This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25E89E32D88E9752343D6253C0E0B2CEE288C4B855B6FADC269156680C1030E9/0/323830363a3336343a3a2f33322d3332203d3e20323635353233.roa
File:                     323830363a3336343a3a2f33322d3332203d3e20323635353233.roa (raw, json)
Hash identifier:          Bg/RLd2tb5jI/iFgRtVX73CfAgKeUq+E+FlTzPXTQzA=
Subject key identifier:   ED:ED:7A:89:F1:72:EF:D7:38:6D:32:2B:0C:EC:B9:FD:0B:9D:10:1D
Certificate issuer:       /CN=45945ED9E7062EDF6788772343BB26B609C7296F
Certificate serial:       1414A99D5223401DAE98B2CFF26F40F322E6B28B
Authority key identifier: 45:94:5E:D9:E7:06:2E:DF:67:88:77:23:43:BB:26:B6:09:C7:29:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45945ED9E7062EDF6788772343BB26B609C7296F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25E89E32D88E9752343D6253C0E0B2CEE288C4B855B6FADC269156680C1030E9/0/323830363a3336343a3a2f33322d3332203d3e20323635353233.roa
Signing time:             Tue 06 Jan 2026 19:28:32 +0000
ROA not before:           Tue 06 Jan 2026 19:23:32 +0000
ROA not after:            Tue 05 Jan 2027 19:28:32 +0000
asID:                     265523
IP address blocks:        2806:364::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25E89E32D88E9752343D6253C0E0B2CEE288C4B855B6FADC269156680C1030E9/0/45945ED9E7062EDF6788772343BB26B609C7296F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25E89E32D88E9752343D6253C0E0B2CEE288C4B855B6FADC269156680C1030E9/0/45945ED9E7062EDF6788772343BB26B609C7296F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45945ED9E7062EDF6788772343BB26B609C7296F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:14:a9:9d:52:23:40:1d:ae:98:b2:cf:f2:6f:40:f3:22:e6:b2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45945ED9E7062EDF6788772343BB26B609C7296F
        Validity
            Not Before: Jan  6 19:23:32 2026 GMT
            Not After : Jan  5 19:28:32 2027 GMT
        Subject: CN=EDED7A89F172EFD7386D322B0CECB9FD0B9D101D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8d:36:10:62:2a:6d:d3:be:79:e6:3b:c5:ed:
                    bc:b1:db:03:54:15:94:89:e4:a6:aa:1d:d7:a2:14:
                    0d:91:e0:94:dd:43:17:5b:db:08:6c:11:f9:4a:11:
                    66:6a:73:1f:f7:2b:c2:e0:4b:59:63:80:85:e2:f2:
                    d2:2a:e4:b1:d5:7e:3e:08:fe:11:06:8f:8a:60:af:
                    cc:5d:0c:9f:56:71:f8:eb:64:5f:b2:c6:3f:d3:a7:
                    ed:f4:f4:6c:29:12:36:03:6b:93:d2:56:94:14:66:
                    63:d8:c0:0e:59:94:52:c1:02:b2:2f:c0:c4:15:20:
                    7f:49:00:e0:98:65:04:ce:ed:80:cb:7f:4b:91:f0:
                    67:ef:84:92:a9:35:57:9f:42:82:42:70:be:65:b9:
                    48:09:80:e4:79:e2:e6:c3:6b:71:9f:60:73:06:2b:
                    41:37:91:45:91:9f:4d:28:32:e3:98:6a:9f:76:d1:
                    f1:0a:19:e7:04:bc:c2:ca:6d:7d:56:b3:12:3c:b3:
                    91:65:6f:5d:2b:ad:d6:e5:f1:a5:ec:7e:cc:7c:33:
                    8f:85:5c:23:be:5c:7d:a5:73:1a:05:d1:d5:0f:e0:
                    c7:72:e2:35:ce:46:2c:87:64:e8:7f:05:e2:d2:2e:
                    e0:5f:36:bf:48:58:4c:a0:a9:8b:63:e0:2b:4f:b7:
                    33:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:ED:7A:89:F1:72:EF:D7:38:6D:32:2B:0C:EC:B9:FD:0B:9D:10:1D
            X509v3 Authority Key Identifier:
                keyid:45:94:5E:D9:E7:06:2E:DF:67:88:77:23:43:BB:26:B6:09:C7:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25E89E32D88E9752343D6253C0E0B2CEE288C4B855B6FADC269156680C1030E9/0/45945ED9E7062EDF6788772343BB26B609C7296F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45945ED9E7062EDF6788772343BB26B609C7296F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25E89E32D88E9752343D6253C0E0B2CEE288C4B855B6FADC269156680C1030E9/0/323830363a3336343a3a2f33322d3332203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:364::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:a0:2c:fd:01:80:6b:ac:00:29:e1:af:c1:b9:9d:2b:bd:99:
         3b:fb:f0:73:e5:32:10:37:42:f6:b1:a0:b6:e4:79:ff:1f:8e:
         70:57:d6:22:86:d3:8e:8f:72:d1:bc:69:91:1a:3c:ec:f6:fc:
         bb:33:e5:9b:5b:c9:fd:e2:8d:0e:40:6c:13:11:b2:e7:bc:e2:
         16:56:79:82:10:80:39:8c:fb:16:65:74:84:fa:98:72:7c:ae:
         e3:34:d9:00:ad:91:8a:45:9d:a0:72:54:be:50:bb:df:7f:70:
         95:2b:2b:76:90:9e:4c:16:1c:6b:d0:29:69:5f:83:ae:62:63:
         f6:c0:6f:86:32:d3:b3:cf:27:11:38:44:1b:e6:65:32:05:26:
         e6:95:20:9d:49:7d:56:11:ea:63:40:10:2a:76:9b:e0:22:83:
         e0:e8:90:43:0e:44:6d:e0:fc:9e:c6:9c:a8:6f:c3:78:03:42:
         98:75:54:a1:d8:8b:d8:f4:c5:f6:82:3b:0e:90:8f:fe:77:ae:
         66:09:84:b6:35:4e:27:d2:28:bb:08:83:a5:0d:6d:05:5d:cc:
         bb:80:15:6a:8d:db:ef:22:05:cc:b0:81:f5:f5:da:b2:c0:3f:
         23:e6:1b:7c:e7:9c:05:05:46:7c:e3:31:f7:6d:c9:d5:3f:ab:
         1f:0b:fd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:41:43 2026 by rpki-client