This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/323830363a3363343a3a2f33322d3332203d3e20323730313232.roa
File:                     323830363a3363343a3a2f33322d3332203d3e20323730313232.roa (raw, json)
Hash identifier:          S2OImiynjRZefhsdE9Q5d9H29a3r7N+/PBkH+KW2/wE=
Subject key identifier:   91:DD:79:96:2A:09:C4:25:24:A0:F7:3F:EA:F6:E7:BE:0C:DC:36:23
Certificate issuer:       /CN=FE87BC8E89919E936184D5BAC64AF9CFB437D9B6
Certificate serial:       2AB67630F1260A6C5A843C811A5DF8B9F8F3CB48
Authority key identifier: FE:87:BC:8E:89:91:9E:93:61:84:D5:BA:C6:4A:F9:CF:B4:37:D9:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/323830363a3363343a3a2f33322d3332203d3e20323730313232.roa
Signing time:             Tue 06 Jan 2026 19:38:57 +0000
ROA not before:           Tue 06 Jan 2026 19:33:57 +0000
ROA not after:            Tue 05 Jan 2027 19:38:57 +0000
asID:                     270122
IP address blocks:        2806:3c4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 05:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b6:76:30:f1:26:0a:6c:5a:84:3c:81:1a:5d:f8:b9:f8:f3:cb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE87BC8E89919E936184D5BAC64AF9CFB437D9B6
        Validity
            Not Before: Jan  6 19:33:57 2026 GMT
            Not After : Jan  5 19:38:57 2027 GMT
        Subject: CN=91DD79962A09C42524A0F73FEAF6E7BE0CDC3623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:37:e4:ae:84:9d:b6:fb:2d:5a:46:f8:ba:
                    c2:d2:7e:4d:d7:c8:b0:81:b4:62:3f:d5:d8:42:72:
                    fa:d6:d3:2c:ce:2b:46:55:35:98:d9:3b:f6:c4:ac:
                    ba:84:e0:01:7c:4a:e6:64:30:a0:ce:51:20:c2:05:
                    f8:14:d4:36:03:ba:24:2a:22:85:0e:91:3d:c3:d0:
                    81:72:db:fa:a5:2d:01:be:01:b2:e6:5e:26:2c:b4:
                    3f:18:39:b1:00:88:e5:d8:a6:87:d6:03:42:0c:43:
                    10:7d:5d:c6:e4:bb:94:ef:71:81:5e:3b:ca:2e:68:
                    a1:ee:e1:ce:a5:62:34:09:f3:6a:8d:fb:3a:d8:3e:
                    41:26:ca:7e:ba:a3:9b:13:b3:d8:1f:e2:40:8f:01:
                    2d:c6:1c:9e:af:e5:59:af:2c:10:7d:e6:23:46:44:
                    67:3b:13:3a:18:98:d7:97:06:e0:5a:72:69:a1:66:
                    cf:49:5e:b7:58:dc:0e:52:69:43:d4:b2:19:39:9f:
                    90:e2:89:7a:7f:51:09:aa:ad:6a:75:d5:19:69:d7:
                    5d:40:57:78:c3:ea:75:79:54:ed:be:33:b7:49:1c:
                    13:80:6a:e4:49:41:47:38:35:8c:3c:e1:8f:93:3a:
                    5d:be:2f:1d:c0:1d:f5:24:4e:d2:f5:35:ab:5d:c3:
                    56:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DD:79:96:2A:09:C4:25:24:A0:F7:3F:EA:F6:E7:BE:0C:DC:36:23
            X509v3 Authority Key Identifier:
                keyid:FE:87:BC:8E:89:91:9E:93:61:84:D5:BA:C6:4A:F9:CF:B4:37:D9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/323830363a3363343a3a2f33322d3332203d3e20323730313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:c2:a3:6b:64:36:1b:dc:ff:eb:0a:88:7d:6e:6b:18:00:22:
         33:33:11:b7:4f:6f:03:9c:26:a7:d6:5e:e2:3c:c5:06:e9:46:
         7c:98:c0:d4:95:f0:6d:b1:8a:f2:ae:e7:7d:88:bc:ef:3f:49:
         1f:1c:8a:cf:a8:17:65:ac:ea:6d:4a:74:17:83:8a:85:9e:c2:
         73:6a:7c:80:24:7b:6f:65:b0:c2:4a:15:04:3d:af:21:f3:b2:
         e7:d2:f1:dc:5e:81:94:8c:b6:18:24:d2:df:d4:07:61:9f:05:
         b6:2e:c2:2c:70:ac:1b:92:b7:4e:be:4e:18:47:ec:f2:9e:8b:
         e3:c4:ba:db:a9:2a:f8:bb:ec:0c:be:b6:8f:46:a8:72:de:56:
         51:d3:cb:cc:2d:75:c9:ee:f0:e5:51:04:55:25:be:7c:da:04:
         a8:b1:5b:a6:c6:da:4e:80:d4:a6:af:ca:05:d3:f1:64:75:71:
         c8:90:98:01:b6:8f:0c:b1:31:82:fa:f1:84:64:9d:8e:17:f7:
         b6:f7:40:2b:c6:08:41:52:e0:df:d6:3e:81:9a:08:02:30:58:
         54:9d:3c:3e:88:30:bb:ef:a5:2d:bb:44:9f:fb:af:b3:d3:61:
         48:ec:39:37:c4:31:0d:d0:53:d3:2a:8c:a3:03:c0:e8:2b:52:
         70:68:2c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:58:42 2026 by rpki-client