This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3830303a3a2f33372d3337203d3e203238343538.roa
File:                     323830363a3230323a3830303a3a2f33372d3337203d3e203238343538.roa (raw, json)
Hash identifier:          xwzVZ1lr2OjRXhf3S+rTS1+87DVaqI29ex+udSMflh4=
Subject key identifier:   71:13:B5:47:A0:83:61:3E:22:E6:A3:BE:DC:DD:FC:01:BD:8B:8E:DC
Certificate issuer:       /CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
Certificate serial:       6B46410CAD9406924F1C7FF27D3692D94BEDCCDC
Authority key identifier: AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3830303a3a2f33372d3337203d3e203238343538.roa
Signing time:             Tue 06 Jan 2026 20:49:46 +0000
ROA not before:           Tue 06 Jan 2026 20:44:46 +0000
ROA not after:            Tue 05 Jan 2027 20:49:46 +0000
asID:                     28458
IP address blocks:        2806:202:800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 22:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:46:41:0c:ad:94:06:92:4f:1c:7f:f2:7d:36:92:d9:4b:ed:cc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
        Validity
            Not Before: Jan  6 20:44:46 2026 GMT
            Not After : Jan  5 20:49:46 2027 GMT
        Subject: CN=7113B547A083613E22E6A3BEDCDDFC01BD8B8EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:98:22:24:11:61:d1:5e:a6:a7:27:27:d9:
                    e8:9f:fe:c0:19:2a:4b:a6:2e:60:4a:65:05:3d:76:
                    02:9c:2d:b9:5d:c2:75:aa:9d:bc:b9:e0:25:51:83:
                    22:05:63:53:35:b0:79:bf:6b:c0:cb:bd:04:8b:84:
                    30:65:c5:2b:aa:b5:85:e8:d2:4b:2b:fd:dd:ff:87:
                    6c:8e:c2:fe:ef:69:f8:55:95:d6:2f:29:d1:84:28:
                    e7:16:50:89:94:20:ca:95:53:c1:1c:08:84:7e:d8:
                    3b:0a:61:8b:fc:c6:2c:b1:50:01:a8:14:8f:62:85:
                    fc:d7:42:49:c0:a8:57:fd:a6:99:23:31:f4:fd:65:
                    20:d9:66:70:b3:45:79:c7:ca:21:c3:c7:af:09:64:
                    fc:cf:93:d3:c5:a8:14:7f:09:05:93:71:2c:6d:46:
                    de:2b:a9:cc:6a:f5:64:b6:cb:87:3c:0b:69:92:78:
                    7b:4c:ba:42:15:5a:52:8c:8a:4b:94:06:d1:af:24:
                    bf:18:8b:e0:d4:f4:a1:d9:4a:ba:bc:75:97:40:2e:
                    10:e6:6d:ad:09:28:13:69:7b:31:ab:79:cf:2e:3e:
                    d5:0a:25:fb:f7:ba:73:77:40:d5:69:5f:31:c2:52:
                    23:47:35:b7:e5:00:a4:e1:3e:5b:c9:90:fc:31:6c:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:13:B5:47:A0:83:61:3E:22:E6:A3:BE:DC:DD:FC:01:BD:8B:8E:DC
            X509v3 Authority Key Identifier:
                keyid:AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/323830363a3230323a3830303a3a2f33372d3337203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:202:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         81:55:9a:fd:5a:4c:01:1a:01:2a:90:17:33:2f:6c:1d:7e:da:
         2d:db:02:7d:d9:52:ee:61:9e:6b:ed:c8:32:d0:3a:a7:cf:e7:
         21:86:27:2b:47:c9:b8:7b:22:a0:5e:e8:18:20:8a:a5:87:a5:
         86:ae:50:07:ba:b3:7f:0e:eb:ae:35:0d:fb:9c:19:e5:10:2b:
         d1:92:2b:da:ef:9b:22:a0:1f:89:cf:ca:db:6e:8c:22:41:c7:
         c7:0f:11:f7:c7:a5:a2:90:96:a5:c8:b2:e2:57:4e:58:00:8e:
         49:99:34:7c:54:56:11:9a:3d:b9:67:66:65:a2:f5:5a:1f:07:
         4a:82:89:9d:b3:21:cc:a0:fb:ed:23:cf:d8:74:1f:ad:7e:e7:
         60:8c:bf:99:98:8a:1c:98:3d:46:ab:ef:9d:e1:d8:ac:bc:9e:
         1e:01:3e:de:a2:f9:7f:3e:cf:0d:d8:64:2e:94:0b:1d:ac:c1:
         a9:07:2b:db:ea:98:5e:14:e6:fa:e5:b8:b5:a7:07:ab:f9:38:
         52:5d:d6:fb:74:d2:b1:47:82:2e:57:a9:d6:04:2e:ef:9e:61:
         e6:9f:c9:89:42:ae:b2:c2:90:68:74:b3:8f:8d:a3:4c:1b:75:
         ac:15:4c:ce:bc:38:4e:d0:e9:53:d2:e7:57:ba:11:c5:36:08:
         bc:fb:30:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:43:57 2026 by rpki-client