This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/323830363a3265363a3a2f33322d3334203d3e203133393539.roa
File:                     323830363a3265363a3a2f33322d3334203d3e203133393539.roa (raw, json)
Hash identifier:          AUX2CR+FIfjaxr6tqDDSs7PTcBMe3QAalewHt8dnZA0=
Subject key identifier:   9C:DB:7C:B8:16:C7:8E:C9:B8:9B:BD:CD:5D:EC:A8:56:43:4C:24:FF
Certificate issuer:       /CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
Certificate serial:       5EBB682B71AB2881E8797F7420013BADB2F8C7F3
Authority key identifier: A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/323830363a3265363a3a2f33322d3334203d3e203133393539.roa
Signing time:             Tue 06 Jan 2026 19:46:50 +0000
ROA not before:           Tue 06 Jan 2026 19:41:50 +0000
ROA not after:            Tue 05 Jan 2027 19:46:50 +0000
asID:                     13959
IP address blocks:        2806:2e6::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bb:68:2b:71:ab:28:81:e8:79:7f:74:20:01:3b:ad:b2:f8:c7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
        Validity
            Not Before: Jan  6 19:41:50 2026 GMT
            Not After : Jan  5 19:46:50 2027 GMT
        Subject: CN=9CDB7CB816C78EC9B89BBDCD5DECA856434C24FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ac:53:c9:a6:74:82:39:1b:4d:63:7b:9b:1e:
                    34:70:fe:e9:9d:a1:82:38:e9:76:09:7b:a3:45:1e:
                    11:b2:84:3c:de:63:10:8b:c9:f2:73:0d:13:86:b9:
                    5e:14:af:aa:4d:c0:f2:c0:bc:55:3b:2d:42:f8:e8:
                    d2:38:ad:ec:40:36:f8:98:ed:d8:91:39:78:42:53:
                    a2:f7:95:8f:fa:4d:f8:54:c8:a9:70:cc:db:14:44:
                    24:d8:ef:45:c5:26:54:34:d0:0c:c5:cc:d2:eb:ec:
                    0e:e9:dd:16:80:0a:fe:a7:92:4d:30:c3:44:68:ea:
                    f4:b0:76:32:3f:68:e8:32:7f:13:00:7b:26:34:44:
                    bf:c5:b3:e2:01:f4:f6:d8:e7:a3:44:3c:c9:52:8d:
                    0b:87:27:4a:29:79:f0:d1:43:27:67:aa:30:a9:f2:
                    d2:70:d4:89:f0:fe:f1:f6:8f:4c:43:33:44:3e:34:
                    00:2a:77:64:c2:d6:11:1b:74:19:9c:78:82:8c:32:
                    b2:7f:d5:12:54:01:be:58:47:50:08:e6:8c:ae:9f:
                    de:ef:43:9b:b2:e2:c5:54:ab:55:52:4c:e3:72:9a:
                    af:c1:41:e2:a4:09:08:39:94:0f:f0:d3:20:a4:1b:
                    52:3a:b8:1e:1e:bd:61:bb:b3:44:00:d9:63:8d:78:
                    ff:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DB:7C:B8:16:C7:8E:C9:B8:9B:BD:CD:5D:EC:A8:56:43:4C:24:FF
            X509v3 Authority Key Identifier:
                keyid:A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/323830363a3265363a3a2f33322d3334203d3e203133393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:1a:71:b0:98:bf:0f:bf:58:e1:2b:a7:94:7f:5c:c7:26:e4:
