This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/323830363a3364333a3a2f33322d3332203d3e2037303837.roa
File:                     323830363a3364333a3a2f33322d3332203d3e2037303837.roa (raw, json)
Hash identifier:          BP+cZS4e1RmzIS5ynhF7/eO77IptrHDn4FMb0v3wZuE=
Subject key identifier:   31:3B:A4:29:BE:7B:65:3C:C0:63:5F:8B:84:FD:FE:F4:A4:8A:43:52
Certificate issuer:       /CN=6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5
Certificate serial:       485A8B87B86CE41723BF57DB28D4024B5B574EEB
Authority key identifier: 6C:1D:DA:06:BD:BF:11:D1:E9:BF:8F:A8:9F:5D:5A:DC:A1:3F:B7:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/323830363a3364333a3a2f33322d3332203d3e2037303837.roa
Signing time:             Thu 08 Jan 2026 22:25:00 +0000
ROA not before:           Thu 08 Jan 2026 22:20:00 +0000
ROA not after:            Thu 07 Jan 2027 22:25:00 +0000
asID:                     7087
IP address blocks:        2806:3d3::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 08:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5a:8b:87:b8:6c:e4:17:23:bf:57:db:28:d4:02:4b:5b:57:4e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5
        Validity
            Not Before: Jan  8 22:20:00 2026 GMT
            Not After : Jan  7 22:25:00 2027 GMT
        Subject: CN=313BA429BE7B653CC0635F8B84FDFEF4A48A4352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:2c:29:42:d8:f5:8e:79:94:0a:01:08:70:
                    ec:99:8c:77:b9:a5:83:9c:c4:bd:d5:b1:8c:80:02:
                    1a:e0:51:13:2c:01:6b:65:41:8c:bd:f8:6e:20:d9:
                    b8:fa:18:26:82:bc:7e:d3:04:f0:1a:41:50:7f:c7:
                    bb:9a:45:12:ec:3e:ae:96:71:2a:73:22:b0:be:ab:
                    91:4c:d1:44:e8:20:50:21:25:80:e5:ea:7b:94:b7:
                    1b:e5:40:44:3e:c6:2a:ff:86:8b:66:ee:da:a1:45:
                    b4:84:59:09:fc:1c:99:c9:dc:3a:da:86:16:b1:c5:
                    ec:e9:03:e5:2f:7d:fc:24:bb:29:69:78:40:de:83:
                    f8:f8:d8:4f:23:c2:7b:eb:ce:1e:c9:a5:86:3e:90:
                    d1:89:46:50:dd:6b:28:77:e3:8c:87:76:a8:48:34:
                    6e:36:2e:f6:fa:7c:69:2c:6b:b4:87:ab:fe:ca:00:
                    8e:3a:d0:6f:4d:da:50:ff:3d:d1:2b:80:7c:1f:78:
                    0d:00:e2:5d:77:6d:a8:31:67:27:e4:c3:eb:91:f0:
                    b0:04:1b:33:fe:97:fa:d7:4a:2d:b0:8e:85:1f:0b:
                    ae:fe:46:f4:90:0f:02:c1:8e:c8:8b:40:54:72:43:
                    30:88:9e:58:6f:4d:66:fa:69:57:53:f7:2e:dd:6f:
                    9f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3B:A4:29:BE:7B:65:3C:C0:63:5F:8B:84:FD:FE:F4:A4:8A:43:52
            X509v3 Authority Key Identifier:
                keyid:6C:1D:DA:06:BD:BF:11:D1:E9:BF:8F:A8:9F:5D:5A:DC:A1:3F:B7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/323830363a3364333a3a2f33322d3332203d3e2037303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3d3::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:81:22:0e:e1:1a:2c:93:af:c6:1a:18:f5:06:08:70:31:87:
         5f:f8:65:5a:c6:20:5d:3e:fe:ec:1f:07:f6:5f:98:2c:d4:ea:
         23:98:a0:2e:e9:62:f6:04:4c:55:23:c2:d4:eb:75:6a:37:21:
         44:5e:0c:e6:69:b0:34:ad:c7:64:41:94:08:a4:62:8f:ef:2b:
         a0:8d:b8:32:73:3e:f2:c8:be:da:12:7c:73:ec:9b:d8:bb:9f:
         6b:33:6b:e2:58:b8:e8:a6:dd:ad:75:cd:48:00:03:ea:5d:53:
         81:78:56:05:c0:3c:9b:35:68:3d:fb:0f:ab:12:54:ac:83:ae:
         c1:b0:bb:e8:41:a1:18:d6:0f:d2:64:49:eb:ea:63:3b:4e:ca:
         6e:02:a1:88:aa:3c:2a:51:ac:c1:44:9b:63:13:6e:9b:92:f2:
         0d:ed:39:e8:99:ba:45:cf:c6:af:8a:63:4f:bd:92:e4:ef:bd:
         c7:63:03:bd:85:0c:ff:95:10:6f:9f:2e:c8:b2:77:05:15:d2:
         e1:e6:c7:23:01:23:45:4e:4f:41:d7:3f:66:99:d3:f8:4b:d0:
         ea:e0:5c:56:d3:07:30:77:e3:c7:cd:a6:c8:75:23:03:d5:72:
         7d:2a:80:5a:d3:b5:b1:77:e0:76:c3:20:20:4b:04:db:c9:34:
         8d:09:a9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:15:43 2026 by rpki-client