This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/323830363a3231653a3a2f33322d3332203d3e203238343039.roa
File:                     323830363a3231653a3a2f33322d3332203d3e203238343039.roa (raw, json)
Hash identifier:          uBQ5h2p2sy5+v8bI0uTBtPXXGimvVp9yDtezo09W9ng=
Subject key identifier:   E1:D6:41:AA:5D:40:D9:AE:D7:45:0D:4C:A5:A1:AE:84:EA:A3:68:87
Certificate issuer:       /CN=913C600205F778BCEADE53F31FD3D65A46D53467
Certificate serial:       0F05AD5937BC18C2B288D39EBB5C1875836A9E1A
Authority key identifier: 91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/323830363a3231653a3a2f33322d3332203d3e203238343039.roa
Signing time:             Tue 06 Jan 2026 19:26:11 +0000
ROA not before:           Tue 06 Jan 2026 19:21:11 +0000
ROA not after:            Tue 05 Jan 2027 19:26:11 +0000
asID:                     28409
IP address blocks:        2806:21e::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:05:ad:59:37:bc:18:c2:b2:88:d3:9e:bb:5c:18:75:83:6a:9e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913C600205F778BCEADE53F31FD3D65A46D53467
        Validity
            Not Before: Jan  6 19:21:11 2026 GMT
            Not After : Jan  5 19:26:11 2027 GMT
        Subject: CN=E1D641AA5D40D9AED7450D4CA5A1AE84EAA36887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:d3:6c:7b:69:7a:d8:6c:77:4b:b8:a0:b1:
                    61:e8:46:f2:d7:98:bc:96:c1:98:0b:af:66:3f:80:
                    59:73:3f:bf:f5:b8:f3:40:92:f9:55:2a:98:8f:96:
                    99:4e:25:06:76:b6:62:2c:cb:ad:a4:21:08:fd:53:
                    9d:32:01:1e:8e:2c:71:18:48:0d:23:8a:40:d6:bc:
                    17:75:21:76:7b:8e:67:41:2c:f6:0c:be:62:11:51:
                    8f:6c:05:81:86:d6:1c:1e:c7:07:4b:18:86:e2:57:
                    5c:65:42:52:07:bf:09:31:53:44:6a:3f:9a:8b:24:
                    95:b6:b1:06:7c:54:e9:09:c0:2f:fe:d7:bb:94:26:
                    5e:e4:8b:df:6d:45:dd:53:14:d7:44:f0:87:a2:da:
                    c5:b7:cc:39:a7:8d:57:61:e9:0d:60:8e:f8:d8:cd:
                    a9:90:23:2d:b2:fa:cf:a0:89:ef:73:30:66:13:4c:
                    be:9f:16:c3:c5:b4:a3:5f:ca:0b:dc:22:fe:c6:45:
                    86:ca:1d:a2:a5:28:ac:49:79:1e:06:04:05:b6:1f:
                    8a:8f:14:21:b2:74:92:35:83:64:c0:23:e2:73:c6:
                    07:0a:f2:40:0f:e3:4b:bd:6a:e3:9d:92:4e:f8:e6:
                    fa:3f:a3:78:57:5d:aa:c1:ba:cd:fa:8c:9c:7b:7d:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D6:41:AA:5D:40:D9:AE:D7:45:0D:4C:A5:A1:AE:84:EA:A3:68:87
            X509v3 Authority Key Identifier:
                keyid:91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/323830363a3231653a3a2f33322d3332203d3e203238343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:21e::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:7b:de:3c:20:e9:22:99:dd:c8:3a:0c:d7:b6:dd:8a:17:3c:
         67:89:6b:7e:bb:84:65:a0:91:cf:d2:3a:db:05:2f:0a:f5:99:
         1a:f4:86:dd:54:69:46:24:5f:0f:67:c9:50:90:5c:77:cf:13:
         cf:c4:42:85:9e:d0:42:2e:79:05:69:9c:09:0a:56:f0:81:ba:
         99:20:1f:5c:dc:ab:9b:c9:94:5e:13:95:1c:2c:30:7c:e1:64:
         e4:c3:7d:45:ea:f1:1b:93:65:1d:83:37:17:a4:f9:81:50:f2:
         0e:40:db:d8:c1:9e:5b:53:d3:38:d3:98:58:c4:76:44:2b:4e:
         41:5e:fd:a2:11:06:98:71:73:83:aa:d5:e6:b7:fc:06:4d:24:
         d8:7a:f2:37:34:ab:a1:4d:68:64:c8:ee:89:41:dd:3e:bc:bc:
         ab:0a:ef:be:ba:47:10:23:3c:be:88:ce:1d:f3:d9:52:2c:a5:
         19:76:85:27:93:88:5f:49:6b:21:3b:d0:12:fc:a7:be:4d:b8:
         84:f9:64:40:37:ef:ff:80:a6:24:ac:d7:73:e0:3a:28:66:bf:
         fb:53:08:ba:68:69:e3:13:f4:a2:f0:ed:69:24:3d:8a:fd:f0:
         99:2d:07:d4:98:4d:f6:96:51:cf:f4:59:fb:a7:cf:28:7c:24:
         ab:08:d0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:11 2026 by rpki-client