This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3137392e302e3230342e302f32342d3234203d3e203139353832.roa
File:                     3137392e302e3230342e302f32342d3234203d3e203139353832.roa (raw, json)
Hash identifier:          mpB3Qh0IVBUQUd/hU+0exudQShHaPBBs2QK2o58kefE=
Subject key identifier:   1A:DD:FA:ED:70:D9:4D:67:47:0B:06:78:A7:27:1A:52:F6:A9:19:F9
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       38BD3537DC213B7104265BF95FB6C73F38183E0F
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3137392e302e3230342e302f32342d3234203d3e203139353832.roa
Signing time:             Tue 06 Jan 2026 19:46:01 +0000
ROA not before:           Tue 06 Jan 2026 19:41:01 +0000
ROA not after:            Tue 05 Jan 2027 19:46:01 +0000
asID:                     19582
IP address blocks:        179.0.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bd:35:37:dc:21:3b:71:04:26:5b:f9:5f:b6:c7:3f:38:18:3e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Jan  6 19:41:01 2026 GMT
            Not After : Jan  5 19:46:01 2027 GMT
        Subject: CN=1ADDFAED70D94D67470B0678A7271A52F6A919F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:61:95:2f:a8:f9:70:70:64:e6:50:78:96:
                    c1:19:fb:9c:fb:a0:ff:6d:47:f6:46:75:69:6b:ec:
                    32:e5:98:6f:3f:07:2d:df:1e:0b:e0:d0:d4:5f:d8:
                    a1:6d:0c:ef:48:9e:c1:ab:07:73:3f:a8:f8:9e:bc:
                    4d:fa:2d:b7:f7:15:77:ec:2f:91:4b:53:e8:27:e1:
                    f8:e2:93:29:4b:f4:5d:60:0e:33:7d:21:8f:75:54:
                    79:8e:10:ea:59:75:17:35:db:1e:50:a2:37:35:d5:
                    ae:6c:0d:bb:c4:ce:d8:19:23:a2:8c:39:33:bb:a6:
                    ab:90:85:d7:a3:05:48:aa:11:5a:8d:1e:bd:1f:91:
                    3f:76:09:8f:6b:d6:bb:1f:bb:57:dc:93:f6:ba:00:
                    c4:b9:f5:c8:c8:66:47:d4:36:03:85:66:5d:d4:57:
                    b1:07:08:02:fe:de:35:b8:b8:04:5b:5f:c1:9f:26:
                    89:d6:5b:5d:00:51:65:f0:b1:f7:c7:d6:cf:1f:b0:
                    57:7a:e5:20:d9:3f:1c:18:cb:fa:cf:92:d3:1d:20:
                    ae:9d:04:ed:e4:6d:d4:c7:9f:de:47:d7:37:54:46:
                    aa:f1:df:86:0a:1a:c2:49:54:d4:d7:da:69:86:61:
                    24:a5:b7:96:12:47:71:89:f8:b8:ce:86:15:dd:fc:
                    27:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DD:FA:ED:70:D9:4D:67:47:0B:06:78:A7:27:1A:52:F6:A9:19:F9
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3137392e302e3230342e302f32342d3234203d3e203139353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:92:be:e6:61:f8:c4:c2:9c:30:fb:46:11:b1:93:28:9c:69:
         ff:97:a3:30:1d:22:27:cf:96:24:a2:ba:5d:00:60:65:0d:1d:
