This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/323830363a3230363a3a2f33322d3332203d3e203238333938.roa
File:                     323830363a3230363a3a2f33322d3332203d3e203238333938.roa (raw, json)
Hash identifier:          IMKxIcmz5P4IGqCWoLbn9+WG6pE/iFXsz1LBPH6sB0E=
Subject key identifier:   09:93:3B:5D:57:3B:C2:BB:74:39:DE:0E:1F:2C:24:84:DD:AE:43:18
Certificate issuer:       /CN=8190D453933A57C152D409DC05B6F96B6F662E76
Certificate serial:       632DEE233E071635F88E2C0C392169B3A111CBAD
Authority key identifier: 81:90:D4:53:93:3A:57:C1:52:D4:09:DC:05:B6:F9:6B:6F:66:2E:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/323830363a3230363a3a2f33322d3332203d3e203238333938.roa
Signing time:             Tue 06 Jan 2026 19:33:25 +0000
ROA not before:           Tue 06 Jan 2026 19:28:25 +0000
ROA not after:            Tue 05 Jan 2027 19:33:25 +0000
asID:                     28398
IP address blocks:        2806:206::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 15:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2d:ee:23:3e:07:16:35:f8:8e:2c:0c:39:21:69:b3:a1:11:cb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8190D453933A57C152D409DC05B6F96B6F662E76
        Validity
            Not Before: Jan  6 19:28:25 2026 GMT
            Not After : Jan  5 19:33:25 2027 GMT
        Subject: CN=09933B5D573BC2BB7439DE0E1F2C2484DDAE4318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:7f:26:be:1a:18:da:f9:58:c7:31:49:00:
                    30:e1:09:4b:f4:7a:d7:e1:07:ce:e9:eb:37:6d:bb:
                    15:3a:7a:a7:b9:b1:8a:0d:71:62:d3:a2:eb:eb:d5:
                    1c:93:50:34:e7:eb:f5:40:1c:46:a0:a6:14:ba:82:
                    d2:c5:27:1a:f2:9c:1b:f8:87:98:e8:8e:28:94:ed:
                    35:5b:f3:dc:84:7e:25:6e:e3:6b:3b:92:0f:b4:20:
                    1b:cb:43:b2:e0:84:f9:38:26:3f:27:3e:02:f1:e6:
                    b6:72:34:64:81:b9:fa:c8:d6:46:7d:20:03:69:8b:
                    84:6b:2b:2c:a6:bd:ef:10:19:d3:a5:50:65:61:24:
                    40:aa:d6:50:d4:2b:db:8d:76:dc:f6:07:fa:7c:ec:
                    76:e5:39:5d:28:f3:6b:27:52:3e:71:e1:b8:03:87:
                    61:06:38:6c:33:46:e5:3a:55:f1:1e:b8:d6:68:46:
                    1a:64:d5:66:d9:1d:b9:db:15:cb:fc:58:4b:01:2a:
                    9e:e7:65:52:fb:71:61:c7:0f:a1:dd:9f:ae:9c:3b:
                    1f:01:d4:41:b6:00:35:16:19:8b:c1:1d:5f:44:7e:
                    30:9a:2d:9f:06:88:5e:53:d4:ae:b7:d5:1f:66:b6:
                    5a:a4:c2:45:91:1e:99:b4:8d:46:b9:f9:68:40:0d:
                    81:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:93:3B:5D:57:3B:C2:BB:74:39:DE:0E:1F:2C:24:84:DD:AE:43:18
            X509v3 Authority Key Identifier:
                keyid:81:90:D4:53:93:3A:57:C1:52:D4:09:DC:05:B6:F9:6B:6F:66:2E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/323830363a3230363a3a2f33322d3332203d3e203238333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:206::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:99:07:b1:58:82:0e:e1:65:98:dd:04:ea:5f:45:2d:c8:8b:
         10:93:46:34:e0:ea:a4:c0:27:c9:e0:06:42:db:9d:5e:a3:4b:
         80:d3:e1:53:0c:b4:8b:93:d1:28:f1:10:96:6d:fe:66:60:38:
         b9:d6:a5:42:d6:5f:fa:f6:d9:fb:88:30:ed:86:8c:b7:1f:6a:
         91:d1:3f:d1:01:b8:2c:e0:11:2e:66:e1:71:2e:e7:98:19:1c:
         53:b9:1d:10:0d:db:c2:04:00:6e:64:82:b1:ad:82:70:cd:df:
         79:f9:d1:73:1a:8f:16:82:18:7e:9d:3b:4b:db:d5:64:bb:f5:
         1b:7b:19:1b:de:4f:40:c2:69:06:ac:72:07:2d:29:ec:b7:c4:
         11:f6:6a:40:4b:b5:53:2c:85:f1:c8:5a:77:15:b9:94:4f:e0:
         98:17:64:c1:9c:f8:38:a7:e5:1b:e7:98:b1:13:6d:b7:0e:6a:
         29:02:d6:e1:b8:02:10:70:eb:d5:6d:0e:3a:81:96:67:78:c2:
         a8:ca:39:b9:48:bb:43:3c:86:bd:27:83:e6:d9:56:71:5e:3f:
         71:92:df:28:30:eb:a3:94:96:e5:ad:2d:b6:3e:1a:03:cd:bf:
         d8:fd:49:3f:64:9d:f3:4a:1d:d9:75:5d:43:d6:fb:42:c4:f8:
         59:a5:73:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:24 2026 by rpki-client