This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/323830363a3330653a3a2f33322d3332203d3e203238343233.roa
File:                     323830363a3330653a3a2f33322d3332203d3e203238343233.roa (raw, json)
Hash identifier:          8O+kdj6J14EZx1xmXbF3SnROxwV1eUhpm9aQwKr+dVs=
Subject key identifier:   12:4D:69:26:7D:CB:3C:03:AF:04:AB:2F:AD:9E:07:C2:42:96:21:59
Certificate issuer:       /CN=2E53C3E1222D746A5EEABB43EDFC93BA4037CACD
Certificate serial:       21328FE7B664DB4EC1C5BD5FE3F209AF49808D3C
Authority key identifier: 2E:53:C3:E1:22:2D:74:6A:5E:EA:BB:43:ED:FC:93:BA:40:37:CA:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/323830363a3330653a3a2f33322d3332203d3e203238343233.roa
Signing time:             Tue 06 Jan 2026 19:26:31 +0000
ROA not before:           Tue 06 Jan 2026 19:21:31 +0000
ROA not after:            Tue 05 Jan 2027 19:26:31 +0000
asID:                     28423
IP address blocks:        2806:30e::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:53:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:32:8f:e7:b6:64:db:4e:c1:c5:bd:5f:e3:f2:09:af:49:80:8d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E53C3E1222D746A5EEABB43EDFC93BA4037CACD
        Validity
            Not Before: Jan  6 19:21:31 2026 GMT
            Not After : Jan  5 19:26:31 2027 GMT
        Subject: CN=124D69267DCB3C03AF04AB2FAD9E07C242962159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:97:b5:f3:6b:d7:f4:5a:30:de:18:51:5e:
                    37:74:c6:52:9d:32:bc:19:ca:87:c9:10:e2:e6:c7:
                    d6:9c:b4:98:f7:84:60:00:09:61:17:af:30:25:a3:
                    e3:45:5f:92:12:13:79:52:ee:e1:0d:db:19:ae:2e:
                    83:33:85:5d:58:98:9e:0f:73:bc:e0:da:80:6a:98:
                    c4:e6:0d:b0:b2:ef:15:a8:00:df:8c:1d:3b:35:e2:
                    c0:9d:ec:43:81:4b:7f:c0:4e:12:98:30:27:e6:72:
                    a0:7a:63:d1:7a:28:9a:e1:c9:06:c2:63:72:01:db:
                    c0:5c:b0:99:0f:68:1a:8f:21:de:7e:f2:51:c2:9d:
                    2c:f5:bc:59:2b:21:72:ac:c7:c4:91:42:2a:51:d8:
                    32:13:0d:40:02:c7:e7:4d:26:e4:ff:e2:19:1d:09:
                    68:c0:57:23:17:4c:37:f9:36:de:de:bb:e7:4a:73:
                    6c:ca:24:27:74:6d:98:46:f3:ae:f3:86:44:8e:c4:
                    e3:1d:68:ff:df:c4:6f:7a:cf:3e:c8:f0:c3:4e:55:
                    01:9f:25:49:b8:3d:35:d3:df:b7:b6:8e:85:a3:c1:
                    77:1e:2f:e6:fc:c3:ce:6f:52:5c:41:c2:2e:f7:8b:
                    d8:a7:25:92:29:35:79:ea:58:cb:b4:89:b7:0f:ef:
                    05:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4D:69:26:7D:CB:3C:03:AF:04:AB:2F:AD:9E:07:C2:42:96:21:59
            X509v3 Authority Key Identifier:
                keyid:2E:53:C3:E1:22:2D:74:6A:5E:EA:BB:43:ED:FC:93:BA:40:37:CA:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/323830363a3330653a3a2f33322d3332203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:30e::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:ad:86:2c:cb:d8:5a:49:fb:f3:4f:f8:75:54:f5:b5:2a:32:
         3a:b8:84:a4:27:80:aa:dc:ea:af:54:cf:fc:a7:d7:23:01:a5:
         82:20:6a:85:b3:6a:9f:ec:ac:90:20:ae:6a:75:54:80:18:cd:
         e0:4f:ca:80:ee:04:e1:13:56:25:c2:28:89:6e:3a:be:0b:b5:
         86:7a:73:2e:0e:49:7b:08:c8:ba:84:f2:bf:28:4d:9f:cb:da:
         4a:23:f2:81:81:11:f7:0e:38:98:51:21:f0:c0:83:28:7d:93:
         37:21:93:c0:cb:09:3b:74:80:e5:f8:bd:b9:a1:cb:ed:8b:5a:
         d4:10:32:06:a4:a5:e6:5c:2d:a8:7b:4f:ea:7c:63:e0:cd:67:
         da:e8:e1:91:8a:47:b6:d0:bc:63:c6:48:29:71:a7:17:37:91:
         4a:16:72:d0:94:56:0f:db:60:ed:a0:8d:5e:f6:71:34:77:ec:
         62:05:84:54:b0:4e:19:dc:96:5d:4a:1b:85:2b:46:a4:7f:c6:
         2d:83:f7:84:4e:75:98:00:df:1c:21:0d:8c:3f:17:6c:2f:10:
         f0:c4:95:15:6f:ec:3b:33:fc:a1:0e:5a:cf:99:c8:94:75:6d:
         4c:9b:59:34:c5:c2:65:19:e9:17:a7:be:75:8d:0a:c0:09:b3:
         bf:91:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:24 2026 by rpki-client