This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e20313938393439.roa
File:                     3230302e302e36332e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          Qz+23fDGy3/V82lRJHDOV8Y8PR4aAmIUYoPPQ1ZONQc=
Subject key identifier:   AE:FB:C5:1D:BF:6A:15:F0:7A:8F:EA:14:24:94:25:6D:83:13:47:FA
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       02DB676DD786D742F48870955CDA828731FA2A81
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e20313938393439.roa
Signing time:             Tue 06 Jan 2026 19:46:01 +0000
ROA not before:           Tue 06 Jan 2026 19:41:01 +0000
ROA not after:            Tue 05 Jan 2027 19:46:01 +0000
asID:                     198949
IP address blocks:        200.0.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:db:67:6d:d7:86:d7:42:f4:88:70:95:5c:da:82:87:31:fa:2a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Jan  6 19:41:01 2026 GMT
            Not After : Jan  5 19:46:01 2027 GMT
        Subject: CN=AEFBC51DBF6A15F07A8FEA142494256D831347FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0b:98:a6:9c:65:f2:56:f4:f8:68:29:12:c0:
                    9b:d4:cf:53:3a:ba:48:e8:3c:11:2b:72:8b:92:8f:
                    81:fe:91:21:ce:9a:8a:e5:90:c7:31:30:c2:ce:96:
                    28:a8:1e:a9:d8:81:ce:88:23:6e:aa:46:fa:9c:3a:
                    37:ac:b6:35:1f:6f:3c:5b:cb:45:13:48:00:32:33:
                    84:ff:ce:48:04:c9:c4:83:4e:85:7f:48:25:19:55:
                    c2:00:71:6f:24:df:bc:7f:20:3c:5f:60:bc:88:e2:
                    57:05:9f:02:ef:76:1b:fc:2c:3b:f4:5b:c9:c2:94:
                    ce:5c:07:4b:09:f3:75:2e:a4:df:1f:03:c2:04:8c:
                    a4:a6:bc:44:fb:42:cb:02:85:f6:7b:4f:b2:a7:96:
                    6c:6a:59:78:b2:7e:93:f1:f3:a8:e4:cf:d3:65:ee:
                    19:8f:d0:a4:fa:1a:33:69:1f:16:d8:ef:23:92:d6:
                    d2:53:ff:98:1a:b7:af:f6:db:11:82:2f:64:c8:41:
                    f2:b6:22:36:b2:e6:9f:66:41:6c:d2:4a:dd:aa:70:
                    95:6c:76:ed:a6:64:8a:39:77:6b:60:cf:06:50:61:
                    31:d6:9f:ed:00:23:8b:88:0c:1c:ab:9c:57:29:bd:
                    11:8b:b3:74:eb:52:ff:fe:24:23:27:81:0d:14:06:
                    cb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FB:C5:1D:BF:6A:15:F0:7A:8F:EA:14:24:94:25:6D:83:13:47:FA
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:15:c7:8d:0d:e5:3a:89:a1:e1:63:00:f5:eb:4a:f3:ed:79:
         ec:29:47:36:cb:01:1d:5d:f8:0d:2c:73:3a:20:9e:81:50:ba:
         ae:b4:88:38:ac:51:f3:b0:95:80:8f:30:c1:01:aa:f4:50:b2:
