This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/323830333a383665303a3a2f33322d3333203d3e20323639393532.roa
File:                     323830333a383665303a3a2f33322d3333203d3e20323639393532.roa (raw, json)
Hash identifier:          OEZ7NvX1Dg2rpgrTluz03YO+6j5bFRJgRku8Za2GoNQ=
Subject key identifier:   95:E5:1D:0D:DE:AC:E9:4B:73:CA:17:39:8C:18:C1:92:A1:9C:AE:D4
Certificate issuer:       /CN=6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9
Certificate serial:       2EA1452DEE84B6644698AAE502FCB3BB0377226B
Authority key identifier: 6B:AA:54:6D:DB:6E:CE:50:1D:36:EC:D3:50:6D:D8:6E:A5:EA:56:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/323830333a383665303a3a2f33322d3333203d3e20323639393532.roa
Signing time:             Tue 06 Jan 2026 19:18:34 +0000
ROA not before:           Tue 06 Jan 2026 19:13:34 +0000
ROA not after:            Tue 05 Jan 2027 19:18:34 +0000
asID:                     269952
IP address blocks:        2803:86e0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 15:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a1:45:2d:ee:84:b6:64:46:98:aa:e5:02:fc:b3:bb:03:77:22:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9
        Validity
            Not Before: Jan  6 19:13:34 2026 GMT
            Not After : Jan  5 19:18:34 2027 GMT
        Subject: CN=95E51D0DDEACE94B73CA17398C18C192A19CAED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:de:b8:1b:d9:62:ec:55:46:cc:fd:bf:d7:
                    e6:ae:31:c7:64:fd:a6:25:fa:fe:4a:3d:e2:6b:ed:
                    30:2a:b4:5e:10:5f:7b:ad:ab:af:e7:3b:f7:4c:83:
                    dc:09:72:6b:3e:fd:74:c1:ba:cd:51:4f:ed:3a:15:
                    4b:32:92:3a:01:3a:07:89:53:64:5e:9a:8d:5c:9b:
                    78:a7:b2:6b:70:d0:86:ac:1c:d7:ad:e6:2d:60:3f:
                    10:a5:7a:49:42:95:82:17:72:4a:c4:bb:66:aa:9d:
                    f9:93:d7:4a:fb:b4:07:01:de:28:5d:fb:1e:b8:25:
                    0e:c4:2a:4c:98:95:da:52:73:78:ad:ff:ef:80:0c:
                    eb:bc:5c:f5:95:04:44:53:9e:5c:d4:5b:32:06:20:
                    41:30:39:dc:e9:7d:55:8c:81:77:eb:d3:a8:6b:08:
                    c0:50:21:81:ec:b0:75:a5:ca:dc:1f:e4:2d:ba:9c:
                    67:77:00:33:d6:a0:c4:7d:a6:11:d2:73:b1:de:fd:
                    1c:13:88:9b:92:a8:d5:c1:20:9f:ac:e0:28:ab:d8:
                    bf:78:ba:cc:94:9e:33:e9:b5:ad:df:e5:dd:e8:2c:
                    89:11:b2:df:20:d6:4b:5c:44:c9:cc:7a:9e:c2:84:
                    df:e8:28:43:a4:c8:12:39:0a:b6:54:1c:2e:78:9b:
                    23:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E5:1D:0D:DE:AC:E9:4B:73:CA:17:39:8C:18:C1:92:A1:9C:AE:D4
            X509v3 Authority Key Identifier:
                keyid:6B:AA:54:6D:DB:6E:CE:50:1D:36:EC:D3:50:6D:D8:6E:A5:EA:56:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/323830333a383665303a3a2f33322d3333203d3e20323639393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:86e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:f4:6d:d1:7a:52:28:bf:43:49:45:f9:c0:fc:a0:96:fa:81:
         05:28:8c:6b:e3:57:43:73:af:db:86:dd:84:bb:9b:2a:78:63:
         d6:b8:3f:bb:a1:a5:54:40:9c:79:e8:db:93:db:08:2f:e3:a1:
         ac:b3:df:3f:10:38:ff:88:6c:66:f2:57:2a:4a:58:cc:77:80:
         aa:ec:13:41:68:e2:3a:dc:61:46:6f:41:6f:f5:c0:53:40:ab:
         dc:42:a3:27:e0:8a:c0:f6:d2:71:8d:41:d8:06:76:ba:fd:69:
         96:e3:86:b4:d8:73:1d:0a:a1:94:bf:7f:7e:dd:5a:b6:29:98:
         e7:14:3d:9e:20:63:b0:f5:86:71:88:30:b3:34:4f:58:60:db:
         eb:9b:fb:96:c2:bd:71:f5:cb:73:c7:cc:0c:0d:a2:d8:c1:15:
         1f:83:ad:0b:cf:8a:49:32:35:c7:02:5a:6f:2c:b3:22:aa:c9:
         09:06:38:db:18:f7:e2:34:1c:25:f4:f6:33:b2:d0:ac:5c:8e:
         ab:6a:61:d6:7b:95:fa:c0:4c:ec:ac:f8:54:5c:85:a9:38:9a:
         3f:15:02:60:f0:02:4f:22:b0:e9:e6:b4:30:48:f6:ae:83:52:
         bd:79:0a:20:29:2b:66:ac:52:f5:aa:93:22:06:19:fe:28:5d:
         45:b7:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:32 2026 by rpki-client