This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/323830333a633739303a3a2f34322d3432203d3e20323639383332.roa
File:                     323830333a633739303a3a2f34322d3432203d3e20323639383332.roa (raw, json)
Hash identifier:          kv8IRUClRvgfweIgBwGf5TTmZ43bTBQgAxh9XkHZlak=
Subject key identifier:   24:97:6E:C2:AF:2D:91:62:C3:2B:49:BC:93:63:5B:2E:23:23:A9:1F
Certificate issuer:       /CN=391C80297A8923C97C067A3FD078178E6934E57D
Certificate serial:       1EEC739649CB4791D34279982362F3978E4AFA41
Authority key identifier: 39:1C:80:29:7A:89:23:C9:7C:06:7A:3F:D0:78:17:8E:69:34:E5:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/391C80297A8923C97C067A3FD078178E6934E57D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/323830333a633739303a3a2f34322d3432203d3e20323639383332.roa
Signing time:             Tue 06 Jan 2026 19:06:32 +0000
ROA not before:           Tue 06 Jan 2026 19:01:32 +0000
ROA not after:            Tue 05 Jan 2027 19:06:32 +0000
asID:                     269832
IP address blocks:        2803:c790::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/391C80297A8923C97C067A3FD078178E6934E57D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/391C80297A8923C97C067A3FD078178E6934E57D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/391C80297A8923C97C067A3FD078178E6934E57D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ec:73:96:49:cb:47:91:d3:42:79:98:23:62:f3:97:8e:4a:fa:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391C80297A8923C97C067A3FD078178E6934E57D
        Validity
            Not Before: Jan  6 19:01:32 2026 GMT
            Not After : Jan  5 19:06:32 2027 GMT
        Subject: CN=24976EC2AF2D9162C32B49BC93635B2E2323A91F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:ea:79:35:8a:8a:ad:3a:0d:0c:44:8f:cf:
                    9b:0a:b4:d7:5d:6e:27:55:b3:f1:5d:71:40:f6:f3:
                    ba:a5:84:68:2f:8b:65:3a:db:b4:06:3c:54:8a:59:
                    c9:48:f4:01:5b:82:75:a7:9d:d7:ad:12:52:0e:09:
                    f1:d3:0a:f7:91:a3:87:f0:93:0c:c1:6f:7c:c6:69:
                    09:28:fd:73:b1:2f:0d:22:56:04:84:02:1b:b5:d7:
                    67:fd:61:90:57:23:79:2b:4d:0b:52:54:4f:c2:4a:
                    6e:b0:1f:90:cb:d2:3e:e7:b6:90:33:8f:4e:ee:6c:
                    3f:d0:7b:e2:fc:1a:b3:42:cc:ad:d6:59:44:77:b8:
                    b1:aa:9c:8b:53:18:fb:5f:8d:a7:a8:34:42:f1:cc:
                    46:a7:fb:3f:d6:b5:72:34:fb:ab:05:4f:49:e4:f4:
                    b4:c8:14:87:63:aa:2d:2a:71:94:cb:a9:f0:9d:cc:
                    4a:da:8d:21:f2:30:52:99:3b:17:18:15:43:ff:7d:
                    8c:d7:59:7a:ec:3f:15:c2:86:ea:3d:5a:f9:e4:5f:
                    33:ad:57:1a:6a:05:5e:80:71:21:17:0f:22:f9:7d:
                    fe:d0:5c:02:19:52:f3:53:7f:85:e1:5f:dc:d8:a7:
                    63:8e:b3:c0:90:54:0d:e4:3e:03:9f:f8:06:0b:4e:
                    76:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:97:6E:C2:AF:2D:91:62:C3:2B:49:BC:93:63:5B:2E:23:23:A9:1F
            X509v3 Authority Key Identifier:
                keyid:39:1C:80:29:7A:89:23:C9:7C:06:7A:3F:D0:78:17:8E:69:34:E5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/391C80297A8923C97C067A3FD078178E6934E57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/391C80297A8923C97C067A3FD078178E6934E57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/323830333a633739303a3a2f34322d3432203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c790::/42

    Signature Algorithm: sha256WithRSAEncryption
         ac:c6:43:aa:7f:50:96:96:05:1e:45:b6:c4:81:7e:4e:7b:d6:
         6c:e9:0e:88:96:56:86:e1:2e:6f:8a:ec:86:86:82:13:2d:a2:
         65:1b:61:f5:d3:44:13:cb:5c:c2:e3:05:9b:f4:b4:6f:d0:28:
         38:fc:dc:ae:f0:a3:51:31:31:88:5c:dc:59:5d:eb:c8:59:48:
         d1:6c:c7:d8:03:bf:71:ef:12:22:b4:54:b0:98:a9:7a:22:ad:
         08:56:13:32:c4:0e:d7:a8:a8:3d:08:55:e0:af:eb:75:56:b2:
         20:04:f9:0b:2c:30:3b:b3:0e:5a:e1:1a:0a:d8:1e:48:b3:9e:
         9a:ec:bb:47:bb:04:32:75:c5:47:48:4d:f4:bd:d9:c5:1e:79:
         2a:17:46:79:3e:1f:5b:39:85:90:e8:1a:97:f2:d4:4a:d1:cf:
         77:de:e6:47:e4:dd:09:85:34:f8:a9:a9:3a:8f:4b:26:5e:27:
         65:29:94:87:95:ba:3c:96:6a:a1:55:51:88:38:bf:aa:b6:da:
         3c:bd:f2:77:3f:e2:7a:b9:d9:eb:31:d6:51:3c:72:7d:f3:39:
         a4:9f:82:1c:ae:8e:6c:ed:1c:87:0b:aa:c3:d4:7f:b5:b5:7f:
         f1:2c:00:53:6d:a4:e7:25:67:e5:ac:26:96:02:1b:bd:e0:51:
         77:5b:6c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:53:25 2026 by rpki-client