This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/323830363a3363623a3a2f33322d3332203d3e203238343430.roa
File:                     323830363a3363623a3a2f33322d3332203d3e203238343430.roa (raw, json)
Hash identifier:          tzEKyrD97MAQbJyarqhBcmk2zbFen9prADqQzX1oUtA=
Subject key identifier:   5E:DF:19:ED:CF:46:37:B4:05:EB:94:EF:DD:9C:2A:A6:6E:29:97:38
Certificate issuer:       /CN=6D10FFF67A506ABC4FE62222995FF6E44B2C1D37
Certificate serial:       62B0BE6BD86DF214CD74E746777777B6130136F3
Authority key identifier: 6D:10:FF:F6:7A:50:6A:BC:4F:E6:22:22:99:5F:F6:E4:4B:2C:1D:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/323830363a3363623a3a2f33322d3332203d3e203238343430.roa
Signing time:             Tue 06 Jan 2026 20:51:55 +0000
ROA not before:           Tue 06 Jan 2026 20:46:55 +0000
ROA not after:            Tue 05 Jan 2027 20:51:55 +0000
asID:                     28440
IP address blocks:        2806:3cb::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b0:be:6b:d8:6d:f2:14:cd:74:e7:46:77:77:77:b6:13:01:36:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D10FFF67A506ABC4FE62222995FF6E44B2C1D37
        Validity
            Not Before: Jan  6 20:46:55 2026 GMT
            Not After : Jan  5 20:51:55 2027 GMT
        Subject: CN=5EDF19EDCF4637B405EB94EFDD9C2AA66E299738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ae:fb:b5:e2:83:0d:c7:14:63:28:62:e5:cd:
                    85:10:c0:de:a1:58:92:2d:57:7c:56:ea:97:11:50:
                    3c:56:95:77:da:d5:e9:19:f6:d5:6b:6e:53:f0:ce:
                    24:9a:89:06:68:52:9d:17:90:e4:97:7a:2c:62:a6:
                    03:48:cf:fc:92:18:8e:32:16:2e:68:a0:1a:d4:ab:
                    c9:71:be:fb:7f:f2:68:df:99:0a:b2:ec:c3:0a:45:
                    95:08:a0:b4:1a:81:4f:0d:3a:ab:b6:93:4b:b9:69:
                    1c:56:ee:eb:ce:e4:35:c5:38:d7:83:94:5e:01:38:
                    1a:a6:25:bd:71:72:7b:40:ed:48:09:87:4c:fb:b6:
                    63:24:ad:7a:60:82:62:28:d9:60:d5:23:5a:01:da:
                    84:a8:01:7f:9f:b1:74:ca:47:1e:9e:d5:c2:a3:3a:
                    c0:fc:63:cf:de:18:96:6e:98:47:46:e0:30:3b:2d:
                    8d:31:af:b7:49:ef:ca:e5:1c:3a:9e:c0:ba:72:ae:
                    68:7d:6c:85:c3:9f:0a:91:80:ff:5d:50:91:fb:78:
                    68:d8:28:96:1f:6e:f9:27:c1:b7:1e:c9:f0:51:f5:
                    81:fe:80:b1:30:b4:14:24:c2:19:7b:ca:0a:6f:96:
                    bd:b2:8b:a5:19:fc:79:2e:68:49:da:89:4d:76:45:
                    4b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DF:19:ED:CF:46:37:B4:05:EB:94:EF:DD:9C:2A:A6:6E:29:97:38
            X509v3 Authority Key Identifier:
                keyid:6D:10:FF:F6:7A:50:6A:BC:4F:E6:22:22:99:5F:F6:E4:4B:2C:1D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/323830363a3363623a3a2f33322d3332203d3e203238343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3cb::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:56:b9:cc:69:5f:b5:30:39:fb:a0:8c:60:4e:1d:30:33:40:
         0d:73:9b:81:20:75:02:ee:78:9f:97:57:d7:21:f9:ab:33:a1:
         fc:00:b1:11:ed:ca:45:0c:bc:ab:8e:4c:c9:b0:85:c7:1d:3a:
         30:10:d5:28:0e:46:66:da:94:fc:94:0a:28:6e:06:cb:06:af:
         a4:1f:35:e6:0b:5c:41:e4:41:8a:4a:6b:25:13:61:8b:fe:af:
         c6:4c:37:32:b6:39:b3:c9:5c:d4:a6:6e:6a:88:55:80:19:20:
         5c:4f:90:2c:7a:d9:02:dc:af:eb:c8:ed:17:3c:10:c8:51:15:
         e7:97:86:cb:71:a7:af:ef:78:39:b6:89:12:a7:8b:80:73:23:
         4a:40:8d:90:bc:3f:b4:79:9e:f4:2b:e8:b2:87:dd:d5:e0:98:
         6f:fe:f4:9c:6f:c3:00:eb:b8:b8:3a:22:04:e5:81:d2:d7:73:
         83:68:51:b3:53:1c:37:08:92:e3:dc:2b:62:26:91:98:5f:2c:
         fe:25:17:d3:ec:52:69:66:a1:f0:3f:3f:6a:45:01:1b:3f:48:
         56:70:a7:d1:2d:02:43:c8:54:e2:6a:1a:4d:83:79:c5:61:24:
         81:2c:78:06:b3:c1:d9:45:63:2d:4c:f1:9e:98:31:4e:6b:68:
         f0:1b:3e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:57:46 2026 by rpki-client