         19:37:e4:a9:f5:7e:ea:24:5c:d1:74:a4:9b:56:f7:ca:2a:7d:
         fb:ba:f9:0e:8c:43:81:49:8b:eb:8f:47:11:a4:d5:21:dd:0b:
         d7:89:59:f8:47:e8:da:d8:d2:73:46:d6:4c:77:29:53:b5:c6:
         39:bc:f4:79:be:5d:c5:b0:ae:5e:fb:19:46:c7:f6:31:af:55:
         be:5f:28:0e:a0:2b:85:ce:e1:56:47:99:9c:4f:d0:ce:1d:44:
         45:3d:0a:36:3c:d1:ee:24:be:5a:af:c9:ee:f4:de:6c:87:d2:
         40:d8:ce:e2:85:c9:17:76:5e:f7:73:d8:97:e3:4b:f4:97:1e:
         8d:ac:25:d6:92:40:18:79:d6:ca:10:e0:cd:76:dc:bc:8e:20:
         1f:c0:8d:e0:1e:53:7f:6e:44:f1:b2:ef:77:2b:45:e5:27:36:
         53:d2:6b:29:4a:e7:65:42:3a:27:22:4e:57:24:89:89:1f:c9:
         68:94:61:bb:48:08:60:48:e4:c9:e9:bc:6f:b9:82:67:31:e0:
         9d:5c:fb:23
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUAttnbdeG10L0iHCVXNqChzH6KoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNEQUZFN0M2RDA3MkFENzU4QjJFQUE3QzY1NEM1MjhD
OEREMjU2QjAeFw0yNjAxMDYxOTQxMDFaFw0yNzAxMDUxOTQ2MDFaMDMxMTAvBgNV
BAMTKEFFRkJDNTFEQkY2QTE1RjA3QThGRUExNDI0OTQyNTZEODMxMzQ3RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTC5imnGXyVvT4aCkSwJvUz1M6
ukjoPBErcouSj4H+kSHOmorlkMcxMMLOliioHqnYgc6II26qRvqcOjestjUfbzxb
y0UTSAAyM4T/zkgEycSDToV/SCUZVcIAcW8k37x/IDxfYLyI4lcFnwLvdhv8LDv0
W8nClM5cB0sJ83UupN8fA8IEjKSmvET7QssChfZ7T7KnlmxqWXiyfpPx86jkz9Nl
7hmP0KT6GjNpHxbY7yOS1tJT/5gat6/22xGCL2TIQfK2Ijay5p9mQWzSSt2qcJVs
du2mZIo5d2tgzwZQYTHWn+0AI4uIDByrnFcpvRGLs3TrUv/+JCMngQ0UBssnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUrvvFHb9qFfB6j+oUJJQlbYMTR/owHwYDVR0j
BBgwFoAUY9r+fG0HKtdYsuqnxlTFKMjdJWswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQTY1Nzc4RUEyQkEzRjY0NTM4MUNGQjAzQTkwOTkzNTEz
MDY3MDM5QjI0MDRGOTI3MkU4NDAxQjEzQzYyMTUxLzAvNjNEQUZFN0M2RDA3MkFE
NzU4QjJFQUE3QzY1NEM1MjhDOEREMjU2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82M0RBRkU3QzZEMDcyQUQ3NThC
MkVBQTdDNjU0QzUyOEM4REQyNTZCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUE2NTc3OEVBMkJBM0Y2NDUzODFDRkIwM0E5MDk5MzUxMzA2NzAzOUIy
NDA0RjkyNzJFODQwMUIxM0M2MjE1MS8wLzMyMzAzMDJlMzAyZTM2MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIAD8wDQYJ
KoZIhvcNAQELBQADggEBABMVx40N5TqJoeFjAPXrSvPteewpRzbLAR1d+A0sczog
noFQuq60iDisUfOwlYCPMMEBqvRQshk35Kn1fuokXNF0pJtW98oqffu6+Q6MQ4FJ
i+uPRxGk1SHdC9eJWfhH6NrY0nNG1kx3KVO1xjm89Hm+XcWwrl77GUbH9jGvVb5f
KA6gK4XO4VZHmZxP0M4dREU9CjY80e4kvlqvye703myH0kDYzuKFyRd2Xvdz2Jfj
S/SXHo2sJdaSQBh51soQ4M123LyOIB/AjeAeU39uRPGy73crReUnNlPSaylK52VC
OiciTlckiYkfyWiUYbtICGBI5MnpvG+5gmcx4J1c+yM=
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:09:56 2026 by rpki-client