This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/323830363a3362313a3a2f33322d3438203d3e20323730313130.roa
File:                     323830363a3362313a3a2f33322d3438203d3e20323730313130.roa (raw, json)
Hash identifier:          hZf/atQnEoOKCYZhPYk0737kxPa/wXu/vaZpwfMsUbE=
Subject key identifier:   4D:64:0F:29:86:B2:81:29:7A:A4:8F:9A:B3:57:03:27:84:6B:CA:09
Certificate issuer:       /CN=6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443
Certificate serial:       47AA7425BD81FBB4B3B822C9702D90951C59BE2E
Authority key identifier: 6A:87:DF:E4:B3:8F:32:D9:EB:47:89:BB:7B:E2:DA:27:A3:98:84:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/323830363a3362313a3a2f33322d3438203d3e20323730313130.roa
Signing time:             Tue 06 Jan 2026 20:58:40 +0000
ROA not before:           Tue 06 Jan 2026 20:53:40 +0000
ROA not after:            Tue 05 Jan 2027 20:58:40 +0000
asID:                     270110
IP address blocks:        2806:3b1::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:aa:74:25:bd:81:fb:b4:b3:b8:22:c9:70:2d:90:95:1c:59:be:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443
        Validity
            Not Before: Jan  6 20:53:40 2026 GMT
            Not After : Jan  5 20:58:40 2027 GMT
        Subject: CN=4D640F2986B281297AA48F9AB3570327846BCA09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:2b:eb:42:79:63:40:55:1b:a2:51:71:d7:
                    0b:f3:d4:76:8d:12:7a:97:46:a4:1d:c8:f3:a5:2f:
                    e7:5f:c2:bd:62:a5:d1:18:93:21:99:00:c7:8f:c5:
                    30:96:d1:b8:1a:19:e8:bd:3a:3c:e3:56:68:7d:1e:
                    80:51:eb:28:2e:d9:6c:82:b4:86:3f:79:4b:15:05:
                    c0:1c:ef:4b:7f:cc:87:6d:65:94:c6:57:20:d4:ac:
                    9f:68:6b:66:9e:4b:17:85:e4:43:89:7b:11:bb:eb:
                    44:b2:b5:26:1e:66:7f:6b:85:90:41:fa:6f:b0:79:
                    5b:3b:64:aa:33:3b:3c:16:24:05:b1:0d:57:d1:2f:
                    d0:03:30:fe:23:00:db:f9:27:36:65:4b:78:b8:12:
                    9a:18:2f:85:00:1c:38:9b:fb:54:87:8a:93:49:08:
                    80:85:e9:bc:42:2c:86:37:aa:36:5e:6b:c3:e8:4d:
                    4a:c8:3c:06:06:e8:ec:6e:82:41:fa:3f:6c:a7:e4:
                    cb:77:5b:05:5d:dc:36:95:39:6f:a3:85:da:34:08:
                    bc:3e:03:34:07:46:67:9a:ec:2b:b2:30:09:ae:79:
                    60:c2:18:7a:13:f0:3a:e2:87:fb:ca:37:7e:3a:ef:
                    4e:18:92:c4:bf:30:a2:3d:4b:bf:ae:c2:e4:99:ba:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:64:0F:29:86:B2:81:29:7A:A4:8F:9A:B3:57:03:27:84:6B:CA:09
            X509v3 Authority Key Identifier:
                keyid:6A:87:DF:E4:B3:8F:32:D9:EB:47:89:BB:7B:E2:DA:27:A3:98:84:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/323830363a3362313a3a2f33322d3438203d3e20323730313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3b1::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:dd:09:61:55:2b:03:5c:b1:53:12:eb:f4:06:e2:6e:25:14:
         d5:3a:fb:b9:1b:f7:a7:37:71:96:f0:5c:5d:70:60:e3:a4:51:
         3c:9f:06:12:b6:82:01:11:cd:79:59:bf:88:e3:9b:40:45:1d:
         0d:64:f4:49:45:ed:f9:ea:ed:cc:e6:06:21:14:4b:d5:93:45:
         70:f4:41:61:e2:0f:b9:4f:85:89:2b:e4:15:ad:99:d0:25:bb:
         28:ef:c1:bc:26:96:02:fb:c3:d0:f0:89:44:8e:71:01:c3:a9:
         e3:31:fb:11:a9:50:2a:ef:13:e5:1e:19:24:eb:89:ad:29:27:
         dd:56:53:02:ff:d0:50:b4:97:2d:e8:99:d6:ed:60:80:83:88:
         f9:16:95:df:cf:cc:72:f5:46:ed:9c:22:b5:dc:1c:48:83:25:
         ac:e0:39:d1:d6:7b:8c:71:6b:75:cb:8c:a3:37:77:51:e5:be:
         b3:b5:b8:73:44:4e:8a:0c:62:d8:7d:bb:d4:c9:64:a0:28:0c:
         e3:c1:a5:47:ec:65:23:c3:ba:6f:43:77:ea:20:53:3a:18:6d:
         36:66:db:ed:90:98:e2:fb:fd:11:b7:6f:5a:96:1d:b4:f6:21:
         64:2c:3f:cd:c2:81:9b:8b:5d:4e:b4:7c:c9:fe:bb:da:e2:64:
         b9:d4:c4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:28 2026 by rpki-client