This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/323830363a3238653a3a2f33322d3332203d3e20323635353330.roa
File:                     323830363a3238653a3a2f33322d3332203d3e20323635353330.roa (raw, json)
Hash identifier:          ek4v+Bcn/yd1WKAUxy6Ugu986TwJ97DSURSTzPiSEpE=
Subject key identifier:   34:44:B0:5F:7C:B0:CF:6B:4B:CE:94:CD:2F:B6:42:8A:EF:B3:21:14
Certificate issuer:       /CN=00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5
Certificate serial:       7D5758606506D28CE3F2FE92E763BD68F2ABEC7E
Authority key identifier: 00:CD:C0:EF:33:C6:0D:8C:03:5C:A6:9F:18:6F:D6:C3:DD:EE:F5:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/323830363a3238653a3a2f33322d3332203d3e20323635353330.roa
Signing time:             Tue 06 Jan 2026 20:51:33 +0000
ROA not before:           Tue 06 Jan 2026 20:46:33 +0000
ROA not after:            Tue 05 Jan 2027 20:51:33 +0000
asID:                     265530
IP address blocks:        2806:28e::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:57:58:60:65:06:d2:8c:e3:f2:fe:92:e7:63:bd:68:f2:ab:ec:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5
        Validity
            Not Before: Jan  6 20:46:33 2026 GMT
            Not After : Jan  5 20:51:33 2027 GMT
        Subject: CN=3444B05F7CB0CF6B4BCE94CD2FB6428AEFB32114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:07:cf:e1:39:04:1b:17:5d:6b:4e:13:e2:
                    59:2e:75:b2:ec:f8:8c:ec:c4:18:24:0a:86:83:2a:
                    2c:44:ad:46:76:57:5c:f7:86:1e:0e:ce:82:ca:dc:
                    90:2a:70:40:42:5c:9b:25:78:40:0f:8c:1a:59:33:
                    e7:14:21:59:79:ac:44:b4:67:9e:a1:25:5a:53:32:
                    75:4a:7b:7d:5b:4e:3b:9b:c6:15:70:bd:9c:b6:a0:
                    3e:59:f0:6f:97:37:c2:eb:d7:eb:09:29:e8:cd:d3:
                    cd:20:42:82:f3:34:fe:be:8f:ea:dd:36:23:3f:34:
                    f5:fb:92:85:a1:3f:d7:75:09:57:ae:d0:41:01:46:
                    b4:ee:4c:37:f4:35:42:8a:49:f9:f7:9e:f4:b3:ec:
                    16:dd:0e:1c:3b:a1:39:39:e1:c2:de:31:09:23:05:
                    41:60:de:8c:e6:08:c6:37:3b:39:55:04:b7:8f:42:
                    96:b8:af:3b:86:f4:89:17:80:ca:c6:5d:fd:6c:54:
                    25:59:c8:88:c2:d4:96:ce:e7:8a:6b:1a:3f:61:5e:
                    ea:e0:42:70:f2:6d:b3:65:59:63:34:c9:57:ad:33:
                    1c:83:c2:84:1b:cc:94:22:5e:6c:f0:82:0c:8e:7e:
                    04:ac:f4:e8:fb:3a:23:b8:97:70:94:8e:d3:a8:5c:
                    6c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:44:B0:5F:7C:B0:CF:6B:4B:CE:94:CD:2F:B6:42:8A:EF:B3:21:14
            X509v3 Authority Key Identifier:
                keyid:00:CD:C0:EF:33:C6:0D:8C:03:5C:A6:9F:18:6F:D6:C3:DD:EE:F5:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/323830363a3238653a3a2f33322d3332203d3e20323635353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:28e::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:72:8a:2b:00:c7:b3:54:ab:6c:f1:63:50:d3:5e:19:25:5c:
         3d:54:17:f1:96:c9:ad:9c:f1:88:1c:39:6e:89:1d:40:52:4c:
         30:9a:06:29:88:31:da:91:38:1e:d3:7f:41:fc:85:5a:34:2d:
         4d:4b:a8:ed:61:11:09:5f:59:ae:d3:67:60:ab:7e:be:6e:3f:
         8d:51:d3:77:e0:76:37:9c:5e:88:6b:f2:36:02:45:4a:fd:41:
         33:8f:02:28:3b:69:b7:1c:ee:1d:ce:86:7a:11:5b:a4:e7:98:
         8b:39:fb:a3:44:7b:be:03:af:84:3f:0d:85:21:f8:45:60:ea:
         3d:27:c9:f5:ac:43:c0:c1:d3:86:16:7b:16:87:14:0e:ec:28:
         aa:c0:da:4e:6c:1e:fd:98:9a:79:34:98:77:af:08:b9:7a:32:
         b3:bd:bd:ee:a7:f6:55:6a:32:6c:44:13:04:ec:02:27:72:83:
         ab:6b:14:88:b7:19:eb:ae:cd:72:de:cf:18:72:2c:a3:e1:5f:
         f0:ad:27:23:3d:e0:d5:39:bb:2a:87:b3:42:62:d2:b1:05:64:
         6f:11:8e:b4:07:fb:ec:1a:45:c4:2b:31:6e:c3:b1:bc:b9:3d:
         fd:4d:01:48:7d:86:ba:f0:a9:9a:d7:12:85:f5:23:90:4f:f4:
         9a:96:9b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:40:46 2026 by rpki-client