This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/323830363a3230303a3a2f33322d3634203d3e2037343338.roa
File:                     323830363a3230303a3a2f33322d3634203d3e2037343338.roa (raw, json)
Hash identifier:          SQJ22h++uiGYaC0PEaoC6xcaIt7/iReDwM1AdbA+IO4=
Subject key identifier:   0B:C0:5E:69:98:FB:B1:F7:F7:E9:C8:60:80:70:19:6B:1A:68:E7:38
Certificate issuer:       /CN=C2B40785E3A240A257500C1EAC949A26103A8210
Certificate serial:       0160DEFFBE0C807F02AF232B285D9A2A254197BB
Authority key identifier: C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/323830363a3230303a3a2f33322d3634203d3e2037343338.roa
Signing time:             Tue 06 Jan 2026 20:56:34 +0000
ROA not before:           Tue 06 Jan 2026 20:51:34 +0000
ROA not after:            Tue 05 Jan 2027 20:56:34 +0000
asID:                     7438
IP address blocks:        2806:200::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:60:de:ff:be:0c:80:7f:02:af:23:2b:28:5d:9a:2a:25:41:97:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B40785E3A240A257500C1EAC949A26103A8210
        Validity
            Not Before: Jan  6 20:51:34 2026 GMT
            Not After : Jan  5 20:56:34 2027 GMT
        Subject: CN=0BC05E6998FBB1F7F7E9C8608070196B1A68E738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e4:5d:c0:2a:6b:99:5e:4b:17:e3:e8:b8:f4:
                    a6:db:93:df:81:d5:94:4a:85:d1:87:cb:34:77:c0:
                    91:99:27:3e:3e:46:84:c6:96:e1:9c:50:12:27:de:
                    75:4c:ab:2b:e6:db:13:b6:33:ad:da:f3:4e:14:c5:
                    d4:86:dc:ee:b3:d7:56:63:b7:68:df:96:81:72:6a:
                    41:28:71:52:aa:68:a3:4c:27:28:57:e8:88:30:3d:
                    e3:9a:34:1e:cd:5f:85:86:ec:ec:ba:3a:aa:cd:21:
                    73:5b:86:da:0d:72:5d:99:63:36:ac:e8:ce:e3:9c:
                    45:a0:16:c0:60:43:aa:39:53:d0:3c:78:b2:91:93:
                    77:4b:5d:67:3f:08:61:73:a0:04:af:b4:d5:34:ca:
                    31:d0:e1:e2:db:69:e8:44:10:46:90:2b:e6:66:1f:
                    ae:fa:dc:3e:0b:ab:66:fc:fd:f5:80:a6:59:1d:ca:
                    69:d9:de:ca:a6:3b:16:a4:e8:12:ce:9b:40:a0:bd:
                    f5:57:39:23:19:88:55:a1:a6:38:df:5c:a0:a4:42:
                    8e:c3:a5:93:18:f2:12:c0:08:6e:0c:1f:d8:37:20:
                    72:3b:44:2d:2e:40:b2:dc:06:1e:0b:9a:ac:db:71:
                    b4:63:81:7a:21:9b:1f:76:f9:17:a8:27:3d:57:a0:
                    12:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C0:5E:69:98:FB:B1:F7:F7:E9:C8:60:80:70:19:6B:1A:68:E7:38
            X509v3 Authority Key Identifier:
                keyid:C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/323830363a3230303a3a2f33322d3634203d3e2037343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:200::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:01:8d:e4:70:f7:e5:20:d4:3d:bf:15:53:5f:af:ef:ae:d7:
         d4:df:09:6e:2a:2a:06:2f:a9:be:64:9c:93:9b:08:f8:f3:35:
         a5:39:27:7b:bc:e7:d9:b5:40:f8:29:bf:17:01:bc:46:5c:6e:
         9f:08:53:63:01:49:84:5f:6f:fb:29:a0:3f:24:4a:13:00:9e:
         3b:8a:96:e8:9f:e2:04:55:d1:49:78:a4:22:e1:38:a6:02:c9:
         90:3f:c9:38:61:d3:0e:dc:75:74:4e:e2:91:5f:71:dd:01:27:
         e6:ee:23:7a:8e:58:15:d4:49:f9:83:43:b3:71:64:76:8e:3f:
         13:62:55:f1:30:44:79:76:aa:3b:7d:90:ad:3d:08:69:03:8b:
         97:c5:cc:6b:e3:81:e0:b1:fb:7b:90:3e:40:cb:be:60:d0:ab:
         50:2f:ec:43:27:bc:fa:35:a6:f0:c6:9c:a3:88:69:47:d3:da:
         54:e2:ec:23:4e:7d:54:d1:d9:2b:00:ab:c9:5d:2b:f0:87:4d:
         d6:9b:a5:7a:ce:01:e6:ae:ec:ef:5a:b7:db:41:32:94:39:32:
         e6:3d:98:b4:e1:56:c3:7f:85:91:84:11:bf:d3:2c:c6:8c:d3:
         12:8f:fd:e9:77:bf:60:59:8f:fd:3a:c0:1a:16:13:66:41:0c:
         37:c4:36:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:38:17 2026 by rpki-client