         dc:b3:14:f2:2f:19:a0:2b:89:cb:f2:30:86:c8:92:32:13:73:
         14:b7:96:f1:c0:9c:26:73:7d:9c:98:15:c5:a6:8b:bc:2a:e2:
         4a:20:0b:bc:02:66:03:22:cf:34:08:ee:c5:85:6d:ba:44:8f:
         c8:a7:b8:02:90:c8:91:e4:20:d9:c5:15:ed:2f:21:56:b4:71:
         da:43:ae:c9:e9:cf:59:54:0e:43:ec:8d:ee:c6:e4:eb:4e:70:
         2b:46:28:53:9e:a5:b9:0d:86:bd:dc:b9:f2:5c:41:43:60:cb:
         da:b1:da:25:1a:2a:85:a5:0b:18:37:6e:88:9f:16:30:43:29:
         c2:b4:8c:9f:d3:ea:56:73:44:a3:1a:6b:06:56:f2:97:d6:de:
         33:24:19:df:88:91:a5:3b:94:56:7f:e7:9d:d0:34:2a:28:87:
         da:51:81:91:16:48:86:e7:33:81:e1:2e:2c:c5:7b:c7:ec:e1:
         7f:ab:2d:b4:6d:fb:16:da:e9:4b:32:24:c4:b1:52:54:4c:21:
         c3:0d:3b:ae:ef:52:4a:ad:b2:73:ed:df:e9:42:38:59:f1:21:
         95:07:88:c8
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUOL01N9whO3EEJlv5X7bHPzgYPg8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNEQUZFN0M2RDA3MkFENzU4QjJFQUE3QzY1NEM1MjhD
OEREMjU2QjAeFw0yNjAxMDYxOTQxMDFaFw0yNzAxMDUxOTQ2MDFaMDMxMTAvBgNV
BAMTKDFBRERGQUVENzBEOTRENjc0NzBCMDY3OEE3MjcxQTUyRjZBOTE5RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bmGVL6j5cHBk5lB4lsEZ+5z7
oP9tR/ZGdWlr7DLlmG8/By3fHgvg0NRf2KFtDO9InsGrB3M/qPievE36Lbf3FXfs
L5FLU+gn4fjikylL9F1gDjN9IY91VHmOEOpZdRc12x5Qojc11a5sDbvEztgZI6KM
OTO7pquQhdejBUiqEVqNHr0fkT92CY9r1rsfu1fck/a6AMS59cjIZkfUNgOFZl3U
V7EHCAL+3jW4uARbX8GfJonWW10AUWXwsffH1s8fsFd65SDZPxwYy/rPktMdIK6d
BO3kbdTHn95H1zdURqrx34YKGsJJVNTX2mmGYSSlt5YSR3GJ+LjOhhXd/CfNAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUGt367XDZTWdHCwZ4pycaUvapGfkwHwYDVR0j
BBgwFoAUY9r+fG0HKtdYsuqnxlTFKMjdJWswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQTY1Nzc4RUEyQkEzRjY0NTM4MUNGQjAzQTkwOTkzNTEz
MDY3MDM5QjI0MDRGOTI3MkU4NDAxQjEzQzYyMTUxLzAvNjNEQUZFN0M2RDA3MkFE
NzU4QjJFQUE3QzY1NEM1MjhDOEREMjU2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82M0RBRkU3QzZEMDcyQUQ3NThC
MkVBQTdDNjU0QzUyOEM4REQyNTZCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUE2NTc3OEVBMkJBM0Y2NDUzODFDRkIwM0E5MDk5MzUxMzA2NzAzOUIy
NDA0RjkyNzJFODQwMUIxM0M2MjE1MS8wLzMxMzczOTJlMzAyZTMyMzAzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzNTM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACzAMwwDQYJ
KoZIhvcNAQELBQADggEBAF2SvuZh+MTCnDD7RhGxkyicaf+XozAdIifPliSiul0A
YGUNHdyzFPIvGaAricvyMIbIkjITcxS3lvHAnCZzfZyYFcWmi7wq4kogC7wCZgMi
zzQI7sWFbbpEj8inuAKQyJHkINnFFe0vIVa0cdpDrsnpz1lUDkPsje7G5OtOcCtG
KFOepbkNhr3cufJcQUNgy9qx2iUaKoWlCxg3boifFjBDKcK0jJ/T6lZzRKMaawZW
8pfW3jMkGd+IkaU7lFZ/553QNCooh9pRgZEWSIbnM4HhLizFe8fs4X+rLbRt+xba
6UsyJMSxUlRMIcMNO67vUkqtsnPt3+lCOFnxIZUHiMg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:33 2026 by rpki-client