This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a313030323a3a2f34382d3438203d3e2036343631.roa
File:                     323830303a3837303a313030323a3a2f34382d3438203d3e2036343631.roa (raw, json)
Hash identifier:          QNjLJltCai6lmgDe0GN7PXDgAruMcmH5zlrR9M/dAzc=
Subject key identifier:   0B:EC:EA:2E:EA:C8:54:46:C5:10:31:C0:46:14:15:6F:DD:C3:C3:CC
Certificate issuer:       /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Certificate serial:       0356DC2BFF780AC2962D1CF651742CDD02839EEB
Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a313030323a3a2f34382d3438203d3e2036343631.roa
Signing time:             Tue 06 Jan 2026 19:14:27 +0000
ROA not before:           Tue 06 Jan 2026 19:09:27 +0000
ROA not after:            Tue 05 Jan 2027 19:14:27 +0000
asID:                     6461
IP address blocks:        2800:870:1002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:56:dc:2b:ff:78:0a:c2:96:2d:1c:f6:51:74:2c:dd:02:83:9e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
        Validity
            Not Before: Jan  6 19:09:27 2026 GMT
            Not After : Jan  5 19:14:27 2027 GMT
        Subject: CN=0BECEA2EEAC85446C51031C04614156FDDC3C3CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:2b:ea:95:d5:ce:56:01:0f:ed:59:47:72:
                    ea:f9:d7:81:3f:50:fd:4c:53:59:5f:20:22:12:ee:
                    8d:cf:24:55:90:d0:da:da:3b:43:89:35:09:4a:ea:
                    f4:4d:05:be:f6:26:85:6c:f0:a6:9b:6a:7c:ee:17:
                    3f:8a:ef:17:cb:53:40:cc:be:ad:4b:44:64:c5:33:
                    77:f0:73:6b:9d:d6:c2:a1:62:21:a1:99:55:8c:3c:
                    97:c0:86:34:31:72:08:2f:2e:02:9c:65:e5:09:ed:
                    e7:1d:bc:c8:b5:68:6c:e0:93:a0:de:cb:3d:66:b0:
                    5a:fe:00:bb:78:4b:c5:03:9a:32:b6:52:98:d5:34:
                    d2:b9:41:8c:b9:dc:be:49:5b:cf:ef:cb:c8:bd:79:
                    9e:78:27:7f:6e:3a:f3:77:e0:6c:a2:90:dc:8b:b3:
                    b6:07:94:43:46:f1:45:e4:21:ae:0e:08:62:d2:d0:
                    ec:ac:71:ad:14:62:52:f5:06:54:60:0b:1f:51:1c:
                    9e:4a:c4:af:8e:7a:cc:56:64:3f:4d:66:eb:fc:34:
                    7b:09:76:b6:04:34:5e:0a:48:c7:bf:03:c4:c6:69:
                    c7:19:cc:de:f0:fc:bd:a7:3a:90:fc:9a:4b:5e:42:
                    da:e6:de:b8:04:c4:1d:5e:59:89:0f:69:e8:75:bb:
                    8e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EC:EA:2E:EA:C8:54:46:C5:10:31:C0:46:14:15:6F:DD:C3:C3:CC
            X509v3 Authority Key Identifier:
                keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a313030323a3a2f34382d3438203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:870:1002::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:28:b5:db:60:53:2e:98:28:58:ae:fa:71:1f:e6:be:ef:a7:
         77:c0:0a:cb:33:30:95:eb:ec:9f:99:ca:af:67:ba:7e:c6:91:
         4a:25:75:ee:59:0d:99:54:50:0d:09:90:79:be:6f:12:6e:73:
         75:dc:34:23:30:25:6f:e7:b9:de:79:76:85:a1:f6:56:0d:1b:
         98:45:83:c9:c5:94:b3:e8:c4:b4:52:f1:c9:3d:d2:d8:fa:12:
         f6:f4:f2:d4:42:f8:72:b3:ca:a8:9b:d4:fa:ec:7f:61:b2:1c:
         03:d2:13:8b:42:9c:df:0a:b8:47:de:84:b2:94:49:88:20:e6:
         1d:dd:72:8c:65:5c:a6:7d:c7:2a:88:72:7f:9b:24:37:f4:13:
         80:aa:4f:7b:3b:27:d3:e2:93:3b:0f:d4:6e:a6:0a:15:bb:0c:
         05:9b:ca:8d:fd:fb:20:78:2f:82:36:18:d6:34:54:cf:65:6f:
         e7:33:27:b0:11:a0:d3:88:3c:56:c7:ca:8e:e6:2a:9f:5c:8b:
         52:74:d6:c7:28:44:76:77:ca:12:0e:1d:9b:95:86:2d:10:11:
         f8:8d:0d:fe:a2:26:28:da:40:17:c6:6f:43:6f:35:ad:d3:2e:
         0d:81:a9:36:dc:47:0f:38:d1:69:0a:59:07:34:62:5c:94:d6:
         f8:ec:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:03 2026 by rpki-client