This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/323830363a3330313a3a2f33322d3332203d3e20323635353233.roa
File:                     323830363a3330313a3a2f33322d3332203d3e20323635353233.roa (raw, json)
Hash identifier:          EGSJ3gG7gdjsI1ox6ZnkVTupYe2N4hJPLrONROOM0i8=
Subject key identifier:   E1:03:49:9C:12:E0:82:63:65:4F:32:F9:2E:24:37:F5:6B:B1:04:43
Certificate issuer:       /CN=E72389DB363677115A40632E0F358D0066C2BC82
Certificate serial:       1EB39BCBC7D71F1588A74E8C81D83412F9F8B311
Authority key identifier: E7:23:89:DB:36:36:77:11:5A:40:63:2E:0F:35:8D:00:66:C2:BC:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E72389DB363677115A40632E0F358D0066C2BC82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/323830363a3330313a3a2f33322d3332203d3e20323635353233.roa
Signing time:             Tue 06 Jan 2026 19:32:57 +0000
ROA not before:           Tue 06 Jan 2026 19:27:57 +0000
ROA not after:            Tue 05 Jan 2027 19:32:57 +0000
asID:                     265523
IP address blocks:        2806:301::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/E72389DB363677115A40632E0F358D0066C2BC82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/E72389DB363677115A40632E0F358D0066C2BC82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E72389DB363677115A40632E0F358D0066C2BC82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b3:9b:cb:c7:d7:1f:15:88:a7:4e:8c:81:d8:34:12:f9:f8:b3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E72389DB363677115A40632E0F358D0066C2BC82
        Validity
            Not Before: Jan  6 19:27:57 2026 GMT
            Not After : Jan  5 19:32:57 2027 GMT
        Subject: CN=E103499C12E08263654F32F92E2437F56BB10443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:2b:c0:98:fa:65:a5:91:45:2d:36:dd:19:49:
                    71:7b:1d:a4:5c:9b:96:bb:55:2a:02:f2:18:2a:04:
                    76:11:ea:20:7b:87:26:28:75:e6:26:e6:ba:e9:41:
                    95:99:6d:16:58:c3:23:ab:08:d4:a0:4f:7b:b5:86:
                    d5:d4:26:fc:a0:8c:ed:02:3f:d0:bf:9d:6c:b8:c7:
                    47:4b:78:c5:53:26:24:f3:eb:d5:79:6a:24:97:07:
                    e1:cb:86:5d:f3:92:09:50:49:a6:5d:d3:5f:61:3b:
                    03:6b:9b:9f:45:ac:48:03:9f:ae:54:b7:0b:50:5f:
                    b9:51:e4:0f:80:d4:64:66:93:7f:c6:60:3b:5c:27:
                    5d:5e:02:ee:79:08:87:00:66:e0:a5:d3:76:ca:18:
                    78:75:d7:b9:17:23:be:e6:9c:f7:9c:f4:63:76:e2:
                    54:be:a9:e2:69:2d:32:92:84:19:d6:39:c3:44:82:
                    65:7f:d2:71:d9:95:3a:11:4a:66:33:04:98:42:c1:
                    28:9d:7c:ae:f3:60:30:5e:39:57:ad:fb:a4:50:dd:
                    f5:7a:f2:82:71:6f:57:06:94:49:99:f2:64:85:fc:
                    eb:25:98:48:46:e6:c2:6b:3c:5f:f8:17:c8:d7:9a:
                    7d:17:ce:10:e3:78:1a:b9:a7:13:6c:33:00:ec:52:
                    a3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:03:49:9C:12:E0:82:63:65:4F:32:F9:2E:24:37:F5:6B:B1:04:43
            X509v3 Authority Key Identifier:
                keyid:E7:23:89:DB:36:36:77:11:5A:40:63:2E:0F:35:8D:00:66:C2:BC:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/E72389DB363677115A40632E0F358D0066C2BC82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E72389DB363677115A40632E0F358D0066C2BC82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/323830363a3330313a3a2f33322d3332203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:301::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:d2:20:5f:fb:61:21:89:26:b7:7c:18:36:f3:c1:1b:4f:fb:
         d3:c1:9a:55:34:36:7a:5e:0c:f7:5c:a0:04:e7:fd:84:68:3e:
         69:50:eb:c5:d0:73:17:63:f4:ef:25:2e:0f:5a:9b:55:b9:2f:
         1a:36:46:79:3a:4b:b7:01:5b:40:fe:56:3f:f2:77:3e:d6:7b:
         bc:d5:cf:ed:a9:2c:d1:dc:4f:ad:2a:26:8f:10:63:3d:0b:95:
         73:1a:50:c8:fd:ff:33:38:40:b3:d4:62:d9:13:55:ae:bb:7f:
         15:80:db:f9:7d:40:ad:01:56:e8:6e:26:39:64:a6:6d:e5:6c:
         c0:16:82:0e:88:59:17:03:a8:cf:84:23:c5:71:03:4f:70:55:
         f2:53:ca:cd:c8:17:b1:d4:2e:8c:84:06:73:7d:a6:10:56:a1:
         be:55:16:41:40:4a:ea:6a:cb:76:6f:71:19:70:75:aa:e7:4d:
         37:81:e8:78:a7:cf:ce:a7:df:cd:fd:37:52:1c:1b:44:56:6e:
         2a:10:35:fa:58:6f:a5:00:1d:5f:86:53:61:63:a8:e6:77:3f:
         8a:40:99:ff:ee:6f:ce:37:86:4f:d9:e9:4b:33:98:54:b3:10:
         d6:17:d3:51:43:64:a5:92:09:2b:89:d3:0a:16:bc:95:8f:e6:
         17:75:b2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:17 2026 by rpki-client