This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/323830363a3332643a3a2f33322d3438203d3e203238343331.roa
File:                     323830363a3332643a3a2f33322d3438203d3e203238343331.roa (raw, json)
Hash identifier:          3pEQNhnxiWVMH8Qy/IfObB24B24+Qy2yFxVU8AwQ1gU=
Subject key identifier:   E0:39:6C:3E:04:F5:6F:B5:7D:27:30:07:EA:3C:F8:4E:12:28:76:E6
Certificate issuer:       /CN=EB0BD38ABAB80DF9290FB741AFACC631740FA7E9
Certificate serial:       2852D60C4E62746872D980D1CC5DA674D8C76F2C
Authority key identifier: EB:0B:D3:8A:BA:B8:0D:F9:29:0F:B7:41:AF:AC:C6:31:74:0F:A7:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/323830363a3332643a3a2f33322d3438203d3e203238343331.roa
Signing time:             Tue 06 Jan 2026 19:22:28 +0000
ROA not before:           Tue 06 Jan 2026 19:17:28 +0000
ROA not after:            Tue 05 Jan 2027 19:22:28 +0000
asID:                     28431
IP address blocks:        2806:32d::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:52:d6:0c:4e:62:74:68:72:d9:80:d1:cc:5d:a6:74:d8:c7:6f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB0BD38ABAB80DF9290FB741AFACC631740FA7E9
        Validity
            Not Before: Jan  6 19:17:28 2026 GMT
            Not After : Jan  5 19:22:28 2027 GMT
        Subject: CN=E0396C3E04F56FB57D273007EA3CF84E122876E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:04:26:36:2e:33:41:26:31:59:41:d0:1c:e3:
                    84:3f:99:93:c9:15:f0:e1:d2:1e:e5:f1:de:ae:3f:
                    c5:e6:e2:db:d5:4f:28:ef:18:63:e5:6f:54:0f:9b:
                    ab:0f:01:0c:b3:5e:6a:81:5c:8c:ed:60:fa:d6:6d:
                    52:b1:6e:2f:1b:e5:5c:74:61:1d:f0:77:ee:de:82:
                    57:83:0f:85:e0:17:7f:bf:7b:6d:b0:63:79:d4:fc:
                    f7:d4:78:ee:08:1a:9e:ee:ab:67:14:6e:ba:59:c0:
                    92:00:53:06:71:d9:14:4d:10:5d:1e:11:89:dc:79:
                    fa:19:18:f4:49:1f:f4:39:bd:bf:7e:07:09:87:4f:
                    01:f2:11:f6:4d:af:bb:3d:07:32:8d:b9:35:89:7e:
                    2e:e5:20:ea:c1:3d:ca:20:c8:e0:cf:3c:bf:76:d3:
                    46:d6:b9:b8:12:0a:ad:f1:7e:6a:fa:07:bd:0f:e4:
                    4c:45:15:15:d4:b9:e1:60:22:ec:3f:d8:23:de:80:
                    9b:a6:ac:83:12:ef:2a:10:1a:a3:6b:3f:00:df:41:
                    f4:24:78:82:9b:85:7c:a7:5f:e7:6b:4e:86:48:58:
                    08:50:e9:41:13:c5:6c:8c:d3:29:85:c0:61:3d:e1:
                    12:de:44:9b:c9:59:6d:09:35:5e:99:1f:3b:89:75:
                    71:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:39:6C:3E:04:F5:6F:B5:7D:27:30:07:EA:3C:F8:4E:12:28:76:E6
            X509v3 Authority Key Identifier:
                keyid:EB:0B:D3:8A:BA:B8:0D:F9:29:0F:B7:41:AF:AC:C6:31:74:0F:A7:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/323830363a3332643a3a2f33322d3438203d3e203238343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32d::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:43:72:73:8e:23:b6:37:da:e1:c0:ce:2e:46:d3:ae:4d:4a:
