This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86F868F97A42D2B2156BFBB4DF4752E2F05E9036F7A0154AC1E6F6D1D3E4AFAB/0/323830333a396664303a3a2f33322d3438203d3e20323637373038.roa
File:                     323830333a396664303a3a2f33322d3438203d3e20323637373038.roa (raw, json)
Hash identifier:          hesDTHQxFilpCCFeCG524CazOcuqa92CIPr3DqqE8XU=
Subject key identifier:   E2:71:CF:88:9A:90:7B:91:95:51:72:F3:29:78:92:9F:66:93:45:BD
Certificate issuer:       /CN=06B94D7400649E15D4FA864422C9C739C0DB3823
Certificate serial:       64A4F3A93CC7E2ECC8A27750EE6ED305219BD8E1
Authority key identifier: 06:B9:4D:74:00:64:9E:15:D4:FA:86:44:22:C9:C7:39:C0:DB:38:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06B94D7400649E15D4FA864422C9C739C0DB3823.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86F868F97A42D2B2156BFBB4DF4752E2F05E9036F7A0154AC1E6F6D1D3E4AFAB/0/323830333a396664303a3a2f33322d3438203d3e20323637373038.roa
Signing time:             Thu 15 Jan 2026 19:55:00 +0000
ROA not before:           Thu 15 Jan 2026 19:50:00 +0000
ROA not after:            Thu 14 Jan 2027 19:55:00 +0000
asID:                     267708
IP address blocks:        2803:9fd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86F868F97A42D2B2156BFBB4DF4752E2F05E9036F7A0154AC1E6F6D1D3E4AFAB/0/06B94D7400649E15D4FA864422C9C739C0DB3823.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86F868F97A42D2B2156BFBB4DF4752E2F05E9036F7A0154AC1E6F6D1D3E4AFAB/0/06B94D7400649E15D4FA864422C9C739C0DB3823.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06B94D7400649E15D4FA864422C9C739C0DB3823.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a4:f3:a9:3c:c7:e2:ec:c8:a2:77:50:ee:6e:d3:05:21:9b:d8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06B94D7400649E15D4FA864422C9C739C0DB3823
        Validity
            Not Before: Jan 15 19:50:00 2026 GMT
            Not After : Jan 14 19:55:00 2027 GMT
        Subject: CN=E271CF889A907B91955172F32978929F669345BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:b5:58:ca:ba:04:7f:37:ff:e6:af:cc:4b:
                    9d:1d:73:03:64:a5:cb:05:ea:ef:3c:aa:a6:62:7b:
                    eb:28:71:5d:72:43:da:4f:c7:14:19:7b:14:91:d7:
                    2c:67:9c:10:8d:fb:2a:3f:a2:f3:fb:79:19:75:91:
                    9a:fc:9d:27:9e:84:c7:c3:31:48:a7:48:dd:8a:f5:
                    5d:d7:8d:89:a5:c2:8f:b8:b5:ba:f4:7d:0c:7e:f7:
                    db:77:63:0a:12:93:a9:e0:15:10:d9:c6:6b:7c:9b:
                    54:09:34:23:7d:0c:d2:39:65:bb:9e:16:8d:ab:19:
                    95:eb:25:aa:53:2f:c2:9f:72:1e:36:21:4f:1b:7f:
                    c2:40:5c:60:4a:45:17:60:27:49:63:28:6e:6d:c1:
                    f5:23:b4:5b:07:41:2e:f1:41:48:10:8e:b2:fa:6d:
                    38:4b:fb:72:3d:a0:8e:b6:1d:6e:5f:19:01:d9:0e:
                    b4:db:1c:d3:bd:22:f2:93:3b:11:65:8a:82:28:64:
                    a4:40:17:f7:7e:cc:11:38:de:18:b6:2a:d2:44:9e:
                    10:b3:94:44:12:9c:a3:54:6b:81:ba:23:d3:15:3c:
                    d5:eb:e5:c4:93:6c:c6:7d:9d:08:c6:e1:56:09:8a:
                    13:3e:21:40:e2:7f:40:16:65:9c:56:be:74:34:56:
                    a8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:71:CF:88:9A:90:7B:91:95:51:72:F3:29:78:92:9F:66:93:45:BD
            X509v3 Authority Key Identifier:
                keyid:06:B9:4D:74:00:64:9E:15:D4:FA:86:44:22:C9:C7:39:C0:DB:38:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86F868F97A42D2B2156BFBB4DF4752E2F05E9036F7A0154AC1E6F6D1D3E4AFAB/0/06B94D7400649E15D4FA864422C9C739C0DB3823.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06B94D7400649E15D4FA864422C9C739C0DB3823.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86F868F97A42D2B2156BFBB4DF4752E2F05E9036F7A0154AC1E6F6D1D3E4AFAB/0/323830333a396664303a3a2f33322d3438203d3e20323637373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9fd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:38:e6:55:f6:39:d2:4e:61:77:e1:ae:cc:45:3e:02:d4:b8:
         31:5c:92:7c:22:18:ca:84:7b:37:80:86:df:96:4b:05:79:54:
         51:85:e0:8a:e0:15:1d:7a:03:47:62:53:cb:f3:12:16:ea:eb:
         d8:a4:b0:89:2a:98:2d:9a:d7:d3:3d:3c:b3:86:c2:de:63:63:
         ee:ed:16:6b:f0:6a:99:b6:bd:d0:3b:43:7d:da:38:00:16:9a:
         9c:51:5f:8a:56:51:5f:62:1f:19:07:dc:b8:39:49:10:7c:d3:
         71:4a:27:84:50:92:ea:9b:c8:d4:16:a5:04:f3:a8:92:69:79:
         b3:99:85:fe:0d:f2:7e:5b:42:9f:51:de:19:74:63:2f:64:bc:
         95:7f:2c:a3:43:e0:ba:ee:40:a7:8c:eb:43:2e:a4:8e:55:e9:
         38:9b:4f:33:34:e0:b5:4f:4f:46:66:b4:0b:09:30:d7:6e:f4:
         27:14:35:76:d6:47:af:3d:b9:f2:48:d5:4e:c1:64:c3:f0:7c:
         70:cc:fd:6e:3e:1e:ac:b1:3c:c1:62:1f:57:e1:1e:99:cd:4a:
         81:1f:68:f5:20:0f:10:07:00:a8:47:88:d8:16:3d:a5:ba:ac:
         7e:73:9f:fc:27:e3:eb:ec:20:6b:33:19:55:6b:02:4e:ce:e9:
         f3:e6:11:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:19:07 2026 by rpki-client