This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/323830363a3430323a3a2f33342d3438203d3e20323730313739.roa
File:                     323830363a3430323a3a2f33342d3438203d3e20323730313739.roa (raw, json)
Hash identifier:          558bk9tu3aJ/yrVyFTgq391E3hD962ovysslMr2BDFI=
Subject key identifier:   6C:BB:CE:2C:C5:8F:F4:22:3D:71:CA:AB:D8:46:E4:2C:50:C9:C2:0A
Certificate issuer:       /CN=ACF001143928ED105048A1EE877591E821D8006F
Certificate serial:       1EDC0E0D5E25FED41B71AAC2F158EF03D74CFED1
Authority key identifier: AC:F0:01:14:39:28:ED:10:50:48:A1:EE:87:75:91:E8:21:D8:00:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACF001143928ED105048A1EE877591E821D8006F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/323830363a3430323a3a2f33342d3438203d3e20323730313739.roa
Signing time:             Tue 06 Jan 2026 19:15:55 +0000
ROA not before:           Tue 06 Jan 2026 19:10:55 +0000
ROA not after:            Tue 05 Jan 2027 19:15:55 +0000
asID:                     270179
IP address blocks:        2806:402::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/ACF001143928ED105048A1EE877591E821D8006F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/ACF001143928ED105048A1EE877591E821D8006F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACF001143928ED105048A1EE877591E821D8006F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:dc:0e:0d:5e:25:fe:d4:1b:71:aa:c2:f1:58:ef:03:d7:4c:fe:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACF001143928ED105048A1EE877591E821D8006F
        Validity
            Not Before: Jan  6 19:10:55 2026 GMT
            Not After : Jan  5 19:15:55 2027 GMT
        Subject: CN=6CBBCE2CC58FF4223D71CAABD846E42C50C9C20A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a7:26:88:21:7f:29:43:f0:43:d5:ca:96:98:
                    d9:52:7f:13:07:40:55:6f:6e:32:33:26:2b:71:c4:
                    d0:1b:8d:2f:6d:54:c0:34:40:a1:11:8c:a5:56:b4:
                    bf:ca:0d:40:39:28:f4:6f:1c:e8:5c:90:3d:48:40:
                    f6:f6:66:b3:14:45:a3:87:47:1a:05:08:96:ec:8d:
                    a1:b4:82:b3:21:9e:71:18:cd:11:c2:0b:29:15:96:
                    cc:ae:12:44:6e:00:7b:f4:c2:7c:96:86:a9:8d:79:
                    e2:34:7d:71:ac:44:68:c2:27:78:6c:78:9d:9c:33:
                    89:d0:cc:69:c6:13:00:30:38:ea:63:c7:fb:2a:b6:
                    27:39:c1:ff:6e:31:62:e3:8e:4b:c3:e0:45:7c:1c:
                    88:0b:f6:e3:0e:cd:7c:b8:1b:9f:20:ef:4d:a7:63:
                    52:38:65:84:c7:79:47:3d:1e:bc:a1:41:16:d4:30:
                    49:68:59:ea:bc:36:0d:c0:c8:86:ab:a8:58:21:64:
                    ed:ba:f1:f1:aa:fd:80:07:00:dc:e8:44:9c:b7:76:
                    71:05:10:ae:86:b2:cf:c4:67:67:9d:ad:67:d0:d0:
                    f3:ea:fd:c2:04:f7:ff:2e:47:3f:11:ac:b1:0e:2a:
                    a5:ca:2f:4b:f7:01:79:ac:bf:ed:14:d1:b0:42:a1:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BB:CE:2C:C5:8F:F4:22:3D:71:CA:AB:D8:46:E4:2C:50:C9:C2:0A
            X509v3 Authority Key Identifier:
