This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/323830363a3231663a3a2f33322d3332203d3e20323635353034.roa
File:                     323830363a3231663a3a2f33322d3332203d3e20323635353034.roa (raw, json)
Hash identifier:          Kx01TirIHZjEaGCvcWgGZ+lzhgVb0uwQ+VHfFB2qfrE=
Subject key identifier:   C6:17:9A:A0:B3:DB:B5:B7:0A:8F:B9:1C:3A:04:17:C6:D7:6F:A5:63
Certificate issuer:       /CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
Certificate serial:       34570AA736876A2C1BC3F91F37922E236363575F
Authority key identifier: 1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/323830363a3231663a3a2f33322d3332203d3e20323635353034.roa
Signing time:             Tue 06 Jan 2026 19:22:40 +0000
ROA not before:           Tue 06 Jan 2026 19:17:40 +0000
ROA not after:            Tue 05 Jan 2027 19:22:40 +0000
asID:                     265504
IP address blocks:        2806:21f::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl
                          rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:57:0a:a7:36:87:6a:2c:1b:c3:f9:1f:37:92:2e:23:63:63:57:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
        Validity
            Not Before: Jan  6 19:17:40 2026 GMT
            Not After : Jan  5 19:22:40 2027 GMT
        Subject: CN=C6179AA0B3DBB5B70A8FB91C3A0417C6D76FA563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:1b:0d:2d:ba:77:78:23:24:65:ea:1b:0e:
                    cd:66:4e:b9:02:75:84:24:2a:d3:27:d1:e0:50:6d:
                    49:0e:e0:e9:85:eb:57:e6:2f:7b:3d:ec:29:23:ce:
                    87:b7:ee:25:7e:ee:4e:14:ed:27:b4:bd:d2:20:a2:
                    33:4d:84:d7:7d:e8:74:ea:3e:91:ca:82:48:5a:5d:
                    ed:0a:48:45:b1:a7:38:9e:22:79:b4:3a:3f:b6:91:
                    a4:e4:12:5d:37:c4:19:df:b4:a5:40:6d:4b:31:7d:
                    cb:73:13:27:74:b4:60:5a:9d:a1:be:6f:74:9b:b4:
                    c9:6c:4c:4d:ec:bf:b7:4f:a1:c7:cb:23:4b:c1:ff:
                    b8:ad:f5:24:98:56:c9:68:5a:0d:ed:ae:24:d2:f4:
                    00:6b:2a:90:16:c3:76:4d:4c:aa:ab:4c:77:f4:93:
                    62:ee:5a:91:b2:23:99:58:a1:a5:f5:7f:04:14:65:
                    7e:9b:8b:d4:fe:04:79:f3:5c:48:5e:d9:b3:b0:46:
                    45:5e:2e:8f:8e:83:b5:c6:30:07:dc:09:48:d2:24:
                    85:f2:da:3e:70:4e:41:3d:e5:eb:3a:4f:e6:2d:bd:
                    ed:3e:8f:4b:27:bd:d3:90:7b:90:a3:5b:8d:5e:22:
                    4e:a0:a3:bd:fc:d6:d6:6c:18:71:1c:87:41:b1:71:
                    6d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:17:9A:A0:B3:DB:B5:B7:0A:8F:B9:1C:3A:04:17:C6:D7:6F:A5:63
            X509v3 Authority Key Identifier:
                keyid:1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/323830363a3231663a3a2f33322d3332203d3e20323635353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:21f::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:2f:31:8d:2f:7b:87:10:01:bc:c9:5c:96:d3:eb:1f:2a:f1:
