer:       /CN=189839EAD50054334B1E36E7BFD30CB8FD644F89
Certificate serial:       5127A8E19B9FB4F0070C788EDE01C2C2C5EFFFDA
Authority key identifier: 18:98:39:EA:D5:00:54:33:4B:1E:36:E7:BF:D3:0C:B8:FD:64:4F:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/323830363a3430393a3a2f33322d3438203d3e20323730313930.roa
Signing time:             Tue 06 Jan 2026 19:29:56 +0000
ROA not before:           Tue 06 Jan 2026 19:24:56 +0000
ROA not after:            Tue 05 Jan 2027 19:29:56 +0000
asID:                     270190
IP address blocks:        2806:409::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:27:a8:e1:9b:9f:b4:f0:07:0c:78:8e:de:01:c2:c2:c5:ef:ff:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189839EAD50054334B1E36E7BFD30CB8FD644F89
        Validity
            Not Before: Jan  6 19:24:56 2026 GMT
            Not After : Jan  5 19:29:56 2027 GMT
        Subject: CN=F8C24446C00A37D103E49E2AEA835BCB35AA354A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:51:9e:58:07:b7:dc:73:df:40:b7:47:ee:
                    cf:e5:25:f5:27:f3:67:e1:3a:ca:83:10:e5:e7:f4:
                    4b:6f:5e:36:34:46:c4:9b:76:16:e5:62:f0:8e:51:
                    fa:df:5b:7e:bd:b2:ac:6d:aa:12:6e:1a:0a:0c:7f:
                    de:a8:8a:51:90:c5:65:55:00:40:7a:5d:fa:74:cf:
                    e0:16:47:e6:ae:64:56:05:c2:e1:18:e9:19:cf:19:
                    51:04:02:3f:c3:b7:ab:54:b1:34:58:ac:22:11:33:
                    74:b4:9d:ef:87:44:16:a5:07:f4:b9:7a:ef:92:c8:
                    cb:2e:27:c7:f6:c3:87:04:91:6b:1a:5a:e2:81:47:
                    af:dc:b6:76:ab:c0:52:62:fa:48:82:e3:c4:93:81:
                    14:7b:ec:e7:e9:90:ee:35:ed:26:66:05:12:f3:ab:
                    f1:71:b4:1f:e1:db:30:b3:03:e6:e3:67:4d:47:0e:
                    cc:f1:f3:44:14:e0:cb:3e:f2:14:a0:0b:a4:e4:5e:
                    f9:9c:d3:3c:67:16:6b:d5:6d:e3:ac:61:8a:44:70:
                    b7:86:0e:11:57:26:8e:ce:b1:3a:c2:33:db:b6:48:
                    45:75:d2:25:6e:be:be:af:80:e3:be:7c:62:dd:5c:
                    c7:d2:f5:ad:f4:14:52:0d:c2:05:08:78:eb:de:b7:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C2:44:46:C0:0A:37:D1:03:E4:9E:2A:EA:83:5B:CB:35:AA:35:4A
            X509v3 Authority Key Identifier:
                keyid:18:98:39:EA:D5:00:54:33:4B:1E:36:E7:BF:D3:0C:B8:FD:64:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189839EAD50054334B1E36E7BFD30CB8FD644F89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C729A3AB4123D9953BF1E820716250233C030F64B8F77CA8C9EF3F5E1979048/0/323830363a3430393a3a2f33322d3438203d3e20323730313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:409::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:d9:f8:d2:0b:2f:81:b8:37:f6:5c:0b:db:77:2d:bf:1b:3f:
         8c:0a:48:79:9a:d0:99:47:d4:8a:74:01:b5:9c:0d:02:a2:44:
         46:d9:1a:51:87:36:2c:c5:5d:ca:37:d5:da:9e:d1:8e:45:fd:
         2d:85:93:58:7d:6e:fa:41:84:e4:70:86:70:b7:52:db:f3:95:
         50:ad:9a:cb:3f:86:13:ad:eb:a9:6f:10:cd:8a:6a:18:1a:f7:
         e0:8e:b4:96:73:d0:07:76:81:ee:1c:e7:ca:63:eb:25:b6:86:
         3b:b0:12:b0:35:22:27:eb:a5:aa:8a:7e:d6:64:20:3b:4d:91:
         67:23:ef:a8:1f:a1:5b:86:09:c6:00:3d:52:dc:0f:b2:17:12:
         e7:8b:32:1b:08:a8:49:13:95:fb:80:b6:27:ea:28:c2:5d:e8:
         b3:fc:aa:3e:b6:4c:b3:53:83:cb:13:06:65:2a:d9:54:38:84:
         28:c1:06:f3:ca:a1:26:55:67:80:41:4d:90:85:f6:1f:dd:47:
         81:70:69:13:54:18:6f:de:af:47:11:4c:57:5c:d3:6c:92:2a:
         3e:52:d0:05:81:6d:82:3a:0e:13:16:47:57:aa:8b:ec:2c:14:
         b7:a7:17:21:d1:d2:46:18:b1:b7:73:f3:14:e1:ff:0e:af:38:
         87:a4:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:58 2026 by rpki-client