This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532313a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346532313a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          kYF3+JirAoZFwmmz/AKfaixs3E7Y9CT8ic/56zpT6Oo=
Subject key identifier:   DD:5F:4B:05:19:34:EE:FA:4C:56:A4:5A:58:B4:68:96:60:1A:75:78
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       0EABEE69805BBA64A1C5601DF7837C453B136F02
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532313a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 06 Jan 2026 20:52:51 +0000
ROA not before:           Tue 06 Jan 2026 20:47:51 +0000
ROA not after:            Tue 05 Jan 2027 20:52:51 +0000
asID:                     267848
IP address blocks:        2800:be0:4e21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 13:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ab:ee:69:80:5b:ba:64:a1:c5:60:1d:f7:83:7c:45:3b:13:6f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Jan  6 20:47:51 2026 GMT
            Not After : Jan  5 20:52:51 2027 GMT
        Subject: CN=DD5F4B051934EEFA4C56A45A58B46896601A7578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:f1:a7:61:2a:73:d0:d0:54:42:df:5e:f7:
                    97:75:6e:4b:ad:4b:79:de:66:4a:6c:d7:d3:14:19:
                    61:30:4d:30:f3:a2:e5:5f:df:9a:0a:66:10:4d:39:
                    19:1d:96:24:29:d9:70:cf:5c:c2:62:b2:39:9b:ee:
                    8c:07:9e:ec:48:27:b8:5b:c9:ad:81:05:8c:e2:aa:
                    5f:ff:a1:da:12:81:6b:31:93:db:4b:48:01:b1:80:
                    80:48:2c:07:b9:68:89:17:d0:00:44:37:45:5b:53:
                    75:46:44:b8:13:25:e5:ca:e1:4d:4f:95:7f:fe:48:
                    6e:89:0e:08:76:1b:f8:06:17:ce:fa:53:c1:aa:8f:
                    d0:ef:16:fc:e6:b2:72:53:b8:1f:8f:78:25:aa:9d:
                    e2:07:66:26:8b:2d:ea:4c:34:ba:ca:48:8c:82:30:
                    ba:c0:c1:78:38:7b:90:00:8c:a0:d7:af:03:75:b9:
                    62:4d:fb:ba:dd:8d:55:b1:af:f7:28:95:4c:db:e1:
                    d4:7d:d9:15:c9:f2:1a:d9:4c:4b:4a:81:e6:3f:fd:
                    d8:38:04:2c:74:a2:23:3e:a5:c7:2c:f0:d9:e5:77:
                    76:38:d6:e3:52:ad:9d:51:22:e1:b6:a4:88:68:08:
                    90:72:4a:77:23:98:f1:5a:e6:a1:85:74:41:48:0d:
                    c4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5F:4B:05:19:34:EE:FA:4C:56:A4:5A:58:B4:68:96:60:1A:75:78
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532313a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e21::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:39:c3:30:d9:0f:79:30:41:f5:02:d0:e3:f6:64:68:c6:23:
         d3:c5:e6:82:d4:ed:da:25:51:d8:61:36:dc:a2:3a:ad:ac:9c:
         e6:fd:6b:23:93:80:e5:05:dd:0e:c7:3f:09:29:43:e6:7f:d3:
         dd:31:f9:bb:69:ad:fd:80:2a:46:d6:0e:1c:90:70:cc:9f:0a:
         b2:41:ba:29:13:14:1e:e9:fd:ba:6c:bc:23:cf:ed:ca:20:9a:
         05:03:ff:2c:ee:1d:e7:94:0a:64:09:6e:3e:28:7a:28:9c:77:
         3e:a3:31:2b:9b:00:37:c0:c4:0e:13:20:11:7a:74:33:ac:1b:
         47:73:fe:ac:39:61:28:62:95:1c:72:1a:4d:5b:15:dd:67:53:
         70:d1:d0:e3:e9:3b:80:52:01:73:b3:25:ed:fb:d2:bb:67:77:
         72:d9:c8:cc:8b:46:6e:f5:d5:13:42:06:c5:01:17:70:bc:82:
         de:eb:d4:e0:fe:11:ac:02:88:6a:86:05:17:19:7b:0c:33:4c:
         2c:9d:db:96:e3:18:22:a7:9c:24:a7:66:2f:79:5a:64:d4:6c:
         e3:19:1b:21:57:39:1c:5b:b4:e1:e8:c4:4e:54:ce:12:8b:47:
         a0:94:43:ae:d2:aa:a9:19:45:36:3d:1e:20:ed:29:32:e1:9a:
         8c:af:d7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:21:10 2026 by rpki-client