         ba:73:be:c4:23:3f:c5:77:3b:6a:7a:76:c9:74:42:ce:89:26:
         15:61:45:ed:8b:9c:82:a3:90:8e:cd:b9:3b:b1:9e:fd:05:10:
         18:ef:c4:32:a8:27:27:73:ce:99:1e:89:5c:d2:7b:41:87:ff:
         1f:a2:9c:b4:09:05:45:b7:01:73:7f:1d:ad:78:ad:6c:07:dc:
         4e:e7:40:96:c7:b3:23:c7:6d:cc:50:33:a5:91:7a:51:41:f9:
         ce:ff:6c:39:b3:cc:b7:0b:3c:43:aa:99:5b:86:8e:2d:01:69:
         de:8e:96:5b:86:62:24:28:6e:f0:d6:f7:34:4a:bf:33:f1:64:
         e4:f0:23:3e:40:4d:8e:7f:dd:05:38:16:02:d0:a2:9f:46:f7:
         0f:da:91:c2:50:12:e1:cd:56:e9:8c:63:cb:7e:e4:49:be:e3:
         5d:14:f8:19:7b:88:bc:70:e0:15:8d:48:79:21:ed:64:d1:28:
         6c:24:53:14:a1:03:d9:df:17:ca:5c:7e:03:a5:ef:95:c9:c5:
         58:51:9c:cc:37:b3:fd:94:f4:8f:b3:a3:10:51:31:3b:bf:83:
         5c:40:eb:40:db:62:4c:e6:d4:a4:ca:fb:20:d7:db:76:98:67:
         4b:0f:d5:32
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUNFcKpzaHaiwbw/kfN5IuI2NjV18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ2MDA0MEVERTA2NkNCMEE1M0U4QUY0NDNGMEQ4NURB
ODlEN0Y2ODAeFw0yNjAxMDYxOTE3NDBaFw0yNzAxMDUxOTIyNDBaMDMxMTAvBgNV
BAMTKEM2MTc5QUEwQjNEQkI1QjcwQThGQjkxQzNBMDQxN0M2RDc2RkE1NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aBsNLbp3eCMkZeobDs1mTrkC
dYQkKtMn0eBQbUkO4OmF61fmL3s97Ckjzoe37iV+7k4U7Se0vdIgojNNhNd96HTq
PpHKgkhaXe0KSEWxpzieInm0Oj+2kaTkEl03xBnftKVAbUsxfctzEyd0tGBanaG+
b3SbtMlsTE3sv7dPocfLI0vB/7it9SSYVsloWg3triTS9ABrKpAWw3ZNTKqrTHf0
k2LuWpGyI5lYoaX1fwQUZX6bi9T+BHnzXEhe2bOwRkVeLo+Og7XGMAfcCUjSJIXy
2j5wTkE95es6T+Ytve0+j0snvdOQe5CjW41eIk6go7381tZsGHEch0GxcW1ZAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUxheaoLPbtbcKj7kcOgQXxtdvpWMwHwYDVR0j
BBgwFoAUHWAEDt4GbLClPor0Q/DYXaidf2gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTY0OTdFRjI5OTIyNzI3NEMyMDYzQkQ5NzJEQjk3Q0Iy
NDFFQUMwQUE2MjkzMkM5RTc3MkI5RDQ1MUM3NzhDLzAvMUQ2MDA0MEVERTA2NkNC
MEE1M0U4QUY0NDNGMEQ4NURBODlEN0Y2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDYwMDQwRURFMDY2Q0IwQTUz
RThBRjQ0M0YwRDg1REE4OUQ3RjY4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDk2NDk3RUYyOTkyMjcyNzRDMjA2M0JEOTcyREI5N0NCMjQxRUFDMEFB
NjI5MzJDOUU3NzJCOUQ0NTFDNzc4Qy8wLzMyMzgzMDM2M2EzMjMxNjYzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzUzNTMwMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgIfMA0G
CSqGSIb3DQEBCwUAA4IBAQB8LzGNL3uHEAG8yVyW0+sfKvG6c77EIz/FdztqenbJ
dELOiSYVYUXti5yCo5COzbk7sZ79BRAY78QyqCcnc86ZHolc0ntBh/8fopy0CQVF
twFzfx2teK1sB9xO50CWx7Mjx23MUDOlkXpRQfnO/2w5s8y3CzxDqplbho4tAWne
jpZbhmIkKG7w1vc0Sr8z8WTk8CM+QE2Of90FOBYC0KKfRvcP2pHCUBLhzVbpjGPL
fuRJvuNdFPgZe4i8cOAVjUh5Ie1k0ShsJFMUoQPZ3xfKXH4Dpe+VycVYUZzMN7P9
lPSPs6MQUTE7v4NcQOtA22JM5tSkyvsg19t2mGdLD9Uy
-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:09 2026 by rpki-client