This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/323830363a3330383a3a2f33322d3332203d3e20323635353536.roa
File:                     323830363a3330383a3a2f33322d3332203d3e20323635353536.roa (raw, json)
Hash identifier:          V2SLguOh51d+27+IevQP5f9JmaJbX24RiILCbhVl7CA=
Subject key identifier:   84:52:D8:6F:B4:A4:C3:06:31:06:C3:1C:FD:C6:58:1D:5F:25:F7:25
Certificate issuer:       /CN=2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3
Certificate serial:       021F73851E1E792FAD12488002615AFF2EE51D0B
Authority key identifier: 21:55:D8:99:F5:71:21:56:D0:B4:E8:7A:3F:DF:C6:A0:E1:A3:FA:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/323830363a3330383a3a2f33322d3332203d3e20323635353536.roa
Signing time:             Tue 06 Jan 2026 19:00:01 +0000
ROA not before:           Tue 06 Jan 2026 18:55:01 +0000
ROA not after:            Tue 05 Jan 2027 19:00:01 +0000
asID:                     265556
IP address blocks:        2806:308::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1f:73:85:1e:1e:79:2f:ad:12:48:80:02:61:5a:ff:2e:e5:1d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3
        Validity
            Not Before: Jan  6 18:55:01 2026 GMT
            Not After : Jan  5 19:00:01 2027 GMT
        Subject: CN=8452D86FB4A4C3063106C31CFDC6581D5F25F725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:ae:bc:69:13:9d:53:8b:b6:f9:ef:92:3e:
                    7c:52:f4:be:88:25:bc:e9:ac:af:84:21:b5:d0:5e:
                    04:5a:2f:53:04:ea:68:be:36:87:e5:90:89:a2:73:
                    fd:75:e0:e0:a7:4d:02:23:0b:38:dc:ab:d9:34:5b:
                    b4:a3:76:b4:f8:a7:f2:e6:28:9c:bd:6a:6a:ef:a2:
                    3c:8c:08:14:3f:23:4a:29:c0:e3:95:ac:15:72:9a:
                    8c:20:9a:32:52:ba:6b:8a:d0:6b:5f:3e:ca:67:fa:
                    24:c5:66:af:86:c2:7c:f8:b7:26:f0:92:22:86:d2:
                    cd:0e:ab:f0:ae:5a:ad:87:aa:d5:d8:24:b1:49:8e:
                    bd:4b:7e:35:a3:94:87:e0:3d:b7:ba:66:e5:13:13:
                    dd:ed:48:37:4b:2b:ca:6c:75:59:ac:11:e1:07:ed:
                    96:02:3f:88:79:d8:da:e0:bc:8f:0f:fb:c9:dc:02:
                    77:b0:4e:ad:22:7d:ba:3a:7f:89:ab:52:52:05:47:
                    1c:a5:85:d0:53:b3:04:f2:ce:52:33:7a:a4:ad:90:
                    92:8a:2c:8f:5b:f0:df:39:f2:b4:0a:d4:04:f3:78:
                    98:ca:38:50:40:2f:f2:5a:be:71:29:82:7f:79:01:
                    e3:6c:0a:6a:31:43:b6:98:3a:73:45:82:f1:00:0c:
                    51:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:52:D8:6F:B4:A4:C3:06:31:06:C3:1C:FD:C6:58:1D:5F:25:F7:25
            X509v3 Authority Key Identifier:
                keyid:21:55:D8:99:F5:71:21:56:D0:B4:E8:7A:3F:DF:C6:A0:E1:A3:FA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/323830363a3330383a3a2f33322d3332203d3e20323635353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:308::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:98:cc:e0:78:f0:cb:3f:97:41:b8:bc:1a:db:a7:8b:ea:f3:
         fc:a1:7d:cc:b1:5d:3c:12:3b:17:5a:ce:8d:4d:1e:e8:d8:b1:
         2f:f9:4f:2c:d7:fd:e9:39:21:b0:23:16:57:07:07:0a:1d:81:
         d2:ce:e7:a9:b6:5f:69:73:fd:85:12:0f:fd:4e:a7:30:09:5c:
         b9:b6:96:f4:98:94:75:b1:c6:ef:a9:7c:d6:75:23:85:9d:12:
         e9:f1:72:00:ae:53:38:3e:cb:50:d6:9c:1c:cf:40:a1:a9:76:
         b2:57:ee:0e:eb:2f:81:a9:6f:43:35:c5:b3:5d:44:12:9b:aa:
         3f:a9:01:29:51:84:3d:9f:65:3b:34:9c:89:56:f5:75:48:f3:
         98:e7:aa:fe:c3:9c:26:56:bb:93:78:9b:ce:58:0c:3f:ed:4b:
         95:b7:dc:8f:50:61:cc:38:25:67:85:f5:3d:1c:e7:c8:bc:ce:
         6d:c3:54:d4:7c:f9:29:bb:dd:77:52:ea:f2:64:c4:a5:43:61:
         30:cd:09:69:fd:c6:0b:c4:07:13:10:8e:55:17:6c:29:2a:70:
         a7:87:c2:bf:92:55:6a:20:bf:99:9c:65:50:09:2b:17:02:31:
         5c:8b:42:2c:f2:76:b9:c7:ce:34:c4:b2:7d:66:81:7c:85:3b:
         46:2c:66:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:04 2026 by rpki-client