This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/323830333a383432303a3a2f33322d3438203d3e20323730303039.roa
File:                     323830333a383432303a3a2f33322d3438203d3e20323730303039.roa (raw, json)
Hash identifier:          br0ScWOORPT5ZWH+zMvguNsQnRCp7+t+ornqwO5ODFs=
Subject key identifier:   2A:F2:4E:E1:F6:61:CD:7A:D7:E2:3C:6B:62:22:44:43:D5:D5:FB:7F
Certificate issuer:       /CN=E6A7505DAA0B511A5813C04388D52EC51B947806
Certificate serial:       6D8B9BCDEE207789274B4D456F20E59146A2CC67
Authority key identifier: E6:A7:50:5D:AA:0B:51:1A:58:13:C0:43:88:D5:2E:C5:1B:94:78:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/323830333a383432303a3a2f33322d3438203d3e20323730303039.roa
Signing time:             Tue 06 Jan 2026 19:08:53 +0000
ROA not before:           Tue 06 Jan 2026 19:03:53 +0000
ROA not after:            Tue 05 Jan 2027 19:08:53 +0000
asID:                     270009
IP address blocks:        2803:8420::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.crl
                          rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8b:9b:cd:ee:20:77:89:27:4b:4d:45:6f:20:e5:91:46:a2:cc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A7505DAA0B511A5813C04388D52EC51B947806
        Validity
            Not Before: Jan  6 19:03:53 2026 GMT
            Not After : Jan  5 19:08:53 2027 GMT
        Subject: CN=2AF24EE1F661CD7AD7E23C6B62224443D5D5FB7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:5a:52:b3:40:e9:a3:f0:72:53:d0:f6:56:
                    ac:07:fe:df:92:83:24:a5:dd:88:60:94:56:dc:6c:
                    56:0d:3c:eb:90:f7:cc:eb:49:8c:80:b6:41:7d:5b:
                    41:fc:99:0e:aa:4f:61:08:5d:46:5d:1c:4c:e4:bb:
                    0d:b0:1b:15:f9:bc:80:1c:7b:c9:0a:e7:fc:14:cd:
                    83:9d:71:13:b2:dc:47:58:1d:5b:27:f8:56:73:61:
                    24:0c:7f:c4:fc:48:96:55:f9:34:2c:f5:85:aa:22:
                    e4:b9:77:0c:7b:c4:8b:a0:d4:c8:eb:13:3e:55:f9:
                    7c:3a:52:fd:a1:9d:f6:93:72:a4:ce:cc:75:6e:41:
                    f6:1d:5b:ee:f4:28:3b:6d:b8:30:3a:91:1c:08:b5:
                    35:8c:bd:dd:e7:fa:c1:fa:3a:90:1a:4f:63:88:51:
                    54:86:f0:fd:58:d2:fb:32:5d:05:af:41:00:ba:f4:
                    ba:31:d2:5b:ff:4e:ab:cb:a3:0d:6e:e2:fc:5e:dd:
                    7e:c2:a7:5c:3a:2c:3b:47:93:2a:c5:e2:d6:98:fc:
                    ad:c4:fd:1d:d8:a2:62:e2:ad:a4:5d:8d:26:62:a4:
                    a0:79:53:7d:e0:a3:f9:78:8f:79:76:45:c3:45:47:
                    78:3f:45:6f:27:81:7c:f7:e0:41:22:52:0f:e8:ce:
                    c5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F2:4E:E1:F6:61:CD:7A:D7:E2:3C:6B:62:22:44:43:D5:D5:FB:7F
            X509v3 Authority Key Identifier:
                keyid:E6:A7:50:5D:AA:0B:51:1A:58:13:C0:43:88:D5:2E:C5:1B:94:78:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/323830333a383432303a3a2f33322d3438203d3e20323730303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8420::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:65:8d:0d:29:43:27:a1:7b:6c:ee:8f:18:90:f6:9a:23:c3:
         39:de:1c:f7:40:d0:10:43:d6:39:ab:44:2d:2f:39:aa:16:80:
         2b:44:3b:bc:39:73:2a:a1:5c:3d:85:89:9f:31:d5:a5:fb:a9:
         50:ab:c2:fc:b7:e6:b5:27:18:76:51:e4:0f:38:5e:d9:dd:24:
         89:a4:ee:a7:31:f8:fb:5b:0a:f8:e6:d4:c0:f2:2a:01:0f:57:
         0f:fc:6e:38:ea:c1:a2:55:f6:24:32:f7:56:51:84:60:3e:03:
         36:64:36:25:e3:38:30:69:f3:c3:4d:b4:c1:0c:11:8e:6c:2f:
         45:88:d3:90:bb:15:98:67:0d:f4:56:e6:29:6b:43:b7:45:7c:
         4f:6a:cf:f0:99:d1:f7:aa:22:82:5c:be:6a:e1:1d:15:1d:83:
         58:66:12:98:2a:6e:44:d7:68:1d:e2:93:56:95:32:c7:63:ef:
         ac:01:b8:de:23:13:79:d2:04:ce:39:1c:8c:7e:72:5a:e9:dc:
         1f:dd:94:11:39:2d:b9:cb:5d:22:21:d1:f6:c0:07:f8:c9:d4:
         bd:cb:59:11:77:97:73:3c:a6:74:c9:1a:e4:c5:ae:a6:2b:fe:
         9f:53:18:b5:da:0d:13:de:e8:43:92:c2:54:56:ff:b6:ee:87:
         c1:60:78:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:12:36 2026 by rpki-client