         d0:2c:1a:79:a4:c7:84:64:ae:01:84:f1:01:29:8c:b6:e4:6d:
         8a:22:d0:71:d4:d1:7c:17:6c:4a:08:fe:94:43:cf:99:05:93:
         25:86:04:34:89:18:fa:76:39:7e:8d:ab:b6:97:f8:de:b4:a0:
         de:ca:b0:80:b8:69:df:0d:a8:88:5e:d6:41:bd:93:9e:4b:b9:
         7d:43:8a:e5:2d:c4:52:c7:6d:60:a5:5d:3d:76:5d:b2:da:dc:
         21:98:25:a2:84:80:3e:f5:38:c3:27:9d:8f:0d:7c:01:2a:34:
         b8:78:54:a2:b3:06:bc:cb:29:7b:b8:ec:41:69:1f:a0:cc:e4:
         7d:3b:e2:f0:70:54:79:37:71:43:06:ae:a4:2c:2a:41:d3:91:
         9a:4f:5e:7a:08:08:d5:66:46:3a:24:4e:58:61:8a:d2:c4:11:
         67:a6:7c:4c:ab:4a:ef:92:c1:8b:fa:29:0f:c6:e9:54:19:19:
         c3:e2:7c:0e:6d:78:fc:bd:00:9b:ac:8e:de:f9:f9:04:27:31:
         de:69:3d:70:1a:ba:19:11:82:ea:78:dd:e9:bf:ae:b7:89:a9:
         40:ee:61:d4:d7:e8:2e:57:3c:ed:24:54:a8:07:c5:9a:b7:67:
         5f:4e:bb:09
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUXrtoK3GrKIHoeX90IAE7rbL4x/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY0Nzg5RkZDQTM1REM1Q0Y1QTA0RDNGOTQ4QTc5QTc2
RjQxNTEzMDAeFw0yNjAxMDYxOTQxNTBaFw0yNzAxMDUxOTQ2NTBaMDMxMTAvBgNV
BAMTKDlDREI3Q0I4MTZDNzhFQzlCODlCQkRDRDVERUNBODU2NDM0QzI0RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrFPJpnSCORtNY3ubHjRw/umd
oYI46XYJe6NFHhGyhDzeYxCLyfJzDROGuV4Ur6pNwPLAvFU7LUL46NI4rexANviY
7diROXhCU6L3lY/6TfhUyKlwzNsURCTY70XFJlQ00AzFzNLr7A7p3RaACv6nkk0w
w0Ro6vSwdjI/aOgyfxMAeyY0RL/Fs+IB9PbY56NEPMlSjQuHJ0opefDRQydnqjCp
8tJw1Inw/vH2j0xDM0Q+NAAqd2TC1hEbdBmceIKMMrJ/1RJUAb5YR1AI5oyun97v
Q5uy4sVUq1VSTONymq/BQeKkCQg5lA/w0yCkG1I6uB4evWG7s0QA2WONeP+vAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUnNt8uBbHjsm4m73NXeyoVkNMJP8wHwYDVR0j
BBgwFoAUpkeJ/8o13Fz1oE0/lIp5p29BUTAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NUFDNTQ4MDkyQjVCMzY2QTM3MEMxQzJCNDBBMTc2MUQ0
QTNEREZBMEUzODM0MTY4QTQwMjY3Nzc0ODYwOTdELzAvQTY0Nzg5RkZDQTM1REM1
Q0Y1QTA0RDNGOTQ4QTc5QTc2RjQxNTEzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjQ3ODlGRkNBMzVEQzVDRjVB
MDREM0Y5NDhBNzlBNzZGNDE1MTMwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTVBQzU0ODA5MkI1QjM2NkEzNzBDMUMyQjQwQTE3NjFENEEzRERGQTBF
MzgzNDE2OEE0MDI2Nzc3NDg2MDk3RC8wLzMyMzgzMDM2M2EzMjY1MzYzYTNhMmYz
MzMyMmQzMzM0MjAzZDNlMjAzMTMzMzkzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYC5jANBgkq
hkiG9w0BAQsFAAOCAQEAVhpxsJi/D79Y4SunlH9cxybk0CwaeaTHhGSuAYTxASmM
tuRtiiLQcdTRfBdsSgj+lEPPmQWTJYYENIkY+nY5fo2rtpf43rSg3sqwgLhp3w2o
iF7WQb2Tnku5fUOK5S3EUsdtYKVdPXZdstrcIZglooSAPvU4wyedjw18ASo0uHhU
orMGvMspe7jsQWkfoMzkfTvi8HBUeTdxQwaupCwqQdORmk9eeggI1WZGOiROWGGK
0sQRZ6Z8TKtK75LBi/opD8bpVBkZw+J8Dm14/L0Am6yO3vn5BCcx3mk9cBq6GRGC
6njd6b+ut4mpQO5h1NfoLlc87SRUqAfFmrdnX067CQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:41 2026 by rpki-client