This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3230302e3132342e3232342e302f32302d3238203d3e203237373338.roa
File:                     3230302e3132342e3232342e302f32302d3238203d3e203237373338.roa (raw, json)
Hash identifier:          Eogs1GCx2Ou5FHExVB8vs6gBBXh8aRZ4yQ+3ybsF/28=
Subject key identifier:   6B:4F:0F:4C:20:0B:62:FF:51:66:6F:52:18:6A:DA:99:2C:0D:AF:BD
Certificate issuer:       /CN=E63A0B64348E70601DE867C594F34A8BB87EC911
Certificate serial:       53293942A679F7995F788C3B26EEE11380659B8B
Authority key identifier: E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3230302e3132342e3232342e302f32302d3238203d3e203237373338.roa
Signing time:             Tue 06 Jan 2026 19:25:52 +0000
ROA not before:           Tue 06 Jan 2026 19:20:52 +0000
ROA not after:            Tue 05 Jan 2027 19:25:52 +0000
asID:                     27738
IP address blocks:        200.124.224.0/20 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:29:39:42:a6:79:f7:99:5f:78:8c:3b:26:ee:e1:13:80:65:9b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A0B64348E70601DE867C594F34A8BB87EC911
        Validity
            Not Before: Jan  6 19:20:52 2026 GMT
            Not After : Jan  5 19:25:52 2027 GMT
        Subject: CN=6B4F0F4C200B62FF51666F52186ADA992C0DAFBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:92:ff:cf:85:ed:ea:c5:d6:8a:f9:70:66:
                    76:7e:a8:d5:9d:3c:29:10:84:e0:9c:e3:2a:78:ae:
                    bc:02:86:3f:32:3f:75:8d:44:c0:03:fe:2f:f7:5c:
                    6a:9b:5d:08:4c:a2:a2:ca:ec:f0:4d:3a:54:3e:90:
                    99:3f:7e:ef:cb:af:8f:6b:e3:45:e8:d4:84:19:2b:
                    2b:e5:34:87:72:f2:4b:91:41:5c:e6:25:fb:5d:28:
                    99:47:4f:79:aa:13:6f:a9:37:d3:7a:08:82:86:92:
                    3f:18:6b:ad:87:48:ad:cf:11:92:53:8f:02:38:63:
                    1e:bd:ca:2b:c8:10:67:aa:a0:40:e2:7a:bc:45:b4:
                    34:c2:f6:6a:37:dc:53:30:39:a1:81:12:a2:36:35:
                    b4:02:8c:e4:2e:a5:3b:a0:d8:96:d4:54:17:49:d9:
                    b3:a7:1b:65:f9:a9:7a:fc:f5:3f:2b:63:7e:7e:a3:
                    77:3a:90:79:04:91:f5:07:10:de:9e:a2:e8:18:25:
                    e3:d8:d8:c5:e0:01:56:46:1d:22:36:83:98:2d:e4:
                    fe:16:06:10:cf:e1:79:23:7b:59:d5:b8:df:93:71:
                    2b:06:84:35:44:e5:92:69:79:4f:10:9e:6c:39:5c:
                    3e:9e:c4:f8:6a:c5:b1:f2:e4:56:f3:b8:7b:95:0a:
                    c0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:0F:4C:20:0B:62:FF:51:66:6F:52:18:6A:DA:99:2C:0D:AF:BD
            X509v3 Authority Key Identifier:
                keyid:E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3230302e3132342e3232342e302f32302d3238203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:3d:eb:21:e3:53:3b:aa:6c:d8:90:cf:eb:5e:3a:e8:0f:0f:
         56:ee:05:9b:96:10:ac:b3:fd:c3:a4:64:e0:9d:a6:83:79:aa:
         09:ea:51:93:6a:95:cb:7e:52:b1:cc:0f:0c:d5:fb:dd:8d:15:
         b0:b1:6b:52:24:71:91:8b:ac:d9:a8:bb:50:53:dd:22:a3:ff:
         8f:68:42:7f:85:f1:d4:ec:69:c9:d3:a8:ad:17:3f:8e:63:f2:
         fe:5c:b0:20:2a:53:c9:be:91:64:a8:70:17:70:c5:54:97:a1:
         54:b2:87:f6:57:76:f9:16:87:fd:c9:1e:cf:04:e1:7e:28:46:
         3a:21:cd:1b:a6:b7:ea:af:17:aa:63:9b:b0:b0:f7:1a:3a:2b:
         1f:d0:dc:79:62:17:2e:1f:dc:a8:ea:80:80:89:e5:ae:6e:8a:
         76:e5:c0:41:cd:3b:14:4b:cc:54:ff:4a:dc:0d:43:95:8f:9e:
         ce:4b:fd:cd:d8:1c:f7:8a:11:e8:2e:f3:6e:cf:a2:f1:c4:46:
         a1:af:b2:c1:68:6c:9a:02:07:a5:4f:3a:86:0a:e9:80:ff:ec:
         56:9c:36:4e:44:9e:bd:4f:ab:34:c9:92:09:0b:03:59:67:78:
         8b:9a:c4:d9:47:89:fe:2a:d6:3d:b7:8b:5d:2b:d4:67:73:df:
         a3:04:09:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:55:43 2026 by rpki-client