This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/323830363a3430323a343030303a3a2f34382d3438203d3e20323730313236.roa
File:                     323830363a3430323a343030303a3a2f34382d3438203d3e20323730313236.roa (raw, json)
Hash identifier:          o/EZ89hiDmZopLmpSI8BJQfKff5oltfIQ183AGMfpt4=
Subject key identifier:   56:89:80:C4:72:EE:0B:27:42:D3:06:0D:D8:B9:B3:FF:04:B4:CD:60
Certificate issuer:       /CN=ACF001143928ED105048A1EE877591E821D8006F
Certificate serial:       20C8A5A436FB8323F3C09DB647CEBFC4BA9ABA84
Authority key identifier: AC:F0:01:14:39:28:ED:10:50:48:A1:EE:87:75:91:E8:21:D8:00:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACF001143928ED105048A1EE877591E821D8006F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/323830363a3430323a343030303a3a2f34382d3438203d3e20323730313236.roa
Signing time:             Tue 06 Jan 2026 19:15:55 +0000
ROA not before:           Tue 06 Jan 2026 19:10:55 +0000
ROA not after:            Tue 05 Jan 2027 19:15:55 +0000
asID:                     270126
IP address blocks:        2806:402:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/ACF001143928ED105048A1EE877591E821D8006F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/ACF001143928ED105048A1EE877591E821D8006F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACF001143928ED105048A1EE877591E821D8006F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c8:a5:a4:36:fb:83:23:f3:c0:9d:b6:47:ce:bf:c4:ba:9a:ba:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACF001143928ED105048A1EE877591E821D8006F
        Validity
            Not Before: Jan  6 19:10:55 2026 GMT
            Not After : Jan  5 19:15:55 2027 GMT
        Subject: CN=568980C472EE0B2742D3060DD8B9B3FF04B4CD60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:05:c7:7f:a9:17:a7:57:af:9a:fd:a6:36:35:
                    e1:15:dd:3e:e9:c2:9e:73:0d:73:84:14:b7:2b:56:
                    76:38:8e:51:f6:85:ae:fc:ee:ae:49:cb:f5:f3:5c:
                    27:17:a8:8c:db:f9:66:93:f0:92:b7:b5:8c:6e:f7:
                    1b:86:11:da:89:4a:3e:65:e2:56:7b:be:d8:0d:a2:
                    13:75:38:90:d4:db:4f:95:92:56:77:61:c8:0b:a5:
                    b9:e5:ee:3b:4d:d5:a7:47:6e:84:9d:44:74:93:cd:
                    23:00:5a:11:e7:47:35:3f:e4:5a:0a:f9:47:14:43:
                    aa:a2:84:8b:73:e1:58:4f:b1:dc:e6:f6:f3:b7:33:
                    de:11:45:ff:8f:e4:da:83:99:8e:ba:32:ef:0f:d5:
                    7d:be:03:e1:6d:27:40:d1:0c:a2:d8:39:2e:48:3f:
                    32:c7:72:da:36:d2:f3:fa:a5:c7:bd:b6:e8:73:b2:
                    62:78:ad:cf:b5:26:80:f3:27:9c:11:70:7d:e5:e3:
                    19:51:a5:0c:f6:6a:94:f0:8e:c0:38:87:05:7a:d3:
                    78:80:64:87:d7:94:81:5a:01:d9:f1:a5:63:69:c7:
                    e5:f8:9d:47:d1:73:40:6a:42:d4:6b:78:54:ed:52:
                    15:57:a7:33:68:3e:d4:b0:37:3a:08:73:8a:ef:95:
                    ad:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:89:80:C4:72:EE:0B:27:42:D3:06:0D:D8:B9:B3:FF:04:B4:CD:60
            X509v3 Authority Key Identifier:
                keyid:AC:F0:01:14:39:28:ED:10:50:48:A1:EE:87:75:91:E8:21:D8:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/ACF001143928ED105048A1EE877591E821D8006F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACF001143928ED105048A1EE877591E821D8006F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/323830363a3430323a343030303a3a2f34382d3438203d3e20323730313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:402:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:34:66:f7:1f:c3:e3:c2:9a:e9:82:28:21:5b:27:d9:7a:e3:
         c2:f6:ee:4f:4c:5d:1d:ba:51:cf:97:c4:83:d1:26:db:12:5d:
         db:d7:38:bd:b2:79:f7:e1:c5:50:31:e3:e9:26:56:d0:8c:d2:
         50:d6:e5:4c:5a:b8:a7:25:9e:d3:d8:35:8e:30:58:b8:ac:c2:
         d0:08:b3:8f:6b:b0:e6:38:65:93:97:42:74:5a:e1:8a:bc:fa:
         54:73:77:9b:dd:3a:f1:0e:5a:1f:c8:90:7e:0a:ca:b3:e7:f8:
         f1:1a:cf:94:47:7e:e8:74:15:78:bc:ba:79:19:1a:6e:17:7e:
         c1:98:e1:e1:ff:bb:f9:92:55:67:f5:bb:8f:1d:26:b9:ac:01:
         fd:6d:38:44:3a:1a:26:9a:77:0b:73:d4:f4:0a:41:7a:df:94:
         a0:8f:75:db:d1:3e:50:67:47:a2:90:d7:1d:f9:d3:a6:90:09:
         77:ec:f4:b2:59:2f:df:86:75:9f:14:4f:45:47:5d:55:6a:42:
         c6:01:d2:fd:d7:3c:1d:d8:36:c8:c6:e4:4c:a8:c4:62:e5:08:
         2e:c1:5c:3a:19:ba:ae:06:eb:fe:da:74:af:9d:a2:dd:e2:89:
         49:f0:1e:22:04:01:99:7b:88:0b:a1:c9:9b:2d:28:7d:05:4a:
         9e:1d:99:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:04 2026 by rpki-client