This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39342e302f32342d3234203d3e20323637383139.roa
File:                     3230302e36332e39342e302f32342d3234203d3e20323637383139.roa (raw, json)
Hash identifier:          G3catBT100/CfBI3THAjqqwYqbcSIhUzmfIZeEpa07c=
Subject key identifier:   B4:11:DA:6A:F3:E5:FC:76:E7:5C:C7:05:18:FA:BC:43:91:8B:0B:F7
Certificate issuer:       /CN=89FBB987F4762D9626E55719EF46050943DEE51C
Certificate serial:       629A5F0477E0E8AE9FA9454430A5893401A5D418
Authority key identifier: 89:FB:B9:87:F4:76:2D:96:26:E5:57:19:EF:46:05:09:43:DE:E5:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39342e302f32342d3234203d3e20323637383139.roa
Signing time:             Tue 06 Jan 2026 20:55:57 +0000
ROA not before:           Tue 06 Jan 2026 20:50:57 +0000
ROA not after:            Tue 05 Jan 2027 20:55:57 +0000
asID:                     267819
IP address blocks:        200.63.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 08:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9a:5f:04:77:e0:e8:ae:9f:a9:45:44:30:a5:89:34:01:a5:d4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89FBB987F4762D9626E55719EF46050943DEE51C
        Validity
            Not Before: Jan  6 20:50:57 2026 GMT
            Not After : Jan  5 20:55:57 2027 GMT
        Subject: CN=B411DA6AF3E5FC76E75CC70518FABC43918B0BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:ab:2e:06:cd:3c:91:a3:28:ed:15:27:ef:
                    11:dc:13:65:b3:e8:ab:0d:88:20:56:aa:c8:60:cf:
                    8b:14:4b:d6:e6:47:19:7c:6d:01:85:c9:21:82:3e:
                    69:36:39:bb:c0:75:1a:01:55:cf:7e:b2:24:86:76:
                    13:8e:e2:34:4d:b8:75:d4:1c:e5:c4:35:73:f5:88:
                    6d:25:c2:f2:8b:e6:ad:42:0d:ee:74:ee:86:da:06:
                    b2:82:7c:01:44:36:c9:9f:d6:3e:99:4e:0e:15:b3:
                    76:e9:0d:09:8a:10:09:61:24:0c:5e:fb:09:c5:08:
                    d5:15:91:db:f9:6e:0a:17:7c:21:49:45:8c:3d:77:
                    88:33:1b:f9:e7:3f:11:a0:af:c6:02:c8:c7:ee:94:
                    dc:29:88:d4:b3:da:53:0e:42:b0:40:a4:38:ab:4d:
                    e9:d8:4c:b7:49:bc:1f:10:c6:be:bc:e4:cd:13:1e:
                    0e:97:d8:ac:fb:90:18:13:a0:86:53:44:53:2c:cf:
                    e9:1e:a9:7d:2f:33:74:02:50:7c:a0:9e:36:69:38:
                    cd:17:ec:ad:ca:62:c5:00:c0:09:3d:60:2d:5b:75:
                    fa:b9:6e:33:02:54:c2:56:d2:84:50:de:d5:c5:71:
                    58:df:f6:6d:10:da:01:5d:12:eb:64:b2:15:4b:18:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:11:DA:6A:F3:E5:FC:76:E7:5C:C7:05:18:FA:BC:43:91:8B:0B:F7
            X509v3 Authority Key Identifier:
                keyid:89:FB:B9:87:F4:76:2D:96:26:E5:57:19:EF:46:05:09:43:DE:E5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39342e302f32342d3234203d3e20323637383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:fd:ec:2d:9b:1d:72:63:4b:74:be:74:f4:65:5f:84:8a:77:
         f9:1a:cf:b1:c1:cf:25:81:c2:64:4d:7e:62:d9:bb:0e:0c:1c:
         6a:63:bf:0b:de:06:63:bd:d7:89:0b:9c:79:70:08:37:1c:80:
         02:7b:17:9c:85:62:3f:2a:15:2b:49:6f:26:31:6c:e7:44:2b:
         2a:b9:d5:48:27:40:b8:c6:33:6a:cb:04:14:4b:2b:d9:40:d7:
         f1:e4:06:37:ef:f6:b5:33:d1:98:88:88:07:7a:e8:04:2f:b2:
         d7:81:eb:cd:2e:59:9d:58:12:f4:2c:1c:86:62:2a:b5:be:e9:
         a4:8c:9e:54:dd:22:70:ed:9b:df:19:14:94:4b:ea:e4:e4:28:
         27:cc:f0:77:41:5f:b7:e9:97:ad:21:9d:69:47:0b:1a:95:3b:
         6b:b2:78:9f:17:e4:35:01:68:13:01:21:da:3b:9b:82:b6:be:
         9f:22:55:29:80:57:d4:02:8d:9a:6e:fe:3f:0e:66:73:3f:ec:
         dd:b2:62:8e:d8:38:a5:38:8a:ce:ff:d4:26:ac:f4:f2:54:32:
         7e:89:38:17:d2:55:22:59:49:50:86:6e:83:16:ef:76:2b:63:
         13:96:f0:12:52:cf:fc:e9:10:8a:02:f7:a4:8a:85:ef:95:46:
         17:75:1f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:41 2026 by rpki-client