This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EF35BDA2C86E3B3038D35ADB75F72A3863BA2653A16CD5278F2321B9B4F3E02/0/323830363a3430643a3a2f33322d3332203d3e20323732333136.roa
File:                     323830363a3430643a3a2f33322d3332203d3e20323732333136.roa (raw, json)
Hash identifier:          L9Iq/GMRKUMWHVrXYBCX6bzISBSDGw11IP/ZaJpn9QM=
Subject key identifier:   AE:DD:58:8B:80:88:E6:85:31:A1:88:6B:E6:59:66:2E:6C:02:06:2D
Certificate issuer:       /CN=A6EA6E6283CA10020C2DAB772BCE1CF8CB830968
Certificate serial:       39AD5F9A5602033D5C1C7D726F4C340F5AA57E6C
Authority key identifier: A6:EA:6E:62:83:CA:10:02:0C:2D:AB:77:2B:CE:1C:F8:CB:83:09:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6EA6E6283CA10020C2DAB772BCE1CF8CB830968.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EF35BDA2C86E3B3038D35ADB75F72A3863BA2653A16CD5278F2321B9B4F3E02/0/323830363a3430643a3a2f33322d3332203d3e20323732333136.roa
Signing time:             Tue 27 Jan 2026 19:50:00 +0000
ROA not before:           Tue 27 Jan 2026 19:45:00 +0000
ROA not after:            Tue 26 Jan 2027 19:50:00 +0000
asID:                     272316
IP address blocks:        2806:40d::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EF35BDA2C86E3B3038D35ADB75F72A3863BA2653A16CD5278F2321B9B4F3E02/0/A6EA6E6283CA10020C2DAB772BCE1CF8CB830968.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EF35BDA2C86E3B3038D35ADB75F72A3863BA2653A16CD5278F2321B9B4F3E02/0/A6EA6E6283CA10020C2DAB772BCE1CF8CB830968.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6EA6E6283CA10020C2DAB772BCE1CF8CB830968.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 05:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ad:5f:9a:56:02:03:3d:5c:1c:7d:72:6f:4c:34:0f:5a:a5:7e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6EA6E6283CA10020C2DAB772BCE1CF8CB830968
        Validity
            Not Before: Jan 27 19:45:00 2026 GMT
            Not After : Jan 26 19:50:00 2027 GMT
        Subject: CN=AEDD588B8088E68531A1886BE659662E6C02062D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:64:13:8b:75:d3:92:8d:e1:ca:f9:a4:88:
                    3e:81:94:ea:c1:77:09:5d:f0:06:96:18:40:93:ea:
                    e5:cb:f1:43:ed:5d:9e:ab:61:55:84:89:22:cc:5d:
                    61:28:bc:04:c3:75:30:78:2c:59:1b:94:de:81:72:
                    65:31:50:e9:0c:e9:05:39:32:8e:34:77:85:fc:26:
                    85:a3:0e:f8:1d:dd:cd:8d:ce:28:9c:20:9b:a7:e1:
                    c4:68:5a:d6:56:8d:f8:a5:5d:3a:c7:b3:b2:e6:c1:
                    df:14:11:df:ce:b2:1c:b8:e9:21:39:d4:f8:3c:87:
                    67:44:a5:b6:a2:c8:17:b6:7e:1f:d4:6a:76:03:f2:
                    96:21:07:c2:28:d4:ee:0a:f3:c9:8f:9b:82:be:84:
                    8a:a0:e7:d5:50:46:26:81:e6:81:56:7c:bb:50:1a:
                    e8:23:89:a6:20:a3:22:04:6d:a1:e8:a8:6e:ab:38:
                    74:58:31:c1:a3:66:11:0f:4c:49:a9:9d:74:c6:c6:
                    db:9d:52:39:82:3e:32:6d:b5:06:10:f4:ee:07:b7:
                    21:fc:4b:85:4a:1b:bc:27:89:34:4b:66:1c:0b:96:
                    f3:3c:6c:73:f1:dc:c1:39:ae:1b:54:ac:11:46:a2:
                    0f:d6:66:d0:9f:7c:22:43:49:0c:61:4a:54:c0:84:
                    15:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DD:58:8B:80:88:E6:85:31:A1:88:6B:E6:59:66:2E:6C:02:06:2D
            X509v3 Authority Key Identifier:
                keyid:A6:EA:6E:62:83:CA:10:02:0C:2D:AB:77:2B:CE:1C:F8:CB:83:09:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EF35BDA2C86E3B3038D35ADB75F72A3863BA2653A16CD5278F2321B9B4F3E02/0/A6EA6E6283CA10020C2DAB772BCE1CF8CB830968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6EA6E6283CA10020C2DAB772BCE1CF8CB830968.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EF35BDA2C86E3B3038D35ADB75F72A3863BA2653A16CD5278F2321B9B4F3E02/0/323830363a3430643a3a2f33322d3332203d3e20323732333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:40d::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:c2:6a:46:1c:ff:5a:bd:12:75:c2:5d:54:70:29:b9:6a:50:
         7f:53:2a:e4:3c:e3:c2:ec:c9:0e:58:a6:fb:67:db:ca:13:e6:
         60:74:83:e3:67:47:f3:ca:88:05:7c:9f:10:7c:c5:c2:2c:7f:
         d6:53:76:df:60:d5:05:11:0e:12:d9:3d:97:80:e4:54:65:47:
         d8:76:37:c0:b4:a5:79:3c:54:66:6a:59:99:1a:fe:88:2c:bd:
         c6:6e:ff:50:97:95:22:59:be:06:63:10:63:71:ac:5c:e4:87:
         e8:c1:41:3a:f2:00:7a:4a:40:1f:46:d1:d5:29:2e:f2:9d:3b:
         68:51:6a:79:46:f6:75:ea:94:49:f6:b7:25:3c:a9:1d:5f:a4:
         ee:68:4f:23:b9:9e:2a:0d:98:9a:02:eb:27:43:2a:54:e4:27:
         76:72:fe:51:26:d6:26:ef:59:4a:16:f5:00:ba:e4:29:af:54:
         13:69:47:01:37:0a:6b:6a:d2:61:4b:9b:19:fe:f1:c2:ff:7d:
         a6:70:e1:dd:46:69:14:e1:5b:70:e6:12:33:e0:46:82:2a:e1:
         aa:fd:04:16:bd:53:42:9d:d7:bc:b7:a4:07:24:56:67:da:bc:
         2a:13:c2:44:51:6f:20:04:ae:9f:81:73:a4:27:93:d6:cc:5f:
         76:0b:82:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:00:46 2026 by rpki-client