This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a31303a3a2f34342d3438203d3e203139343239.roa
File:                     323830313a3136653a31303a3a2f34342d3438203d3e203139343239.roa (raw, json)
Hash identifier:          e+M4ZV3I5j+UHzwdRNhw1/xwWftQbe3AGLXnoJMtqII=
Subject key identifier:   5F:33:D2:21:F4:ED:1D:B3:BE:49:E0:F0:4D:29:CE:39:62:8A:30:01
Certificate issuer:       /CN=3586923A64D379B800F409C58F0A64C540687D97
Certificate serial:       5403AE22A9BD2F625BFDE59122AD131281D7D9BC
Authority key identifier: 35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a31303a3a2f34342d3438203d3e203139343239.roa
Signing time:             Tue 06 Jan 2026 19:41:11 +0000
ROA not before:           Tue 06 Jan 2026 19:36:11 +0000
ROA not after:            Tue 05 Jan 2027 19:41:11 +0000
asID:                     19429
IP address blocks:        2801:16e:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:03:ae:22:a9:bd:2f:62:5b:fd:e5:91:22:ad:13:12:81:d7:d9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3586923A64D379B800F409C58F0A64C540687D97
        Validity
            Not Before: Jan  6 19:36:11 2026 GMT
            Not After : Jan  5 19:41:11 2027 GMT
        Subject: CN=5F33D221F4ED1DB3BE49E0F04D29CE39628A3001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:ca:79:9b:c5:7f:37:a7:e9:f4:18:0f:8b:
                    c0:21:01:df:d4:4a:ac:92:57:77:0c:6a:c2:1b:5b:
                    ea:82:16:85:b6:8b:3b:a2:5d:99:2d:7a:c6:02:23:
                    c3:3d:26:ae:3e:66:62:ac:a2:4c:50:b5:6c:40:a9:
                    0e:1b:3a:4d:03:e7:d9:32:34:db:d7:b1:2a:22:c2:
                    5b:00:5b:bf:01:f4:8d:37:07:65:6e:7f:21:3e:17:
                    ce:b8:3a:15:90:38:3c:d4:3a:0e:5b:21:0b:c7:15:
                    fa:16:3e:3c:89:a2:ba:b5:85:4a:be:0c:e9:ef:5a:
                    29:ef:00:04:5b:5c:d2:cd:91:5e:2e:60:87:f8:dc:
                    e4:7f:7d:d0:37:67:ae:29:c7:ea:1a:89:d9:a4:78:
                    db:7a:ad:08:25:ce:41:ba:56:72:5f:a4:cc:eb:1e:
                    be:a5:24:05:ee:c3:b8:e4:4f:be:83:21:8f:eb:d5:
                    09:9d:65:f4:c4:1a:25:38:e7:c3:b7:26:67:30:d8:
                    3b:86:31:b9:7d:50:de:af:97:fa:38:37:5a:b8:26:
                    0e:2b:97:ce:c1:64:f8:a3:f5:bc:75:24:77:05:b5:
                    f2:96:28:2b:c6:d1:ad:b7:4b:be:bb:1b:9d:e1:86:
                    22:82:a0:f9:a4:67:18:ea:07:86:78:24:9f:f7:73:
                    06:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:33:D2:21:F4:ED:1D:B3:BE:49:E0:F0:4D:29:CE:39:62:8A:30:01
            X509v3 Authority Key Identifier:
                keyid:35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a31303a3a2f34342d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16e:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         12:fa:87:d6:a8:ed:ed:67:9f:99:cd:85:b9:f3:f9:64:7f:28:
         21:38:ef:03:ce:4f:53:ba:c5:28:f5:19:dc:22:40:56:71:26:
         68:c3:99:52:6e:6a:39:de:bd:07:49:2a:1a:97:bb:c3:cb:d0:
         90:68:f7:46:03:ed:3e:fe:9d:d9:f7:13:94:40:66:17:51:22:
         72:fe:2b:6a:03:71:c2:71:b7:07:26:52:7a:2b:b4:81:bf:c4:
         29:df:04:49:4a:a5:ca:b7:87:45:14:6d:f1:16:94:54:5a:d4:
         46:2c:98:5c:ed:bb:a9:c2:19:49:b3:be:49:f3:0d:25:1b:8f:
         82:b2:84:98:9b:16:bc:4b:3b:8e:6c:4d:5f:86:01:b1:a8:84:
         33:01:1f:a7:dd:7c:05:b8:dc:54:46:67:03:70:c0:73:42:80:
         ff:8b:b7:3c:1d:6a:b9:a6:c4:5b:fd:9c:e8:1d:c3:57:5c:93:
         13:9b:90:4f:b6:2f:59:f9:3f:7a:dd:ae:af:ce:77:c3:69:91:
         d9:9c:7b:fb:ec:56:d6:47:b3:40:79:ee:99:37:5f:02:a5:cf:
         e6:b8:1b:e0:87:82:fd:27:24:7e:18:2a:2b:0f:84:da:25:02:
         b6:b9:62:1e:06:b5:90:59:2e:97:9c:2b:ec:f7:13:c2:d5:4c:
         09:c3:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:55:44 2026 by rpki-client