This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ED6307A7989AFF55F5BC4DCA7B4498FDBBB953953B529ED39AD4922DB5A5BED/0/323830333a326531303a3a2f33322d3438203d3e20323731393638.roa
File:                     323830333a326531303a3a2f33322d3438203d3e20323731393638.roa (raw, json)
Hash identifier:          p+6wS0H54/FmA89LV0PcZCSZizuCj/kwod1lLAr2y3E=
Subject key identifier:   9D:94:9A:0D:02:C8:AE:02:0B:C2:FC:08:69:F0:B3:83:96:9F:E5:FF
Certificate issuer:       /CN=6E6B77941C60D76197108ECB30C50DE32D4837A0
Certificate serial:       49DDB401543975E4FB1230ED29B09F694B7400DB
Authority key identifier: 6E:6B:77:94:1C:60:D7:61:97:10:8E:CB:30:C5:0D:E3:2D:48:37:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E6B77941C60D76197108ECB30C50DE32D4837A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ED6307A7989AFF55F5BC4DCA7B4498FDBBB953953B529ED39AD4922DB5A5BED/0/323830333a326531303a3a2f33322d3438203d3e20323731393638.roa
Signing time:             Tue 06 Jan 2026 20:51:15 +0000
ROA not before:           Tue 06 Jan 2026 20:46:15 +0000
ROA not after:            Tue 05 Jan 2027 20:51:15 +0000
asID:                     271968
IP address blocks:        2803:2e10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6ED6307A7989AFF55F5BC4DCA7B4498FDBBB953953B529ED39AD4922DB5A5BED/0/6E6B77941C60D76197108ECB30C50DE32D4837A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6ED6307A7989AFF55F5BC4DCA7B4498FDBBB953953B529ED39AD4922DB5A5BED/0/6E6B77941C60D76197108ECB30C50DE32D4837A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E6B77941C60D76197108ECB30C50DE32D4837A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:dd:b4:01:54:39:75:e4:fb:12:30:ed:29:b0:9f:69:4b:74:00:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6B77941C60D76197108ECB30C50DE32D4837A0
        Validity
            Not Before: Jan  6 20:46:15 2026 GMT
            Not After : Jan  5 20:51:15 2027 GMT
        Subject: CN=9D949A0D02C8AE020BC2FC0869F0B383969FE5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:0f:79:f2:51:d7:91:43:ed:6b:69:b4:27:
                    ef:33:0e:10:32:49:5b:21:00:02:d7:44:9b:0c:77:
                    62:b0:cd:3e:b8:28:72:5c:6e:14:bc:9e:8d:87:1b:
                    8e:c6:f8:97:fc:25:e3:69:4b:9e:d7:c0:eb:d8:ef:
                    51:8d:dd:37:00:77:01:b7:e2:02:2b:be:ae:7e:5c:
                    a2:71:da:a0:2f:b3:cb:5f:08:3e:e9:5c:72:cd:13:
                    9c:b1:23:1f:33:aa:0d:20:32:1e:b3:b7:95:33:71:
                    ca:0f:b3:29:cf:a5:93:8d:c9:53:01:29:48:02:06:
                    30:ab:53:24:76:b7:9c:42:3d:d7:68:f4:0a:1b:63:
                    94:f0:af:1e:da:d7:28:5e:a5:f7:46:ab:c7:05:05:
                    fe:ed:e3:4b:7c:70:be:ac:f2:f7:1c:75:8e:97:2d:
                    d1:13:57:4c:40:4b:23:73:49:e5:30:6e:34:74:38:
                    51:0c:94:0b:2e:4b:b2:c4:83:d8:ea:67:e6:95:be:
                    f9:b7:09:84:57:eb:0a:f4:6d:1a:f5:1c:9b:ab:16:
                    a4:86:eb:b1:c8:78:81:a6:27:c8:1b:f5:c5:5b:ee:
                    fd:e5:e6:61:64:50:af:8f:4e:ca:2a:67:49:15:77:
                    8b:9b:51:d0:b3:5e:1b:ee:50:c5:69:dd:65:ca:38:
                    99:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:94:9A:0D:02:C8:AE:02:0B:C2:FC:08:69:F0:B3:83:96:9F:E5:FF
            X509v3 Authority Key Identifier:
                keyid:6E:6B:77:94:1C:60:D7:61:97:10:8E:CB:30:C5:0D:E3:2D:48:37:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ED6307A7989AFF55F5BC4DCA7B4498FDBBB953953B529ED39AD4922DB5A5BED/0/6E6B77941C60D76197108ECB30C50DE32D4837A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E6B77941C60D76197108ECB30C50DE32D4837A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ED6307A7989AFF55F5BC4DCA7B4498FDBBB953953B529ED39AD4922DB5A5BED/0/323830333a326531303a3a2f33322d3438203d3e20323731393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:a2:c1:b7:47:09:2e:f9:c4:ac:f4:ec:7a:a5:4b:b4:41:e9:
         74:c7:a8:ee:a0:1b:25:76:f7:6d:a6:7f:b8:aa:97:99:75:95:
         30:41:42:9c:28:91:e7:17:dc:73:bb:a3:df:66:bc:ca:70:c6:
         0a:c8:9f:2d:75:e2:43:fe:c6:6e:9c:81:7d:c9:6a:d8:db:d7:
         7a:41:45:ec:e8:61:a9:20:49:a9:6c:e4:be:08:20:ed:71:0d:
         03:61:5b:f6:37:2a:f7:8d:49:0e:9d:c8:2f:af:9a:5a:ca:45:
         c9:7d:c1:ef:c2:3c:8e:7c:cb:df:79:48:a8:43:88:c8:3b:ff:
         f1:5d:27:63:34:95:43:38:26:3f:53:31:9c:6d:fc:74:0e:b3:
         1b:6e:de:41:10:e3:c4:e3:73:8a:af:13:de:5b:d6:f8:fa:b7:
         3f:38:22:66:9d:fe:4b:1b:6c:79:35:7f:87:ea:57:9d:c0:ca:
         d6:c1:14:28:45:af:16:64:96:20:d1:8a:be:ec:35:14:c3:37:
         ca:61:ee:b5:86:90:b3:fc:e7:2b:a7:a2:2b:16:eb:8a:a9:b9:
         02:03:a5:68:e8:0d:b5:b4:66:dd:fa:e5:d3:6b:1e:c5:3a:da:
         1b:3c:e7:db:62:81:ca:8f:73:2c:40:b5:8f:05:ab:64:1d:d6:
         dd:02:b0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:54:50 2026 by rpki-client