This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/323830363a3331653a3a2f34322d3432203d3e203238343233.roa
File:                     323830363a3331653a3a2f34322d3432203d3e203238343233.roa (raw, json)
Hash identifier:          Vv3qaPL0gsCKp1w5bNC3bVNdBYDFSKl78m7gM3ka5sc=
Subject key identifier:   92:95:3D:78:A1:C5:21:C2:52:CA:5F:07:4F:09:96:BD:4F:9D:FE:55
Certificate issuer:       /CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
Certificate serial:       439CD26DB662060B0335CD728A41FA640ACE63E7
Authority key identifier: 6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/323830363a3331653a3a2f34322d3432203d3e203238343233.roa
Signing time:             Sun 28 Dec 2025 01:56:26 +0000
ROA not before:           Sun 28 Dec 2025 01:51:26 +0000
ROA not after:            Sun 27 Dec 2026 01:56:26 +0000
asID:                     28423
IP address blocks:        2806:31e::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 10:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9c:d2:6d:b6:62:06:0b:03:35:cd:72:8a:41:fa:64:0a:ce:63:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
        Validity
            Not Before: Dec 28 01:51:26 2025 GMT
            Not After : Dec 27 01:56:26 2026 GMT
        Subject: CN=92953D78A1C521C252CA5F074F0996BD4F9DFE55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:56:46:a9:7d:35:ae:9c:e0:bd:83:3c:ab:d9:
                    f1:fa:76:09:72:8b:ba:a8:a0:b1:09:e2:31:b1:51:
                    d2:bf:ca:52:f5:57:2d:3a:e4:dd:67:a3:41:e6:87:
                    3a:14:4d:66:56:c4:30:70:f4:46:15:79:a0:04:06:
                    a5:71:5d:f9:44:83:0a:9c:fb:7f:c5:98:7f:3b:c6:
                    f5:9c:e3:48:db:37:c4:5e:7f:c3:68:72:58:fe:f0:
                    ac:cf:e1:a7:5d:86:ce:eb:54:57:9d:c2:66:14:28:
                    15:d3:b5:68:0d:b5:e1:05:e8:7b:a8:97:16:81:ee:
                    96:79:f9:cf:81:88:e0:f7:4e:98:25:90:3b:ab:3f:
                    f3:9c:6b:40:c7:e9:41:1d:b1:95:5c:b4:a1:c6:e3:
                    98:8f:48:39:21:e7:b1:aa:6c:f2:be:46:a0:79:bb:
                    b8:9d:be:17:cd:88:fa:3d:db:6f:7a:bd:bf:73:77:
                    06:33:ef:30:b4:09:4b:ce:35:35:6f:d7:30:1f:01:
                    d3:ac:97:bb:bc:f5:51:0f:9c:95:9a:1b:d0:03:65:
                    e8:a6:51:97:25:ec:b5:69:1b:03:89:fc:a3:63:9f:
                    e6:95:48:fe:52:a8:47:66:ee:04:eb:ee:88:ba:87:
                    11:2d:16:c6:d4:c0:e6:26:25:8f:dc:57:3a:5f:37:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:95:3D:78:A1:C5:21:C2:52:CA:5F:07:4F:09:96:BD:4F:9D:FE:55
            X509v3 Authority Key Identifier:
                keyid:6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/323830363a3331653a3a2f34322d3432203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:31e::/42

    Signature Algorithm: sha256WithRSAEncryption
         0a:5c:31:72:16:71:6e:aa:c4:e8:3b:ee:fb:a7:07:87:9b:02:
         e0:74:e3:9c:2b:fe:1e:ef:1a:35:6b:ce:cc:ba:15:4d:b7:aa:
         5f:32:7c:b6:e8:e9:84:a4:d2:67:8c:0d:c8:ce:62:3a:c9:63:
         2c:5a:b2:a0:eb:60:55:a3:56:8e:52:2a:a9:98:61:9e:5b:af:
         f6:5d:3d:16:fd:c0:24:f7:4f:84:5a:47:65:5e:b4:fc:7c:2a:
         56:f4:e9:5f:af:89:13:e4:05:9d:e9:17:f6:e4:3c:98:2f:2e:
         16:87:84:ae:3b:91:3f:03:ee:99:bd:2e:de:5a:4f:a6:1d:ff:
         ad:55:f3:80:05:2e:5c:d7:2f:50:7a:6a:21:95:7c:78:37:73:
         c5:e7:df:53:05:ec:cf:33:98:9c:5c:b6:d8:af:dc:dd:d3:f9:
         50:85:b1:d9:f8:44:02:71:32:36:e3:1b:2f:fd:e5:9b:7e:bc:
         5b:7d:8b:d4:e4:00:b0:79:85:33:52:c9:2a:f1:4d:5b:38:f4:
         27:81:7a:d7:1c:85:4c:83:73:a3:a1:0d:1d:3a:0d:e8:6d:2c:
         af:ec:fc:89:27:88:22:86:da:63:1e:e6:f5:5f:aa:77:bf:8a:
         89:05:b2:1c:f3:bc:42:78:22:23:6a:31:6c:75:2a:eb:2a:cf:
         9d:8f:0c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:14:10 2026 by rpki-client