This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/323830303a6263303a3a2f33322d3438203d3e203230303830.roa
File:                     323830303a6263303a3a2f33322d3438203d3e203230303830.roa (raw, json)
Hash identifier:          u018yopY7cyb5HkHxHwV77nlJoQ2sVdJdapWrx15Y1M=
Subject key identifier:   78:9D:26:47:E9:B1:58:F7:2B:42:F6:41:CF:52:A3:A1:4E:82:7E:B4
Certificate issuer:       /CN=6A595D7CA88F85E87BEC621A6A251A58F6E89C5B
Certificate serial:       411BAA97D9BBE1B27E65176285DCC9339BF81513
Authority key identifier: 6A:59:5D:7C:A8:8F:85:E8:7B:EC:62:1A:6A:25:1A:58:F6:E8:9C:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/323830303a6263303a3a2f33322d3438203d3e203230303830.roa
Signing time:             Tue 06 Jan 2026 19:19:15 +0000
ROA not before:           Tue 06 Jan 2026 19:14:15 +0000
ROA not after:            Tue 05 Jan 2027 19:19:15 +0000
asID:                     20080
IP address blocks:        2800:bc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1b:aa:97:d9:bb:e1:b2:7e:65:17:62:85:dc:c9:33:9b:f8:15:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A595D7CA88F85E87BEC621A6A251A58F6E89C5B
        Validity
            Not Before: Jan  6 19:14:15 2026 GMT
            Not After : Jan  5 19:19:15 2027 GMT
        Subject: CN=789D2647E9B158F72B42F641CF52A3A14E827EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:10:39:58:3a:ea:3a:00:b4:dd:1d:6e:9f:76:
                    67:c6:66:9f:f0:25:ad:76:0a:cd:05:81:8e:b2:0c:
                    08:5c:dd:f7:0c:26:42:9c:8e:b2:f1:6b:87:9b:a7:
                    03:5f:86:17:3f:48:d7:f7:e2:89:8f:c1:e1:03:56:
                    83:82:eb:b6:92:89:bf:5c:65:e2:0a:ef:8a:27:a3:
                    5d:8b:91:38:14:50:84:ec:73:c3:64:3f:7e:e0:bd:
                    b5:ae:e2:e6:ec:70:89:94:31:c9:7c:1b:1e:bd:01:
                    0c:04:10:6f:bc:b9:fd:e5:3a:48:be:0f:82:f5:ff:
                    b3:30:53:93:63:05:58:b2:a6:0c:b5:2d:52:79:de:
                    4c:d9:99:23:1c:5f:ab:cb:b8:bf:3b:74:34:fe:c1:
                    fd:53:80:df:b1:5f:00:02:62:51:22:1e:56:10:cb:
                    20:c7:29:36:4f:a9:ba:31:1b:39:a4:08:20:5d:ef:
                    9f:e5:dd:d4:7b:00:db:ae:5a:72:2e:62:16:fe:6d:
                    be:16:ea:a5:a1:78:ce:11:4f:b0:3b:38:91:41:31:
                    79:1d:96:37:b4:94:65:ce:79:c7:8f:0d:ed:ef:fc:
                    fb:8b:4e:d6:0a:4e:53:54:59:26:4d:66:e8:0d:31:
                    ee:ad:76:56:0d:42:39:91:3a:53:ef:40:4d:4f:ae:
                    1b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9D:26:47:E9:B1:58:F7:2B:42:F6:41:CF:52:A3:A1:4E:82:7E:B4
            X509v3 Authority Key Identifier:
                keyid:6A:59:5D:7C:A8:8F:85:E8:7B:EC:62:1A:6A:25:1A:58:F6:E8:9C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/323830303a6263303a3a2f33322d3438203d3e203230303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:c6:c9:c5:e8:12:e9:99:ee:17:bc:c0:12:ef:54:e6:cd:d9:
         6d:d0:88:b4:ff:92:a1:a6:12:ac:a2:ea:6c:c9:5c:4f:e3:3a:
         8c:40:06:df:7a:46:09:95:40:be:26:f0:a8:02:fb:30:fc:33:
         c7:95:26:36:51:d4:f4:39:48:08:e6:c5:4a:89:ee:04:ee:0a:
         6d:13:a1:77:fa:83:f8:61:8f:42:6b:5b:74:8f:c6:48:a3:71:
         28:2b:ae:b6:e4:37:04:c8:f6:b8:e1:fe:7d:fc:78:93:d6:10:
         54:70:e9:6b:ca:9e:d0:90:59:7e:e3:1b:a7:d3:f7:13:64:9f:
         37:0a:47:bd:69:5d:39:c9:8c:a4:e4:2b:3a:6f:0d:88:ab:01:
         70:66:df:38:31:b4:8a:c3:bb:8a:94:51:52:0a:f7:dc:16:43:
         22:1f:07:86:28:1d:d0:3e:e3:ad:ed:b4:55:73:ae:9e:33:eb:
         22:9e:08:9a:4d:37:a0:cb:ab:c0:37:ad:e6:44:47:b4:80:c0:
         12:e8:23:6f:14:f1:78:94:63:1b:43:15:e2:1d:bc:ee:5c:0e:
         85:ea:40:11:97:49:9a:ef:34:20:41:ac:e2:51:bc:44:56:1d:
         ff:ea:ce:f2:21:93:61:66:ca:61:f4:16:2b:64:97:a7:a8:cc:
         ad:e8:0e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:49:14 2026 by rpki-client