This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a343a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3136653a343a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          0rdUzGAefiuou85Z943myBl/EzefbmDiqlBOnliUXA8=
Subject key identifier:   3E:B6:EC:25:25:3A:47:85:96:3C:41:C0:10:95:73:9A:D7:1E:FD:77
Certificate issuer:       /CN=3586923A64D379B800F409C58F0A64C540687D97
Certificate serial:       5ACB3349F9F6B4F290E6C912A94715055E196699
Authority key identifier: 35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a343a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 06 Jan 2026 19:41:11 +0000
ROA not before:           Tue 06 Jan 2026 19:36:11 +0000
ROA not after:            Tue 05 Jan 2027 19:41:11 +0000
asID:                     19429
IP address blocks:        2801:16e:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cb:33:49:f9:f6:b4:f2:90:e6:c9:12:a9:47:15:05:5e:19:66:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3586923A64D379B800F409C58F0A64C540687D97
        Validity
            Not Before: Jan  6 19:36:11 2026 GMT
            Not After : Jan  5 19:41:11 2027 GMT
        Subject: CN=3EB6EC25253A4785963C41C01095739AD71EFD77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:5f:b2:e9:c0:5b:79:53:fb:50:b1:27:3a:
                    75:76:9b:e9:23:19:d9:d3:83:fb:fc:c5:34:f5:ae:
                    e4:10:ef:73:ec:d2:90:e4:9d:15:7c:f8:6f:2c:a1:
                    69:bf:42:d4:50:60:96:56:ea:2f:5b:51:7d:9c:9f:
                    ab:95:75:d8:e3:9a:6f:13:e7:bd:bd:12:ec:a4:d6:
                    b2:59:c0:cd:e9:22:9c:39:95:7a:60:7a:e7:47:5b:
                    0b:0e:11:2f:09:f9:af:af:b4:d1:86:48:71:b9:b3:
                    e3:dc:ce:72:8d:64:2d:10:88:dd:c4:44:f9:e1:41:
                    04:ad:fc:39:2b:5d:7b:55:1e:81:36:20:dd:30:6d:
                    da:9e:11:3c:6c:75:1f:b9:d4:2c:22:1e:ce:4e:61:
                    eb:76:c1:1b:f5:d1:f5:33:5b:86:97:24:4c:48:34:
                    f3:b6:f8:69:7a:3e:bb:39:d1:17:6f:3b:ea:17:21:
                    fb:dd:b0:60:a9:48:09:60:b6:04:61:0c:13:b9:f4:
                    fc:70:1c:f7:fe:37:f6:2a:a3:ca:15:98:ec:4e:ef:
                    d1:ba:9b:c6:07:81:6c:20:bc:49:4e:5c:b9:b8:fd:
                    bd:d4:46:41:b2:a6:54:26:15:c3:67:0e:4b:88:31:
                    24:23:ee:82:eb:4e:2c:d4:f8:7d:05:2f:22:59:d6:
                    55:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B6:EC:25:25:3A:47:85:96:3C:41:C0:10:95:73:9A:D7:1E:FD:77
            X509v3 Authority Key Identifier:
                keyid:35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a343a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16e:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:3f:31:7d:5e:71:ff:5b:c0:ab:66:91:42:e6:aa:b6:a6:be:
