This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/323830363a3231623a3a2f33322d3438203d3e203139333332.roa
File:                     323830363a3231623a3a2f33322d3438203d3e203139333332.roa (raw, json)
Hash identifier:          uOS/gLnd0KMcmZ8fHbizAlkGYBhFulq2GwXQGzxQI7E=
Subject key identifier:   CA:3A:52:9B:FA:47:C6:B3:43:7B:8F:AC:37:92:CF:55:6A:88:84:34
Certificate issuer:       /CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Certificate serial:       08D9FD54D8D808AF785BAC838BC23A8FC183D9D6
Authority key identifier: 95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/323830363a3231623a3a2f33322d3438203d3e203139333332.roa
Signing time:             Tue 06 Jan 2026 19:08:11 +0000
ROA not before:           Tue 06 Jan 2026 19:03:11 +0000
ROA not after:            Tue 05 Jan 2027 19:08:11 +0000
asID:                     19332
IP address blocks:        2806:21b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d9:fd:54:d8:d8:08:af:78:5b:ac:83:8b:c2:3a:8f:c1:83:d9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
        Validity
            Not Before: Jan  6 19:03:11 2026 GMT
            Not After : Jan  5 19:08:11 2027 GMT
        Subject: CN=CA3A529BFA47C6B3437B8FAC3792CF556A888434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:3e:9a:8b:6a:35:1a:b3:9e:31:59:49:2b:
                    2c:45:cf:41:15:64:93:b8:71:66:44:a3:46:34:4c:
                    10:84:23:97:62:34:8b:3a:a1:de:01:ec:ff:fa:8e:
                    8f:dd:4a:26:7f:c2:0f:70:50:ea:42:75:95:86:21:
                    65:82:e0:a9:11:08:c3:65:bf:3b:a9:47:58:b1:7d:
                    99:bb:81:51:56:13:26:50:f8:31:f6:3d:b6:99:b2:
                    f3:68:62:a5:55:0f:10:3c:9f:53:62:07:6d:ec:79:
                    71:bf:e9:b9:01:b3:86:60:03:07:82:22:e4:f2:ef:
                    0c:2f:4e:31:9e:dd:1c:a1:fb:c9:86:33:44:af:17:
                    12:29:ee:df:23:f2:d4:e2:90:5f:dc:67:6c:6f:82:
                    ae:f3:53:fd:fd:cd:4c:eb:6d:bf:b2:af:8e:cc:d6:
                    d7:94:3a:d2:9a:0f:6e:fe:fb:90:c8:4d:2c:ea:89:
                    12:9f:28:a0:61:ad:e9:3e:fb:5c:7a:a1:3e:3e:74:
                    b1:0d:97:17:85:a6:a5:39:0c:60:22:9f:fc:35:1f:
                    bd:35:ad:03:b8:0a:6c:0f:65:95:35:62:59:20:e5:
                    66:4f:98:6d:fb:e6:3e:14:37:d1:b7:2c:b9:8b:64:
                    2d:d4:61:eb:c9:71:8d:9f:0e:e9:5d:0c:df:f8:ff:
                    d9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3A:52:9B:FA:47:C6:B3:43:7B:8F:AC:37:92:CF:55:6A:88:84:34
            X509v3 Authority Key Identifier:
                keyid:95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/323830363a3231623a3a2f33322d3438203d3e203139333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:21b::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:f7:d1:62:99:43:ab:27:64:33:a4:c4:f9:24:7c:37:5d:c8:
