This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/323830363a3333663a3a2f33322d3332203d3e20323730313331.roa
File:                     323830363a3333663a3a2f33322d3332203d3e20323730313331.roa (raw, json)
Hash identifier:          k8zSjrkEJyE0Ft/Dx4BFpyukukkvQ5D3ncfaXcne/UQ=
Subject key identifier:   B2:A8:BE:18:1F:72:4A:4E:9A:BB:5B:0B:31:59:BF:78:D1:61:08:18
Certificate issuer:       /CN=1253F5565479B7C7B04A2795544458932EC06F6C
Certificate serial:       12318362EF34F031ECA28FEE75B56DB70C979F60
Authority key identifier: 12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/323830363a3333663a3a2f33322d3332203d3e20323730313331.roa
Signing time:             Tue 06 Jan 2026 19:18:08 +0000
ROA not before:           Tue 06 Jan 2026 19:13:08 +0000
ROA not after:            Tue 05 Jan 2027 19:18:08 +0000
asID:                     270131
IP address blocks:        2806:33f::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:31:83:62:ef:34:f0:31:ec:a2:8f:ee:75:b5:6d:b7:0c:97:9f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1253F5565479B7C7B04A2795544458932EC06F6C
        Validity
            Not Before: Jan  6 19:13:08 2026 GMT
            Not After : Jan  5 19:18:08 2027 GMT
        Subject: CN=B2A8BE181F724A4E9ABB5B0B3159BF78D1610818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:33:71:5f:b2:af:02:ee:de:cf:0b:1b:78:c1:
                    ba:df:ea:56:98:c5:47:18:1d:8f:7e:21:66:a8:30:
                    54:4e:20:10:02:a5:2a:01:24:99:19:a1:d7:65:ea:
                    c4:d3:33:62:2b:74:b4:6e:87:22:31:01:d6:6a:10:
                    84:02:a6:a3:93:97:70:f2:5e:00:43:b4:02:46:d6:
                    69:a5:f9:c3:c0:36:60:39:c7:5f:49:64:62:06:00:
                    8c:7d:88:84:d3:77:c3:1a:e5:b2:1e:a5:76:52:c5:
                    84:35:45:af:ca:63:2a:26:d7:ed:f2:8a:97:d8:e9:
                    69:b4:ba:45:33:bc:c2:fb:e0:e5:e2:a2:52:3c:a4:
                    94:60:42:bb:d2:e8:de:58:c9:41:57:c0:55:a9:6a:
                    ee:8f:42:67:d1:ba:92:e3:f4:53:0e:a8:20:45:26:
                    ef:bf:f1:f8:da:46:bb:67:38:c7:e6:21:ea:50:cc:
                    d7:f0:04:6a:58:d9:ef:f6:8d:44:24:27:b9:4c:6d:
                    e1:9f:e9:bf:e5:22:07:7b:d0:ec:5c:74:6c:1a:20:
                    f7:0b:f4:73:20:39:04:dd:ab:18:33:83:19:c7:43:
                    91:85:32:1a:c1:7d:ef:6e:50:e6:cd:89:3c:c3:6e:
                    08:20:28:0f:8b:d7:d0:57:9e:4f:3d:4e:0a:64:ba:
                    27:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A8:BE:18:1F:72:4A:4E:9A:BB:5B:0B:31:59:BF:78:D1:61:08:18
            X509v3 Authority Key Identifier:
                keyid:12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/323830363a3333663a3a2f33322d3332203d3e20323730313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:33f::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:4d:f3:9a:9f:1a:57:b4:af:77:9d:5c:af:ef:14:c6:c8:6e:
         58:e9:63:87:d5:c2:04:38:6c:6e:68:58:90:5a:96:7d:6a:f5:
         a2:a9:b6:2f:a8:97:d0:6a:db:7f:a8:66:a6:ac:cd:45:bc:b0:
         33:33:18:cc:f3:52:7d:73:13:dc:81:b3:4c:cf:58:7b:68:a1:
         aa:92:20:57:13:9e:21:fe:ba:4d:21:e2:cd:fb:a3:f1:c8:fc:
         b8:59:1b:e1:84:97:70:42:df:25:5f:fd:5d:56:7e:bb:d7:35:
         f6:ef:77:b9:39:f6:87:a3:cf:bb:87:66:d0:1f:7a:60:d5:84:
         4f:76:54:68:66:ed:18:19:50:94:74:ab:c0:56:82:8e:3e:87:
         1f:b3:81:c8:58:3a:8d:f3:72:12:43:1c:1d:37:8f:2c:f1:1d:
         f5:52:bd:49:54:f5:e8:17:4c:af:bb:bf:aa:62:eb:3b:5e:8d:
         5a:11:68:96:ca:bc:fb:b1:17:72:86:f4:d9:75:af:58:4b:91:
         46:22:ab:9c:cb:cc:e8:6b:7e:82:58:da:d2:df:52:80:f8:ad:
         9c:2e:9e:33:86:ef:66:5e:29:88:17:2f:1d:65:7c:69:a6:d8:
         03:bd:01:4a:c9:d2:ae:7b:3e:f2:d5:cc:51:60:85:0d:c2:c8:
         43:83:ac:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:03:19 2026 by rpki-client