                keyid:AC:F0:01:14:39:28:ED:10:50:48:A1:EE:87:75:91:E8:21:D8:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/ACF001143928ED105048A1EE877591E821D8006F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ACF001143928ED105048A1EE877591E821D8006F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0B0A0A5FB5D274CC3A2312017898B85F188FB9C0831C6112C82A20F45903BE7/0/323830363a3430323a3a2f33342d3438203d3e20323730313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:402::/34

    Signature Algorithm: sha256WithRSAEncryption
         61:b1:25:90:3d:01:92:67:45:b5:b3:e7:58:de:f8:a0:47:88:
         7d:9f:9f:71:ae:21:2a:c1:12:99:d1:ad:c4:1e:f8:ed:b3:ef:
         9d:2b:cd:16:1c:13:d1:ff:8e:39:29:19:e9:54:5f:d4:d7:a7:
         c8:48:b1:cb:f3:f4:d0:8e:e8:ad:a7:3b:27:cc:94:3f:e9:98:
         87:bd:2f:a3:2b:bd:12:53:7c:60:13:0a:4f:82:2c:44:d4:e3:
         96:9d:bc:e6:eb:05:a7:b4:a1:63:87:f5:fd:af:0e:06:be:36:
         08:d7:c0:dc:59:20:78:97:1a:ff:40:d8:21:5a:75:1a:36:73:
         04:36:c0:9e:4f:2f:a3:e2:8b:0e:b5:90:88:8a:d9:34:99:4b:
         bb:c3:1f:79:23:1a:31:b9:bf:f6:52:c3:87:96:c9:f0:45:05:
         0b:0b:0a:28:8a:0a:0e:94:ca:04:35:96:68:bd:82:c2:b9:63:
         69:01:1d:bb:f0:a5:1d:36:64:56:e4:71:83:4f:df:17:3b:76:
         4b:e0:73:6a:0d:31:0e:7a:ab:e1:f0:bd:aa:9a:18:a9:8d:06:
         2b:fe:e1:ab:3f:85:94:15:e3:86:69:2c:d6:45:1d:46:59:8f:
         52:22:db:72:4b:cf:6a:44:87:77:13:7a:12:2c:ac:66:16:1e:
         ac:94:e6:33
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHtwODV4l/tQbcarC8VjvA9dM/tEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNGMDAxMTQzOTI4RUQxMDUwNDhBMUVFODc3NTkxRTgy
MUQ4MDA2RjAeFw0yNjAxMDYxOTEwNTVaFw0yNzAxMDUxOTE1NTVaMDMxMTAvBgNV
BAMTKDZDQkJDRTJDQzU4RkY0MjIzRDcxQ0FBQkQ4NDZFNDJDNTBDOUMyMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpyaIIX8pQ/BD1cqWmNlSfxMH
QFVvbjIzJitxxNAbjS9tVMA0QKERjKVWtL/KDUA5KPRvHOhckD1IQPb2ZrMURaOH
RxoFCJbsjaG0grMhnnEYzRHCCykVlsyuEkRuAHv0wnyWhqmNeeI0fXGsRGjCJ3hs
eJ2cM4nQzGnGEwAwOOpjx/sqtic5wf9uMWLjjkvD4EV8HIgL9uMOzXy4G58g702n
Y1I4ZYTHeUc9HryhQRbUMEloWeq8Ng3AyIarqFghZO268fGq/YAHANzoRJy3dnEF
EK6Gss/EZ2edrWfQ0PPq/cIE9/8uRz8RrLEOKqXKL0v3AXmsv+0U0bBCoSyXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUbLvOLMWP9CI9ccqr2EbkLFDJwgowHwYDVR0j
BBgwFoAUrPABFDko7RBQSKHuh3WR6CHYAG8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEIwQTBBNUZCNUQyNzRDQzNBMjMxMjAxNzg5OEI4NUYx
ODhGQjlDMDgzMUM2MTEyQzgyQTIwRjQ1OTAzQkU3LzAvQUNGMDAxMTQzOTI4RUQx
MDUwNDhBMUVFODc3NTkxRTgyMUQ4MDA2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQ0YwMDExNDM5MjhFRDEwNTA0
OEExRUU4Nzc1OTFFODIxRDgwMDZGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBCMEEwQTVGQjVEMjc0Q0MzQTIzMTIwMTc4OThCODVGMTg4RkI5QzA4
MzFDNjExMkM4MkEyMEY0NTkwM0JFNy8wLzMyMzgzMDM2M2EzNDMwMzIzYTNhMmYz
MzM0MmQzNDM4MjAzZDNlMjAzMjM3MzAzMTM3Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBgQCADAN
BgkqhkiG9w0BAQsFAAOCAQEAYbElkD0BkmdFtbPnWN74oEeIfZ+fca4hKsESmdGt
xB747bPvnSvNFhwT0f+OOSkZ6VRf1NenyEixy/P00I7orac7J8yUP+mYh70voyu9
ElN8YBMKT4IsRNTjlp285usFp7ShY4f1/a8OBr42CNfA3FkgeJca/0DYIVp1GjZz
BDbAnk8vo+KLDrWQiIrZNJlLu8MfeSMaMbm/9lLDh5bJ8EUFCwsKKIoKDpTKBDWW
aL2CwrljaQEdu/ClHTZkVuRxg0/fFzt2S+Bzag0xDnqr4fC9qpoYqY0GK/7hqz+F
lBXjhmks1kUdRlmPUiLbckvPakSHdxN6EiysZhYerJTmMw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:05 2026 by rpki-client