This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/323830363a3361303a3a2f33322d3438203d3e20323635363230.roa
File:                     323830363a3361303a3a2f33322d3438203d3e20323635363230.roa (raw, json)
Hash identifier:          dRllGUeVHSiifAr180SSq8oEUY03GCMVngjRfAKPCNg=
Subject key identifier:   89:E6:9A:29:50:48:D3:C2:A9:A6:2E:9B:4B:C7:67:48:94:66:14:31
Certificate issuer:       /CN=58C76DEB05E1657B955AB41355B108825D2D69BC
Certificate serial:       54F4A210AA80A3FD45FFAB6223BDE875E676F176
Authority key identifier: 58:C7:6D:EB:05:E1:65:7B:95:5A:B4:13:55:B1:08:82:5D:2D:69:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/323830363a3361303a3a2f33322d3438203d3e20323635363230.roa
Signing time:             Tue 06 Jan 2026 20:59:06 +0000
ROA not before:           Tue 06 Jan 2026 20:54:06 +0000
ROA not after:            Tue 05 Jan 2027 20:59:06 +0000
asID:                     265620
IP address blocks:        2806:3a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f4:a2:10:aa:80:a3:fd:45:ff:ab:62:23:bd:e8:75:e6:76:f1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C76DEB05E1657B955AB41355B108825D2D69BC
        Validity
            Not Before: Jan  6 20:54:06 2026 GMT
            Not After : Jan  5 20:59:06 2027 GMT
        Subject: CN=89E69A295048D3C2A9A62E9B4BC7674894661431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fc:df:d7:9d:6b:a2:dc:30:64:a8:ba:2f:88:
                    b9:f9:6d:49:57:9f:1f:2c:b6:e1:01:70:63:55:91:
                    d5:74:0f:a6:cc:97:d3:9c:06:45:bf:87:17:1e:eb:
                    31:af:76:b2:3b:c4:31:26:3f:f4:9d:2e:7b:f0:ef:
                    59:56:0d:d9:1d:e6:00:a1:b5:f0:16:a9:7a:8d:e9:
                    98:63:1f:d3:6c:67:e5:4e:8c:47:71:e1:4a:e5:b4:
                    4f:95:ae:ba:a2:c7:93:44:e6:e7:8d:b6:2f:fa:68:
                    82:0a:fd:bb:90:58:f2:b0:7d:f2:0c:6a:16:3c:d9:
                    42:00:ba:9a:cc:da:f6:f2:33:be:66:37:17:89:83:
                    78:bb:aa:5f:30:24:d7:16:4c:4f:b3:74:2d:47:2e:
                    4d:e3:08:14:c9:e1:04:5b:23:59:15:74:90:ea:2d:
                    c2:41:35:4c:74:85:48:ab:ef:60:9b:59:a0:b9:6a:
                    69:bd:f9:65:ad:8c:65:33:f2:8d:dd:46:35:d5:fc:
                    18:9b:88:c3:a9:1f:8a:fc:65:9f:4b:43:86:0a:d8:
                    c5:e8:f2:fa:63:87:7c:35:a0:a5:3c:c9:11:03:19:
                    72:a4:ec:e0:7a:84:e4:9e:71:15:8d:20:0a:7e:26:
                    b7:d8:2e:38:3c:1a:ce:5b:f1:eb:12:2e:4a:52:5d:
                    4d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E6:9A:29:50:48:D3:C2:A9:A6:2E:9B:4B:C7:67:48:94:66:14:31
            X509v3 Authority Key Identifier:
                keyid:58:C7:6D:EB:05:E1:65:7B:95:5A:B4:13:55:B1:08:82:5D:2D:69:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/323830363a3361303a3a2f33322d3438203d3e20323635363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:b8:8d:5c:3e:7b:fa:81:21:d5:ab:4d:58:7f:e2:4a:56:c0:
         6b:f2:42:f4:7e:6d:94:7a:92:75:28:97:4a:11:2e:cc:21:f0:
         82:0f:ad:cc:7e:1a:20:e0:c8:65:c2:d4:a5:f3:f7:8d:47:3c:
         05:c1:74:ac:96:ce:0e:79:64:87:22:a6:c8:d6:43:19:79:43:
         ed:dc:8c:f6:87:b3:11:e6:20:75:61:a4:5f:09:f8:e4:88:0f:
         e4:57:45:8f:79:a9:eb:ef:bf:23:49:f2:c3:01:b4:d1:d6:d0:
         77:1c:d8:3e:2f:41:f1:9a:6d:ec:d7:1e:27:3d:c8:7c:fe:00:
         cb:b1:14:f7:cd:35:cb:67:62:52:d7:e5:7c:63:9e:3a:58:be:
         a6:ba:92:22:78:7f:19:93:4f:1a:7d:34:61:32:6f:e2:8a:c4:
         75:c4:ac:53:c6:4d:52:b4:95:37:0f:6f:25:ce:fb:b8:21:cf:
         38:1e:19:4a:4b:42:7c:d8:87:ee:ff:f7:40:7a:b9:da:a8:5c:
         90:cd:70:76:f8:04:f2:bb:51:2a:5c:6c:77:fe:99:d7:2b:ed:
         3a:ea:bd:5c:15:00:3d:49:0e:a5:96:f5:8d:4a:58:12:18:79:
         33:bf:a1:2c:eb:5d:30:36:05:53:a8:c3:e9:34:4c:52:cd:1c:
         56:94:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:51:41 2026 by rpki-client