This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/323830363a3334363a3a2f33322d3332203d3e20323635353233.roa
File:                     323830363a3334363a3a2f33322d3332203d3e20323635353233.roa (raw, json)
Hash identifier:          edmRsNW7BDwSiuCaGj1cmBnqEXotjFJDxZaMyNTWojY=
Subject key identifier:   61:B9:7C:6D:3C:10:1C:DA:85:D9:AA:E5:91:CE:1A:21:72:F7:8A:A7
Certificate issuer:       /CN=27CE53490C8AFAC28B7A6430889E88978245BBC6
Certificate serial:       432295F3C69B2C8091415AA136E5738408BB4C40
Authority key identifier: 27:CE:53:49:0C:8A:FA:C2:8B:7A:64:30:88:9E:88:97:82:45:BB:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/323830363a3334363a3a2f33322d3332203d3e20323635353233.roa
Signing time:             Tue 06 Jan 2026 19:08:50 +0000
ROA not before:           Tue 06 Jan 2026 19:03:50 +0000
ROA not after:            Tue 05 Jan 2027 19:08:50 +0000
asID:                     265523
IP address blocks:        2806:346::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:22:95:f3:c6:9b:2c:80:91:41:5a:a1:36:e5:73:84:08:bb:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27CE53490C8AFAC28B7A6430889E88978245BBC6
        Validity
            Not Before: Jan  6 19:03:50 2026 GMT
            Not After : Jan  5 19:08:50 2027 GMT
        Subject: CN=61B97C6D3C101CDA85D9AAE591CE1A2172F78AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:27:74:66:3c:ab:3e:9a:0f:c9:85:b3:26:
                    ef:98:95:86:c7:97:f4:b7:b6:86:70:fc:38:d4:c4:
                    03:56:d2:76:00:f4:83:c8:a1:11:2c:62:2e:3b:20:
                    20:df:28:67:36:72:12:1f:45:63:4e:3f:39:00:b2:
                    63:fe:a9:b3:38:18:19:b2:97:b0:3e:7e:68:79:d1:
                    73:5f:55:7b:55:26:6c:33:2f:c8:ed:70:44:d0:a1:
                    2b:9b:4d:3a:53:47:d7:80:30:d9:1c:cc:89:2f:d9:
                    af:61:c5:70:dc:9f:a0:74:7c:7b:50:77:d9:50:2e:
                    72:5f:65:18:71:ff:c1:7c:13:f2:7a:fc:49:61:00:
                    50:d5:d2:83:51:75:c6:26:8b:c9:a1:37:1c:38:12:
                    f6:a6:e0:23:12:de:f8:af:0e:07:40:92:8f:1e:d6:
                    11:de:f7:f1:50:ef:4d:43:ef:18:1c:d6:cc:78:dd:
                    ad:7a:08:ca:c8:c2:5e:bd:53:ed:c4:44:a1:2a:ef:
                    e9:44:79:b5:8e:34:cd:d3:1b:15:85:b1:62:f9:87:
                    f1:7b:17:c0:5c:5c:91:cf:d5:c9:36:12:68:0a:a6:
                    80:eb:4e:b6:31:08:a0:3a:39:b8:2b:40:95:9f:ad:
                    d0:47:07:55:c5:1a:56:9e:e6:aa:f0:ef:85:14:67:
                    db:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B9:7C:6D:3C:10:1C:DA:85:D9:AA:E5:91:CE:1A:21:72:F7:8A:A7
            X509v3 Authority Key Identifier:
                keyid:27:CE:53:49:0C:8A:FA:C2:8B:7A:64:30:88:9E:88:97:82:45:BB:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/323830363a3334363a3a2f33322d3332203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:346::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:ca:4f:a1:51:13:94:20:56:8e:92:9a:25:99:79:64:33:fd:
