This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/323830363a3364343a3a2f33322d3438203d3e20323635353836.roa
File:                     323830363a3364343a3a2f33322d3438203d3e20323635353836.roa (raw, json)
Hash identifier:          30bnHbFiNeIDk9KRDizv0gtXifSNoNiTlhG8BLrnqC0=
Subject key identifier:   3E:76:F7:E5:1F:FE:28:88:98:F5:59:76:97:C4:0E:FE:49:80:0D:A9
Certificate issuer:       /CN=9C464528F67B00410467C3FEDE9E1DD404D5EA8B
Certificate serial:       0F9A4CD007040CE05F8B54F33F2649A1583B82E4
Authority key identifier: 9C:46:45:28:F6:7B:00:41:04:67:C3:FE:DE:9E:1D:D4:04:D5:EA:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/323830363a3364343a3a2f33322d3438203d3e20323635353836.roa
Signing time:             Tue 06 Jan 2026 19:28:14 +0000
ROA not before:           Tue 06 Jan 2026 19:23:14 +0000
ROA not after:            Tue 05 Jan 2027 19:28:14 +0000
asID:                     265586
IP address blocks:        2806:3d4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9a:4c:d0:07:04:0c:e0:5f:8b:54:f3:3f:26:49:a1:58:3b:82:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C464528F67B00410467C3FEDE9E1DD404D5EA8B
        Validity
            Not Before: Jan  6 19:23:14 2026 GMT
            Not After : Jan  5 19:28:14 2027 GMT
        Subject: CN=3E76F7E51FFE288898F5597697C40EFE49800DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c3:3a:34:2e:fa:91:e4:10:ab:d3:66:e2:43:
                    25:a4:cf:de:2f:a6:8d:5f:f9:b1:8a:b6:cf:59:11:
                    54:f7:9f:e5:ac:58:80:ad:fe:78:53:f6:c4:58:50:
                    57:4a:ed:f7:b9:82:5e:59:bd:de:08:f5:33:39:aa:
                    79:28:fb:f9:51:3e:81:28:f9:3d:79:bb:ec:fa:fd:
                    f9:c4:1d:5b:3b:ad:f2:be:77:21:90:ef:60:e0:61:
                    d5:72:7d:c8:fe:df:82:2b:ca:49:de:fc:af:61:e2:
                    2d:c4:9a:2f:71:81:06:70:de:3f:f0:a6:15:cd:0b:
                    6a:fb:50:28:2f:03:81:e0:c3:32:c9:ad:4c:96:f1:
                    5c:9f:99:2b:7c:e4:2f:e3:8d:6c:b1:95:09:1a:8d:
                    8c:a6:88:d4:35:73:8b:57:8f:b0:4d:0c:e5:ff:7b:
                    c6:21:6a:e7:2c:9a:62:d6:26:00:ff:92:e9:22:2a:
                    c6:85:5c:b4:d5:dc:55:79:05:11:ac:67:17:ef:3f:
                    a7:d4:84:9b:b4:21:95:a8:19:74:a1:58:13:0a:6a:
                    9b:9f:9d:69:dc:5f:50:78:b5:8c:a2:e6:c1:60:6e:
                    5b:65:36:af:23:f8:14:8e:1b:33:66:cd:49:8c:a3:
                    39:46:71:33:3a:0e:a0:68:05:56:e6:93:74:e0:2b:
                    cf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:76:F7:E5:1F:FE:28:88:98:F5:59:76:97:C4:0E:FE:49:80:0D:A9
            X509v3 Authority Key Identifier:
                keyid:9C:46:45:28:F6:7B:00:41:04:67:C3:FE:DE:9E:1D:D4:04:D5:EA:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/323830363a3364343a3a2f33322d3438203d3e20323635353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:fe:10:24:93:f7:4d:10:08:e7:f1:72:57:c4:0a:73:8a:7d:
