This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/323830363a3333663a3a2f33322d3332203d3e20323730313538.roa
File:                     323830363a3333663a3a2f33322d3332203d3e20323730313538.roa (raw, json)
Hash identifier:          FmaKB7VpylLznZxtZAQa7SZh+udy1KNRpf39Qwo5dS0=
Subject key identifier:   6E:8D:42:FB:9A:68:5D:6D:76:5D:26:42:69:32:7E:5E:CB:C0:17:94
Certificate issuer:       /CN=1253F5565479B7C7B04A2795544458932EC06F6C
Certificate serial:       1B7C32B7CB9FE4222710BADB329C7A2686A64758
Authority key identifier: 12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/323830363a3333663a3a2f33322d3332203d3e20323730313538.roa
Signing time:             Tue 06 Jan 2026 19:18:07 +0000
ROA not before:           Tue 06 Jan 2026 19:13:07 +0000
ROA not after:            Tue 05 Jan 2027 19:18:07 +0000
asID:                     270158
IP address blocks:        2806:33f::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7c:32:b7:cb:9f:e4:22:27:10:ba:db:32:9c:7a:26:86:a6:47:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1253F5565479B7C7B04A2795544458932EC06F6C
        Validity
            Not Before: Jan  6 19:13:07 2026 GMT
            Not After : Jan  5 19:18:07 2027 GMT
        Subject: CN=6E8D42FB9A685D6D765D264269327E5ECBC01794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9f:46:df:36:31:7b:75:58:75:18:3a:05:6f:
                    10:49:45:16:d4:46:c0:9c:c4:12:dd:2d:bd:14:53:
                    cf:b2:1b:6e:fb:c7:39:96:9e:e5:35:d2:2f:30:27:
                    29:e0:cd:1e:b7:e0:0c:85:98:f4:72:fa:e2:3b:b6:
                    4b:8c:b7:91:f2:d0:2a:77:38:a9:fa:62:cb:f7:98:
                    09:71:ee:c9:f8:c5:ea:bb:d8:ab:d3:65:b6:f1:f2:
                    07:27:c7:96:e8:35:3a:f2:e1:89:02:a4:9b:c8:d3:
                    05:59:ca:f9:3c:7b:3d:0f:e2:1f:6a:7e:4f:a3:06:
                    28:99:41:ad:28:29:7b:2b:14:78:54:f3:ff:3a:0a:
                    fe:78:48:45:bd:30:34:a6:ee:b9:2b:8f:a7:a6:b4:
                    01:e3:4b:50:83:33:2c:24:db:37:95:c7:02:42:ac:
                    3a:dd:f0:c7:d4:7b:25:54:a5:96:4d:9a:0a:96:e9:
                    b5:f5:f6:f6:d5:2c:3d:23:9c:e9:45:9a:e9:ad:06:
                    0d:f8:96:f1:ee:05:86:61:03:17:9e:d6:26:8c:e5:
                    e5:08:97:07:12:49:66:45:d0:51:80:0e:44:7e:63:
                    56:8a:a4:b7:a7:bf:df:f7:9e:d4:64:ce:31:20:c6:
                    37:86:b6:a4:d2:e8:eb:ff:9c:45:e1:d7:69:39:7c:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8D:42:FB:9A:68:5D:6D:76:5D:26:42:69:32:7E:5E:CB:C0:17:94
            X509v3 Authority Key Identifier:
                keyid:12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/323830363a3333663a3a2f33322d3332203d3e20323730313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:33f::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:e2:bd:2f:2d:c1:ae:69:07:e5:1f:28:03:62:b4:5a:05:e4:
         8d:d8:d4:ce:76:70:fc:fe:09:65:9e:02:85:fb:d4:8d:da:fb:
         78:9e:aa:40:96:a2:ea:f5:f3:c1:46:ac:9a:6d:69:de:70:d5:
         65:ee:21:35:04:bd:2d:c5:6e:a2:84:5b:f6:8e:1c:90:b3:a6:
         66:54:97:ff:23:31:17:2f:a3:32:e5:c4:8c:b6:31:1c:cd:8a:
         3c:9f:2c:e8:e7:0e:dd:1d:c8:d4:84:c1:b9:3c:3d:fc:75:e8:
         4d:2d:43:61:79:e8:f4:ab:0e:df:62:7d:06:a1:5c:4f:72:4c:
         31:01:a9:21:5c:9c:22:ab:ef:38:32:eb:84:93:f4:9d:48:b8:
         87:b5:41:d0:81:f4:4b:95:7a:ae:68:2a:b9:2a:0f:bf:a8:f9:
         89:a6:98:03:33:d4:ff:00:2d:ec:f2:f3:5e:9f:4b:2c:1e:f9:
         06:58:be:30:ad:2d:09:3a:e7:5c:cd:a6:5e:01:7e:f4:af:a0:
         4d:9e:ab:be:8a:df:3e:c3:bc:88:3f:ed:bd:80:38:5d:d3:dd:
         c7:1a:16:90:47:ce:7a:3c:8e:67:1c:67:e7:d4:b8:87:8c:27:
         51:c4:c3:d1:39:96:9f:e9:53:28:e5:cc:13:98:c5:94:a8:3a:
         7b:87:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:35 2026 by rpki-client