This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/323830333a366634303a3a2f33322d3333203d3e20323635363431.roa
File:                     323830333a366634303a3a2f33322d3333203d3e20323635363431.roa (raw, json)
Hash identifier:          5TiFwlAgMYJciScUxNYBwXhshdLXY4bi4Bc3f492Etk=
Subject key identifier:   58:E0:E4:FE:BC:06:7C:B6:A9:89:23:55:C3:A9:29:AD:2E:3F:13:9B
Certificate issuer:       /CN=34B60C1D393D1C566AD654F41E7ED9865CCE3029
Certificate serial:       4C9AA96F567D3220AE8A0D5562BDBE7CB5D109C7
Authority key identifier: 34:B6:0C:1D:39:3D:1C:56:6A:D6:54:F4:1E:7E:D9:86:5C:CE:30:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/323830333a366634303a3a2f33322d3333203d3e20323635363431.roa
Signing time:             Tue 06 Jan 2026 19:06:41 +0000
ROA not before:           Tue 06 Jan 2026 19:01:41 +0000
ROA not after:            Tue 05 Jan 2027 19:06:41 +0000
asID:                     265641
IP address blocks:        2803:6f40::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 18:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9a:a9:6f:56:7d:32:20:ae:8a:0d:55:62:bd:be:7c:b5:d1:09:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B60C1D393D1C566AD654F41E7ED9865CCE3029
        Validity
            Not Before: Jan  6 19:01:41 2026 GMT
            Not After : Jan  5 19:06:41 2027 GMT
        Subject: CN=58E0E4FEBC067CB6A9892355C3A929AD2E3F139B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:b1:c9:08:0b:5f:4a:f5:07:54:51:f3:d6:
                    70:80:15:38:f3:f7:16:59:74:48:5d:d5:3d:70:46:
                    16:f8:2d:98:be:9a:ab:95:da:ef:14:38:53:bf:0c:
                    ac:1e:09:5a:e4:ef:35:28:ff:05:6d:ed:d7:cf:30:
                    5e:ce:84:92:fe:d3:18:a2:31:27:0b:54:40:ab:b1:
                    f2:f4:78:36:80:4e:f9:a3:7a:a2:c9:19:e8:a2:dd:
                    95:82:f8:b9:42:c2:b4:48:66:f9:7a:35:07:a0:b9:
                    0d:1f:c1:54:b4:de:a4:e7:69:1e:8e:69:ac:16:80:
                    5c:ff:6d:2d:81:8b:1b:d9:39:8a:72:63:5c:4a:26:
                    0c:69:fa:32:98:3b:ea:4b:b3:d7:6a:60:87:c5:07:
                    40:5a:3c:5e:74:1b:2f:7b:a3:38:55:53:87:25:5c:
                    ec:9c:52:f4:01:db:e0:b1:d4:5d:04:d8:e8:00:f8:
                    88:ba:ac:ce:78:11:c2:64:dd:63:52:8e:ec:2e:99:
                    e8:2a:4b:dd:63:6d:da:60:34:14:2b:14:63:0e:5e:
                    b9:19:5b:3f:3e:af:79:56:05:49:19:48:4d:c5:9d:
                    42:2b:62:41:8d:05:a1:57:1c:81:fa:2e:64:89:b0:
                    62:09:4a:27:8f:71:33:d2:68:47:45:c7:18:5f:29:
                    44:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E0:E4:FE:BC:06:7C:B6:A9:89:23:55:C3:A9:29:AD:2E:3F:13:9B
            X509v3 Authority Key Identifier:
                keyid:34:B6:0C:1D:39:3D:1C:56:6A:D6:54:F4:1E:7E:D9:86:5C:CE:30:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/323830333a366634303a3a2f33322d3333203d3e20323635363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:e0:e5:a0:87:0e:82:ac:be:ed:c4:fc:42:7b:3b:34:3c:d9:
         76:5b:37:84:16:93:9c:03:e0:14:6a:c2:ac:15:93:fa:9e:87:
         ef:33:6a:7f:cc:aa:51:fd:91:be:9d:83:ef:32:21:80:8c:a9:
         82:9e:f3:78:03:7a:13:59:c6:c7:ca:80:e8:03:c8:18:b9:da:
         5a:b4:a6:d5:bd:8f:70:d7:1a:9f:ea:9c:5e:e0:23:61:e0:58:
         de:fa:53:48:b4:74:2d:4d:1b:4a:cc:fb:e2:1e:41:61:d8:2a:
         e6:74:00:bc:22:59:10:22:7b:1f:80:3c:4e:f7:f4:7e:ca:8e:
         87:2b:8e:45:a7:c5:07:85:7c:21:61:61:78:91:7c:77:fa:a6:
         37:90:9c:ad:e0:b7:43:d4:59:95:e0:ed:87:69:f9:ba:89:ac:
         8a:0a:0a:99:b5:1a:81:16:9f:09:09:e7:e6:b7:f0:15:51:a8:
         92:ff:30:d0:23:2e:a0:2b:32:41:17:b2:ec:e3:8a:ac:79:14:
         f0:3d:9c:a3:a9:71:e5:db:0b:6f:e3:c1:fa:58:01:6d:28:3a:
         79:ea:f2:3b:88:c7:71:65:28:02:af:e3:be:91:de:af:a4:d9:
         e6:c6:3b:0e:dc:ea:e1:35:a3:0a:d0:ba:b3:6c:d0:f3:6b:dc:
         39:36:71:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:36:13 2026 by rpki-client