         bd:74:b4:92:a7:f9:55:40:c6:db:46:a7:c2:7e:88:a2:86:fa:
         26:ee:2d:83:cb:8e:18:b2:d5:1f:d3:c6:d3:01:62:d6:e9:3f:
         72:12:94:88:3c:3a:0a:5e:0f:0b:4f:fb:7c:67:0b:88:f3:e8:
         36:19:52:36:3c:f5:eb:64:e1:42:b3:28:14:04:31:b1:9f:68:
         98:2a:9e:82:4b:eb:ae:49:ef:ff:b3:90:ca:ad:6d:09:79:02:
         5d:ef:86:52:ae:87:e6:87:91:89:bb:a1:9e:21:9c:05:8c:f0:
         53:ab:3d:87:71:d8:9f:f9:1a:4f:12:d7:82:86:a9:4e:69:12:
         37:72:e1:a0:ae:4f:c8:1f:64:dc:21:3c:f4:68:35:c5:27:a3:
         d0:2c:e1:ee:41:dd:ea:03:cf:22:3b:25:54:ca:1a:55:1e:88:
         77:e9:18:9d:21:4c:84:df:d2:c3:b9:bd:3b:c3:e6:a9:15:76:
         59:a1:87:1f:8e:e6:86:0e:84:10:8c:8a:9e:bd:70:fe:a7:cd:
         4c:ca:5d:a3:23:b3:db:2b:e7:64:0e:fe:89:6c:d3:44:24:ca:
         f1:34:6a:94:e1:82:b4:5f:f2:68:6c:47:f2:b9:bc:c4:35:29:
         3a:6b:cc:53
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUKFLWDE5idGhy2YDRzF2mdNjHbywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIwQkQzOEFCQUI4MERGOTI5MEZCNzQxQUZBQ0M2MzE3
NDBGQTdFOTAeFw0yNjAxMDYxOTE3MjhaFw0yNzAxMDUxOTIyMjhaMDMxMTAvBgNV
BAMTKEUwMzk2QzNFMDRGNTZGQjU3RDI3MzAwN0VBM0NGODRFMTIyODc2RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZBCY2LjNBJjFZQdAc44Q/mZPJ
FfDh0h7l8d6uP8Xm4tvVTyjvGGPlb1QPm6sPAQyzXmqBXIztYPrWbVKxbi8b5Vx0
YR3wd+7egleDD4XgF3+/e22wY3nU/PfUeO4IGp7uq2cUbrpZwJIAUwZx2RRNEF0e
EYncefoZGPRJH/Q5vb9+BwmHTwHyEfZNr7s9BzKNuTWJfi7lIOrBPcogyODPPL92
00bWubgSCq3xfmr6B70P5ExFFRXUueFgIuw/2CPegJumrIMS7yoQGqNrPwDfQfQk
eIKbhXynX+drToZIWAhQ6UETxWyM0ymFwGE94RLeRJvJWW0JNV6ZHzuJdXHRAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU4DlsPgT1b7V9JzAH6jz4ThIoduYwHwYDVR0j
BBgwFoAU6wvTirq4DfkpD7dBr6zGMXQPp+kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMTQ0MzUzRDVCRjc4NjdCMjZENzQ3MDNGQTZBQUI1RTlB
MjAzM0E3NTlDRDZEMzQ1RTdGODRGREU1RDNBN0IxLzAvRUIwQkQzOEFCQUI4MERG
OTI5MEZCNzQxQUZBQ0M2MzE3NDBGQTdFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQjBCRDM4QUJBQjgwREY5Mjkw
RkI3NDFBRkFDQzYzMTc0MEZBN0U5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE0NDM1M0Q1QkY3ODY3QjI2RDc0NzAzRkE2QUFCNUU5QTIwMzNBNzU5
Q0Q2RDM0NUU3Rjg0RkRFNUQzQTdCMS8wLzMyMzgzMDM2M2EzMzMyNjQzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM4MzQzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYDLTANBgkq
hkiG9w0BAQsFAAOCAQEAEENyc44jtjfa4cDOLkbTrk1KvXS0kqf5VUDG20anwn6I
oob6Ju4tg8uOGLLVH9PG0wFi1uk/chKUiDw6Cl4PC0/7fGcLiPPoNhlSNjz162Th
QrMoFAQxsZ9omCqegkvrrknv/7OQyq1tCXkCXe+GUq6H5oeRibuhniGcBYzwU6s9
h3HYn/kaTxLXgoapTmkSN3LhoK5PyB9k3CE89Gg1xSej0Czh7kHd6gPPIjslVMoa
VR6Id+kYnSFMhN/Sw7m9O8PmqRV2WaGHH47mhg6EEIyKnr1w/qfNTMpdoyOz2yvn
ZA7+iWzTRCTK8TRqlOGCtF/yaGxH8rm8xDUpOmvMUw==
-----END CERTIFICATE-----
Generated at Mon Jan 12 06:35:40 2026 by rpki-client