         31:6e:75:aa:c5:89:69:d4:90:47:5d:fc:3d:8a:ad:b4:ca:fe:
         a5:89:64:22:22:d1:9f:6f:0a:d3:d0:62:b4:53:76:10:e2:64:
         6a:e2:57:e5:b7:02:e4:2b:6a:4b:36:17:d8:56:4b:fc:04:d0:
         cb:be:86:8b:f5:b8:35:14:7b:29:68:ed:b8:52:d1:96:64:fc:
         86:74:5a:32:16:de:1b:dc:9f:76:c3:84:33:b8:ec:ee:50:87:
         8a:4a:ca:78:7d:a4:06:c6:bb:ec:32:76:65:1d:64:58:70:89:
         54:49:b2:95:a2:16:42:25:ac:f7:56:42:1d:e6:ec:19:75:8a:
         0f:5b:9e:fa:43:7a:cb:33:27:9d:e1:04:8c:45:1c:e2:68:6c:
         d4:88:68:8d:b8:6f:9e:6b:03:03:aa:00:29:30:4d:8f:9c:35:
         9e:82:84:83:45:2a:04:8d:b2:43:24:c0:e3:9f:0e:dd:19:70:
         8a:40:eb:9d:90:a6:9b:cb:0f:17:9d:4b:07:c7:9c:d9:f3:64:
         69:42:a5:cb:da:a1:70:63:39:12:15:62:c5:1e:b1:f6:6e:3b:
         31:5f:82:13:c9:07:d6:53:3b:cc:ed:ba:54:0d:09:f4:7a:57:
         6b:51:46:3a
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUQyKV88abLICRQVqhNuVzhAi7TEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdDRTUzNDkwQzhBRkFDMjhCN0E2NDMwODg5RTg4OTc4
MjQ1QkJDNjAeFw0yNjAxMDYxOTAzNTBaFw0yNzAxMDUxOTA4NTBaMDMxMTAvBgNV
BAMTKDYxQjk3QzZEM0MxMDFDREE4NUQ5QUFFNTkxQ0UxQTIxNzJGNzhBQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4id0ZjyrPpoPyYWzJu+YlYbH
l/S3toZw/DjUxANW0nYA9IPIoREsYi47ICDfKGc2chIfRWNOPzkAsmP+qbM4GBmy
l7A+fmh50XNfVXtVJmwzL8jtcETQoSubTTpTR9eAMNkczIkv2a9hxXDcn6B0fHtQ
d9lQLnJfZRhx/8F8E/J6/ElhAFDV0oNRdcYmi8mhNxw4Evam4CMS3vivDgdAko8e
1hHe9/FQ701D7xgc1sx43a16CMrIwl69U+3ERKEq7+lEebWONM3TGxWFsWL5h/F7
F8BcXJHP1ck2EmgKpoDrTrYxCKA6ObgrQJWfrdBHB1XFGlae5qrw74UUZ9ulAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUYbl8bTwQHNqF2arlkc4aIXL3iqcwHwYDVR0j
BBgwFoAUJ85TSQyK+sKLemQwiJ6Il4JFu8YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NkE0RTI0NUNCQjYzNzBBRjE2REI5RjQ5NzRGMDgxNEJF
RTBFNDgwOTI1NEJFRkE0ODg1NUJEMDQyQUE4N0NELzAvMjdDRTUzNDkwQzhBRkFD
MjhCN0E2NDMwODg5RTg4OTc4MjQ1QkJDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yN0NFNTM0OTBDOEFGQUMyOEI3
QTY0MzA4ODlFODg5NzgyNDVCQkM2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDZBNEUyNDVDQkI2MzcwQUYxNkRCOUY0OTc0RjA4MTRCRUUwRTQ4MDky
NTRCRUZBNDg4NTVCRDA0MkFBODdDRC8wLzMyMzgzMDM2M2EzMzM0MzYzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzUzNTMyMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgNGMA0G
CSqGSIb3DQEBCwUAA4IBAQBfyk+hUROUIFaOkpolmXlkM/0xbnWqxYlp1JBHXfw9
iq20yv6liWQiItGfbwrT0GK0U3YQ4mRq4lfltwLkK2pLNhfYVkv8BNDLvoaL9bg1
FHspaO24UtGWZPyGdFoyFt4b3J92w4QzuOzuUIeKSsp4faQGxrvsMnZlHWRYcIlU
SbKVohZCJaz3VkId5uwZdYoPW576Q3rLMyed4QSMRRziaGzUiGiNuG+eawMDqgAp
ME2PnDWegoSDRSoEjbJDJMDjnw7dGXCKQOudkKabyw8XnUsHx5zZ82RpQqXL2qFw
YzkSFWLFHrH2bjsxX4ITyQfWUzvM7bpUDQn0eldrUUY6
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:07 2026 by rpki-client