This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3a2f33322d3438203d3e203238343538.roa
File:                     323830363a3230323a3a2f33322d3438203d3e203238343538.roa (raw, json)
Hash identifier:          LPj7FsMG0VeshGb+xnpY8O/WYLjaNqlcywTUuQOl3EQ=
Subject key identifier:   E4:F3:DC:7E:EF:75:EB:36:11:39:42:79:B3:01:1F:F8:D0:F0:CB:60
Certificate issuer:       /CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
Certificate serial:       5907C0045AB853D7C279791604F0E88AC7F1A6F9
Authority key identifier: AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3a2f33322d3438203d3e203238343538.roa
Signing time:             Tue 06 Jan 2026 20:49:45 +0000
ROA not before:           Tue 06 Jan 2026 20:44:45 +0000
ROA not after:            Tue 05 Jan 2027 20:49:45 +0000
asID:                     28458
IP address blocks:        2806:202::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 15:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:07:c0:04:5a:b8:53:d7:c2:79:79:16:04:f0:e8:8a:c7:f1:a6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
        Validity
            Not Before: Jan  6 20:44:45 2026 GMT
            Not After : Jan  5 20:49:45 2027 GMT
        Subject: CN=E4F3DC7EEF75EB3611394279B3011FF8D0F0CB60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:e5:9a:99:0e:a4:c6:df:66:f3:26:7b:04:
                    3a:92:90:f4:13:5f:4b:2b:3b:6d:4a:3e:79:b0:3d:
                    ac:69:ff:7e:f0:f2:76:a9:59:af:35:84:55:75:52:
                    7f:21:8a:6c:bc:ff:a2:a1:03:8b:53:18:e8:72:c4:
                    57:2b:7d:03:76:12:f9:d5:c9:fc:b6:46:20:dc:e5:
                    25:53:ba:29:bc:c6:f6:c6:10:7d:a1:24:77:82:14:
                    cb:f5:9e:d0:c9:f8:5a:77:a0:b5:b0:b7:71:e4:98:
                    e2:ff:bd:46:9a:f9:0c:47:9c:1f:0f:4a:10:84:c3:
                    f0:11:cf:ed:5b:b4:24:db:61:9d:f0:78:18:23:d8:
                    a2:fc:cf:bb:50:8d:7d:9a:0d:8d:50:4d:7e:ea:5d:
                    90:cd:1b:7d:2e:c0:84:b8:da:64:b2:29:6d:57:77:
                    05:cd:c2:94:59:f6:e6:f0:b7:39:50:aa:69:6a:06:
                    5d:62:b3:b6:9f:2e:70:94:10:fe:49:94:f6:00:41:
                    ef:3f:a1:74:79:af:6e:da:43:1a:61:2b:b8:2d:58:
                    ce:64:49:0e:82:50:9d:7a:d7:41:00:99:8d:37:25:
                    f0:9c:83:7a:2d:04:4e:ce:f2:0d:ba:0a:da:0b:f3:
                    53:2e:fc:53:db:92:ce:d6:48:94:97:7b:d5:bb:ca:
                    5b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F3:DC:7E:EF:75:EB:36:11:39:42:79:B3:01:1F:F8:D0:F0:CB:60
            X509v3 Authority Key Identifier:
                keyid:AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3a2f33322d3438203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:202::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:43:d0:f6:14:a8:42:99:b5:d4:b2:11:f6:a5:63:02:d7:13:
         16:7e:8d:ed:e1:5e:31:49:9a:41:02:dc:70:94:7c:db:83:94:
         38:cb:22:26:13:5b:97:5b:17:98:03:bb:05:dc:e2:d0:1a:ca:
         12:3d:4a:98:63:8e:98:c6:2c:6d:48:2c:5a:24:f8:83:8c:98:
         ef:92:83:cf:1f:43:4d:52:84:af:c0:18:bb:80:e8:53:e4:37:
         d2:cb:f2:c8:3e:ea:57:1b:a7:44:7b:0b:4a:2e:7a:2c:95:08:
         cd:01:cf:56:06:01:2a:a9:15:50:d1:c3:5b:90:7f:54:b3:a7:
         cc:ac:7c:80:b1:72:7d:cc:95:da:f7:90:1c:81:4a:e6:ea:40:
         23:29:79:28:41:c5:2b:a6:5d:71:74:94:39:7c:f8:e8:be:65:
         84:29:7b:b7:96:9d:ec:00:b1:20:9c:7a:a4:b7:d6:1b:c7:d3:
         b4:36:12:af:20:16:73:17:1c:37:54:68:3a:0d:e0:95:42:3d:
         eb:ef:6d:2f:b1:15:97:e5:d5:8e:8b:44:97:c0:fe:7d:35:65:
         91:c2:01:32:ca:0b:cc:45:63:6d:77:1f:10:a5:fc:be:f2:c5:
         37:3f:fa:04:99:91:e0:f1:a9:20:5c:75:0c:44:bc:68:5b:1c:
         13:be:51:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:57:57 2026 by rpki-client