This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5CEDF6B497008B0F7BE8C0C1B5A85D27A9CEADBA8BFA51AE366058790CD8C39/0/323830363a3364623a3a2f33322d3332203d3e20323730313338.roa
File:                     323830363a3364623a3a2f33322d3332203d3e20323730313338.roa (raw, json)
Hash identifier:          pVK3UYXlJv4eWVl7UeJegNQgtLGhwdesV+Mne2t3TYw=
Subject key identifier:   6A:BF:E4:A0:84:95:D4:DB:89:11:65:59:77:CF:64:96:D0:61:AB:D0
Certificate issuer:       /CN=9BBF0CBCC36D5CC9BC32A4A6CD28BD64B8F64B6B
Certificate serial:       73E29F873244B158B28D3004F670F410338A5ACA
Authority key identifier: 9B:BF:0C:BC:C3:6D:5C:C9:BC:32:A4:A6:CD:28:BD:64:B8:F6:4B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBF0CBCC36D5CC9BC32A4A6CD28BD64B8F64B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5CEDF6B497008B0F7BE8C0C1B5A85D27A9CEADBA8BFA51AE366058790CD8C39/0/323830363a3364623a3a2f33322d3332203d3e20323730313338.roa
Signing time:             Tue 13 Jan 2026 02:45:00 +0000
ROA not before:           Tue 13 Jan 2026 02:40:00 +0000
ROA not after:            Tue 12 Jan 2027 02:45:00 +0000
asID:                     270138
IP address blocks:        2806:3db::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5CEDF6B497008B0F7BE8C0C1B5A85D27A9CEADBA8BFA51AE366058790CD8C39/0/9BBF0CBCC36D5CC9BC32A4A6CD28BD64B8F64B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5CEDF6B497008B0F7BE8C0C1B5A85D27A9CEADBA8BFA51AE366058790CD8C39/0/9BBF0CBCC36D5CC9BC32A4A6CD28BD64B8F64B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBF0CBCC36D5CC9BC32A4A6CD28BD64B8F64B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e2:9f:87:32:44:b1:58:b2:8d:30:04:f6:70:f4:10:33:8a:5a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BBF0CBCC36D5CC9BC32A4A6CD28BD64B8F64B6B
        Validity
            Not Before: Jan 13 02:40:00 2026 GMT
            Not After : Jan 12 02:45:00 2027 GMT
        Subject: CN=6ABFE4A08495D4DB8911655977CF6496D061ABD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:23:b8:89:97:71:be:a7:22:a6:79:be:8c:
                    32:29:e7:a0:12:c4:25:ce:97:34:c0:63:04:ab:f7:
                    7d:b8:2b:97:63:35:9f:8a:64:91:50:1f:ab:60:3c:
                    a1:2a:e7:37:98:7b:0f:f6:61:a0:39:5b:04:53:58:
                    39:f3:3b:29:fa:84:dd:4b:c6:62:05:b5:85:1e:44:
                    c3:29:ca:df:d0:fc:24:5f:83:ff:38:22:83:ed:71:
                    c6:02:76:fd:00:c4:3a:0e:21:0d:c0:90:9a:c8:64:
                    74:43:d4:5c:07:01:ca:f1:37:d5:ea:d5:23:84:ce:
                    a0:07:ab:6c:25:0d:c9:20:f9:89:d3:cd:98:95:45:
                    5e:29:92:5d:9d:26:fc:e2:8a:5b:72:dc:24:f1:7d:
                    67:2e:d7:33:e7:6c:1f:a6:a3:f5:10:a6:af:31:e6:
                    cc:46:ef:2e:1f:bd:05:f3:35:92:f6:6a:8a:8f:e6:
                    6b:81:d1:48:0a:51:f4:b1:68:9b:db:c0:69:9a:1a:
                    25:67:5f:a8:8a:fd:ee:60:de:6a:3d:fc:a6:b3:58:
                    eb:f3:ac:dc:42:80:a9:e0:0b:6e:85:d5:ab:8d:b2:
                    a8:6a:13:c9:f6:56:3b:a3:dc:58:9c:c6:b9:e6:13:
                    3c:43:bc:ff:cc:b9:32:bb:65:6c:56:34:4a:dc:88:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BF:E4:A0:84:95:D4:DB:89:11:65:59:77:CF:64:96:D0:61:AB:D0
            X509v3 Authority Key Identifier:
                keyid:9B:BF:0C:BC:C3:6D:5C:C9:BC:32:A4:A6:CD:28:BD:64:B8:F6:4B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5CEDF6B497008B0F7BE8C0C1B5A85D27A9CEADBA8BFA51AE366058790CD8C39/0/9BBF0CBCC36D5CC9BC32A4A6CD28BD64B8F64B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBF0CBCC36D5CC9BC32A4A6CD28BD64B8F64B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5CEDF6B497008B0F7BE8C0C1B5A85D27A9CEADBA8BFA51AE366058790CD8C39/0/323830363a3364623a3a2f33322d3332203d3e20323730313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3db::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:11:93:2c:d8:c9:47:d9:65:25:a7:a3:8b:86:57:78:91:c7:
         ae:f0:b8:40:93:4d:fe:8e:ea:d9:d5:55:65:e1:b2:4f:b7:70:
         fd:24:d0:98:49:b8:79:44:94:d8:e1:7f:ba:da:45:30:8d:06:
         78:fe:d3:71:5c:d0:ce:df:4b:2a:0c:67:cc:47:64:46:55:2d:
         9e:0b:87:13:f7:e1:5d:f9:8c:bd:bb:9a:af:d3:fb:1b:99:cb:
         9b:49:9e:f9:c2:67:0b:f4:58:b9:00:47:64:39:d7:bd:04:d9:
         a1:d6:94:65:ac:f5:1e:94:df:f6:67:df:9c:1e:74:78:86:6f:
         44:4f:ad:df:40:73:35:25:f1:c6:74:b4:85:03:93:62:d3:8c:
         1e:22:de:e2:c5:13:41:99:fb:30:ea:a1:20:f5:36:96:4b:6a:
         f9:ba:37:91:15:a2:a8:82:58:9e:d0:33:8d:ca:3b:5c:6e:fc:
         c0:a3:20:33:a2:c0:78:79:bb:c7:d5:ae:84:f3:34:00:31:ee:
         f1:38:6c:df:24:75:3c:a7:01:e4:9b:67:74:33:d3:44:4b:5d:
         06:ac:d8:cd:94:53:7c:c5:ea:a5:2c:16:b3:1f:c7:8b:3d:6c:
         d7:05:bf:84:47:d9:3b:33:1d:8b:b4:4c:b4:b6:26:b8:24:b1:
         25:f9:dc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:02:26 2026 by rpki-client