         b6:32:81:ac:8d:da:bc:e9:41:16:56:fd:fd:b2:18:3a:93:82:
         12:25:43:c1:dd:94:1e:74:77:2e:7b:37:1c:e1:73:16:d8:59:
         ea:38:58:a4:fd:07:57:c6:67:36:d0:25:33:18:00:76:3f:97:
         9f:e1:03:81:0c:a8:9c:23:ac:c8:a1:97:39:68:9f:52:f0:3f:
         34:f5:65:54:5a:89:78:9a:8f:8f:23:fe:79:bc:dc:b0:8a:1e:
         79:41:c8:ed:50:d9:a3:c8:05:6e:ff:fb:0a:dc:34:83:46:ec:
         4d:b1:0b:75:ed:03:c7:ca:47:1e:49:83:fa:04:cf:ca:37:e1:
         5b:b0:8c:23:1f:2d:15:40:e4:84:63:16:fe:1e:15:78:16:46:
         f6:47:77:f4:01:11:09:25:d4:bb:b1:00:fe:73:d4:26:83:8b:
         38:27:f8:41:3f:36:a3:d9:7a:fe:97:ef:f3:f6:7d:dc:ea:92:
         8e:aa:f4:09:d7:8b:79:6c:5a:eb:49:04:56:9e:ac:59:0e:34:
         e0:11:69:55:24:01:f9:08:6b:d2:ae:75:82:a8:48:86:7f:09:
         4b:e4:c5:7a:29:11:a5:29:73:0c:82:39:1a:0f:53:02:74:e3:
         da:7f:2a:24
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUCNn9VNjYCK94W6yDi8I6j8GD2dYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU1REI0NkM0RUZBRUE3NjA1NjEzNzZDOUE1RjM1ODcz
QjlGMTU2NzAeFw0yNjAxMDYxOTAzMTFaFw0yNzAxMDUxOTA4MTFaMDMxMTAvBgNV
BAMTKENBM0E1MjlCRkE0N0M2QjM0MzdCOEZBQzM3OTJDRjU1NkE4ODg0MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRz6ai2o1GrOeMVlJKyxFz0EV
ZJO4cWZEo0Y0TBCEI5diNIs6od4B7P/6jo/dSiZ/wg9wUOpCdZWGIWWC4KkRCMNl
vzupR1ixfZm7gVFWEyZQ+DH2PbaZsvNoYqVVDxA8n1NiB23seXG/6bkBs4ZgAweC
IuTy7wwvTjGe3Ryh+8mGM0SvFxIp7t8j8tTikF/cZ2xvgq7zU/39zUzrbb+yr47M
1teUOtKaD27++5DITSzqiRKfKKBhrek++1x6oT4+dLENlxeFpqU5DGAin/w1H701
rQO4CmwPZZU1Ylkg5WZPmG375j4UN9G3LLmLZC3UYevJcY2fDuldDN/4/9khAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUyjpSm/pHxrNDe4+sN5LPVWqIhDQwHwYDVR0j
BBgwFoAUlV20bE766nYFYTdsml81hzufFWcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOEJEMzE2RjdBNzAwMjJCMERCNUM1NUExMDc3MUIwMjZC
QTBCODVBNkIzNjg5NTMxQzMyN0NENTk2RDYwNkY1LzAvOTU1REI0NkM0RUZBRUE3
NjA1NjEzNzZDOUE1RjM1ODczQjlGMTU2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NTVEQjQ2QzRFRkFFQTc2MDU2
MTM3NkM5QTVGMzU4NzNCOUYxNTY3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQThCRDMxNkY3QTcwMDIyQjBEQjVDNTVBMTA3NzFCMDI2QkEwQjg1QTZC
MzY4OTUzMUMzMjdDRDU5NkQ2MDZGNS8wLzMyMzgzMDM2M2EzMjMxNjIzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMTM5MzMzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYCGzANBgkq
hkiG9w0BAQsFAAOCAQEAmffRYplDqydkM6TE+SR8N13ItjKBrI3avOlBFlb9/bIY
OpOCEiVDwd2UHnR3Lns3HOFzFthZ6jhYpP0HV8ZnNtAlMxgAdj+Xn+EDgQyonCOs
yKGXOWifUvA/NPVlVFqJeJqPjyP+ebzcsIoeeUHI7VDZo8gFbv/7Ctw0g0bsTbEL
de0Dx8pHHkmD+gTPyjfhW7CMIx8tFUDkhGMW/h4VeBZG9kd39AERCSXUu7EA/nPU
JoOLOCf4QT82o9l6/pfv8/Z93OqSjqr0CdeLeWxa60kEVp6sWQ404BFpVSQB+Qhr
0q51gqhIhn8JS+TFeikRpSlzDII5Gg9TAnTj2n8qJA==
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:49:30 2026 by rpki-client