         fd:6f:38:48:d0:ba:51:fc:fd:13:17:e3:5a:c1:01:aa:70:a6:
         70:23:c1:97:55:f9:d1:a8:48:a1:f8:b7:26:96:84:6e:02:df:
         44:14:05:50:08:64:b9:1a:51:58:4e:74:99:ad:10:3b:bd:3c:
         aa:d5:e6:31:a1:42:54:52:ea:34:e6:2a:fd:c9:d0:06:4a:f8:
         4c:56:11:97:c5:19:c3:71:c0:74:2c:ba:c7:f1:50:0a:79:55:
         03:4e:bd:a5:9e:a5:04:9c:f1:c4:9e:ac:df:0f:e7:68:78:91:
         6e:f5:f8:a6:83:34:c4:6b:af:ed:9a:3c:45:52:af:6c:40:2f:
         5e:8d:a0:e1:1b:1f:f9:29:a3:ac:76:af:f8:f9:71:16:9a:34:
         c8:81:20:c9:db:24:93:45:9b:39:b9:86:00:93:6b:69:e5:a6:
         30:ed:83:f5:a1:b5:df:c2:31:8d:e5:74:cb:8e:cc:5b:9f:82:
         0a:4b:07:a4:d1:a2:26:41:70:f0:b7:f3:0b:5f:c0:63:ff:70:
         8a:a7:e9:3a:38:bc:85:19:5a:cc:d0:39:bc:47:f7:18:72:58:
         3b:1e:84:41:2d:6e:db:6e:4f:fc:cc:1f:5e:45:a8:dc:3e:7a:
         e5:7e:bf:bd
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUD5pM0AcEDOBfi1TzPyZJoVg7guQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM0NjQ1MjhGNjdCMDA0MTA0NjdDM0ZFREU5RTFERDQw
NEQ1RUE4QjAeFw0yNjAxMDYxOTIzMTRaFw0yNzAxMDUxOTI4MTRaMDMxMTAvBgNV
BAMTKDNFNzZGN0U1MUZGRTI4ODg5OEY1NTk3Njk3QzQwRUZFNDk4MDBEQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwzo0LvqR5BCr02biQyWkz94v
po1f+bGKts9ZEVT3n+WsWICt/nhT9sRYUFdK7fe5gl5Zvd4I9TM5qnko+/lRPoEo
+T15u+z6/fnEHVs7rfK+dyGQ72DgYdVyfcj+34Irykne/K9h4i3Emi9xgQZw3j/w
phXNC2r7UCgvA4HgwzLJrUyW8VyfmSt85C/jjWyxlQkajYymiNQ1c4tXj7BNDOX/
e8YhaucsmmLWJgD/kukiKsaFXLTV3FV5BRGsZxfvP6fUhJu0IZWoGXShWBMKapuf
nWncX1B4tYyi5sFgbltlNq8j+BSOGzNmzUmMozlGcTM6DqBoBVbmk3TgK8/pAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUPnb35R/+KIiY9Vl2l8QO/kmADakwHwYDVR0j
BBgwFoAUnEZFKPZ7AEEEZ8P+3p4d1ATV6oswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTkxQzFBQkI3RDdDQzc0OEUzMTA1RjdDMzc5N0RDNTc3
QjNCMzJFOEQ0ODhDRDc4NTYzQ0Y1MkRFNzZBQUU4LzAvOUM0NjQ1MjhGNjdCMDA0
MTA0NjdDM0ZFREU5RTFERDQwNEQ1RUE4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QzQ2NDUyOEY2N0IwMDQxMDQ2
N0MzRkVERTlFMURENDA0RDVFQThCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk5MUMxQUJCN0Q3Q0M3NDhFMzEwNUY3QzM3OTdEQzU3N0IzQjMyRThE
NDg4Q0Q3ODU2M0NGNTJERTc2QUFFOC8wLzMyMzgzMDM2M2EzMzY0MzQzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzUzNTM4MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgPUMA0G
CSqGSIb3DQEBCwUAA4IBAQAE/hAkk/dNEAjn8XJXxApzin39bzhI0LpR/P0TF+Na
wQGqcKZwI8GXVfnRqEih+LcmloRuAt9EFAVQCGS5GlFYTnSZrRA7vTyq1eYxoUJU
Uuo05ir9ydAGSvhMVhGXxRnDccB0LLrH8VAKeVUDTr2lnqUEnPHEnqzfD+doeJFu
9fimgzTEa6/tmjxFUq9sQC9ejaDhGx/5KaOsdq/4+XEWmjTIgSDJ2ySTRZs5uYYA
k2tp5aYw7YP1obXfwjGN5XTLjsxbn4IKSwek0aImQXDwt/MLX8Bj/3CKp+k6OLyF
GVrM0Dm8R/cYclg7HoRBLW7bbk/8zB9eRajcPnrlfr+9
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:07 2026 by rpki-client