         0d:c8:88:a2:77:57:63:27:eb:f4:cc:66:84:fc:a7:dc:a3:51:
         c0:63:df:2e:c2:1a:a8:bd:07:02:9a:96:9f:6d:46:26:f5:f4:
         38:b8:70:50:52:0c:ac:2c:ae:81:65:ed:4b:cc:5a:28:39:32:
         d7:ce:96:7a:49:c8:bf:e7:c1:cd:dc:ca:2b:09:28:c4:af:b4:
         fd:87:f1:ac:6a:1a:a9:20:d1:db:15:e6:d5:ed:67:e5:c0:07:
         d2:87:92:24:04:81:b6:dd:8b:b2:64:47:c0:4d:5d:17:51:98:
         93:c4:c4:cf:cf:7b:57:10:ec:31:1f:67:db:32:15:0f:b8:3d:
         3b:4b:86:ce:98:3e:22:12:39:ce:cd:37:70:06:69:f9:e1:a4:
         7c:64:09:28:27:00:f7:36:50:2e:8f:20:06:00:7d:74:54:43:
         48:77:21:5c:d8:db:e5:62:95:cd:1e:82:f2:73:23:aa:72:76:
         28:6f:29:6d:fe:dd:96:40:fc:e1:dd:be:8b:c7:75:d3:da:98:
         b5:1b:c8:c8:81:aa:19:5e:78:52:d5:d0:4c:5d:a0:56:c0:de:
         73:d6:f6:18:b0:78:34:6a:df:2f:69:a1:63:12:e0:a0:6d:a0:
         b7:03:ff:36
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUWsszSfn2tPKQ5skSqUcVBV4ZZpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU4NjkyM0E2NEQzNzlCODAwRjQwOUM1OEYwQTY0QzU0
MDY4N0Q5NzAeFw0yNjAxMDYxOTM2MTFaFw0yNzAxMDUxOTQxMTFaMDMxMTAvBgNV
BAMTKDNFQjZFQzI1MjUzQTQ3ODU5NjNDNDFDMDEwOTU3MzlBRDcxRUZENzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLQV+y6cBbeVP7ULEnOnV2m+kj
GdnTg/v8xTT1ruQQ73Ps0pDknRV8+G8soWm/QtRQYJZW6i9bUX2cn6uVddjjmm8T
5729Euyk1rJZwM3pIpw5lXpgeudHWwsOES8J+a+vtNGGSHG5s+PcznKNZC0QiN3E
RPnhQQSt/DkrXXtVHoE2IN0wbdqeETxsdR+51CwiHs5OYet2wRv10fUzW4aXJExI
NPO2+Gl6Prs50RdvO+oXIfvdsGCpSAlgtgRhDBO59PxwHPf+N/Yqo8oVmOxO79G6
m8YHgWwgvElOXLm4/b3URkGyplQmFcNnDkuIMSQj7oLrTizU+H0FLyJZ1lVzAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUPrbsJSU6R4WWPEHAEJVzmtce/XcwHwYDVR0j
BBgwFoAUNYaSOmTTebgA9AnFjwpkxUBofZcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzU3Qjk2RkMyODY4OTc0NENERDVGNEZEOTBFRjNBNjYy
MzU3Q0RBMEYwQjFDNEU2N0MwOEU2MDgwRTA3QjBDLzAvMzU4NjkyM0E2NEQzNzlC
ODAwRjQwOUM1OEYwQTY0QzU0MDY4N0Q5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTg2OTIzQTY0RDM3OUI4MDBG
NDA5QzU4RjBBNjRDNTQwNjg3RDk3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjc1N0I5NkZDMjg2ODk3NDRDREQ1RjRGRDkwRUYzQTY2MjM1N0NEQTBG
MEIxQzRFNjdDMDhFNjA4MEUwN0IwQy8wLzMyMzgzMDMxM2EzMTM2NjUzYTM0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzOTM0MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAW4A
BDANBgkqhkiG9w0BAQsFAAOCAQEACz8xfV5x/1vAq2aRQuaqtqa+DciIondXYyfr
9MxmhPyn3KNRwGPfLsIaqL0HApqWn21GJvX0OLhwUFIMrCyugWXtS8xaKDky186W
eknIv+fBzdzKKwkoxK+0/YfxrGoaqSDR2xXm1e1n5cAH0oeSJASBtt2LsmRHwE1d
F1GYk8TEz897VxDsMR9n2zIVD7g9O0uGzpg+IhI5zs03cAZp+eGkfGQJKCcA9zZQ
Lo8gBgB9dFRDSHchXNjb5WKVzR6C8nMjqnJ2KG8pbf7dlkD84d2+i8d109qYtRvI
yIGqGV54UtXQTF2gVsDec9b2GLB4NGrfL2mhYxLgoG2gtwP/Ng==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:14:04 2026 by rpki-client