This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/323030313a313336383a3a2f33322d3332203d3e2033353531.roa
File:                     323030313a313336383a3a2f33322d3332203d3e2033353531.roa (raw, json)
Hash identifier:          6eaLq8ULn1ICheh/FKTBXEjveYhpcnOjE1HlgOhbtPI=
Subject key identifier:   83:83:EE:8F:BF:97:70:92:71:7A:A2:50:8C:BC:BD:C9:C2:50:FE:F9
Certificate issuer:       /CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
Certificate serial:       226F5FD54CEEFF33EEFAE5D83EC065A86F762EB0
Authority key identifier: 69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/323030313a313336383a3a2f33322d3332203d3e2033353531.roa
Signing time:             Tue 06 Jan 2026 19:45:42 +0000
ROA not before:           Tue 06 Jan 2026 19:40:42 +0000
ROA not after:            Tue 05 Jan 2027 19:45:42 +0000
asID:                     3551
IP address blocks:        2001:1368::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6f:5f:d5:4c:ee:ff:33:ee:fa:e5:d8:3e:c0:65:a8:6f:76:2e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
        Validity
            Not Before: Jan  6 19:40:42 2026 GMT
            Not After : Jan  5 19:45:42 2027 GMT
        Subject: CN=8383EE8FBF977092717AA2508CBCBDC9C250FEF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:22:a0:58:36:e6:70:96:b3:49:f7:6c:00:32:
                    73:43:b2:39:01:35:92:5f:8f:1e:d2:fb:26:e8:c6:
                    f0:4b:ac:7f:b1:ee:49:25:ca:a5:f6:89:62:67:84:
                    f1:56:ed:fc:05:d0:b0:1e:00:bb:0f:92:33:a2:d6:
                    22:c4:75:24:f8:2c:3d:7d:09:b6:b7:4c:9c:d5:8c:
                    c5:f8:70:ce:77:09:a5:dd:12:6e:48:4a:a0:c2:ad:
                    e8:f8:01:6c:e9:ed:df:c6:4d:95:fb:3a:3d:a4:96:
                    3d:15:e0:23:4d:1c:c1:9b:37:19:f1:80:e6:76:c4:
                    82:4a:fd:80:c4:e1:4a:3a:c7:24:16:fd:ea:4f:b2:
                    32:fb:77:7a:cd:9c:c2:f0:1f:f9:ec:81:0b:e1:b9:
                    55:c9:a9:d4:ba:6d:2f:a6:b5:11:88:2c:d1:4b:50:
                    39:da:ff:92:f7:ed:79:d8:fd:40:2e:b0:c4:b6:67:
                    a0:75:65:09:93:15:98:c0:ef:83:16:28:8f:00:63:
                    a0:ad:57:43:ac:6e:5c:43:53:ab:f6:97:2a:d1:12:
                    eb:7e:7b:eb:71:1c:d1:6b:3a:8f:aa:62:a9:41:c1:
                    1b:af:dd:a4:72:e7:6a:2e:1a:75:4b:5c:42:25:8e:
                    05:4c:69:6c:8f:90:17:39:ca:a5:f3:57:fa:fd:bb:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:83:EE:8F:BF:97:70:92:71:7A:A2:50:8C:BC:BD:C9:C2:50:FE:F9
            X509v3 Authority Key Identifier:
                keyid:69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/323030313a313336383a3a2f33322d3332203d3e2033353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1368::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:50:d3:b3:d6:1b:6a:4d:ad:03:71:31:4f:9d:42:66:7d:f7:
         90:ec:66:a5:f0:97:29:24:6a:c3:59:3f:78:7b:4a:e9:19:a2:
         6d:af:64:d3:15:67:c3:e2:ad:2e:9c:b1:98:99:21:7a:3d:ea:
         85:da:66:7c:98:5a:a5:8b:76:63:49:c9:6b:a6:ce:ac:c8:82:
         ec:81:13:44:9a:7d:2f:68:89:20:d5:1c:fc:f1:06:86:70:27:
         90:e3:cc:e5:b6:9a:bb:b8:b8:3d:f3:8e:47:e4:b1:7e:82:8f:
         10:11:04:12:e2:6f:dc:5c:29:49:ce:ca:6d:76:19:b5:ae:36:
         ba:1e:03:d3:9a:51:b5:f2:e4:d9:23:27:59:44:8f:e1:06:bf:
         58:1d:7b:99:47:0b:c2:8a:2a:33:0c:c1:8e:27:24:7b:07:06:
         27:2b:cf:0d:5d:80:8e:09:99:5a:0a:ec:22:b3:2a:43:7c:3d:
         96:af:7b:bb:de:df:8d:a4:04:34:d2:b0:66:4e:a2:15:20:44:
         38:04:f4:44:80:fb:5e:3b:dd:c8:15:38:70:0f:50:bd:35:f2:
         23:7a:bb:8c:15:32:7f:b9:33:e4:5d:c9:ae:40:52:c3:cb:5b:
         9e:cd:50:d2:b6:3c:a6:81:16:69:9e:73:e8:95:a8:4d:c9:64:
         31:7b:6f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:07:42 2026 by rpki-client