This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230302e36332e34302e302f32312d3234203d3e20323635353430.roa
File:                     3230302e36332e34302e302f32312d3234203d3e20323635353430.roa (raw, json)
Hash identifier:          wszSmvq+3XVIzAJ9d1J6hiReM4aA9wxl4SBqmXWWAdQ=
Subject key identifier:   7F:6B:9B:A6:95:D8:75:F7:0A:95:DB:C3:6A:93:64:D0:03:09:A1:AD
Certificate issuer:       /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial:       47E5AF504EB340B8A51DA922F0B935D6B0E6362C
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230302e36332e34302e302f32312d3234203d3e20323635353430.roa
Signing time:             Tue 06 Jan 2026 19:42:41 +0000
ROA not before:           Tue 06 Jan 2026 19:37:41 +0000
ROA not after:            Tue 05 Jan 2027 19:42:41 +0000
asID:                     265540
IP address blocks:        200.63.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e5:af:50:4e:b3:40:b8:a5:1d:a9:22:f0:b9:35:d6:b0:e6:36:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
        Validity
            Not Before: Jan  6 19:37:41 2026 GMT
            Not After : Jan  5 19:42:41 2027 GMT
        Subject: CN=7F6B9BA695D875F70A95DBC36A9364D00309A1AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:dd:b9:77:59:34:d6:3d:0d:6d:4f:c4:f5:
                    5c:2f:da:77:f8:cc:55:48:81:68:d0:95:c6:7e:eb:
                    70:68:44:a4:59:c4:d7:16:ec:24:c6:92:77:14:91:
                    83:a8:75:c9:34:7e:d4:8a:dd:c0:23:bf:d4:07:b8:
                    d8:a8:46:f5:5b:dd:61:11:41:09:04:c6:e9:22:5e:
                    e4:23:45:ad:e1:01:b1:ae:f3:5c:21:70:d6:2b:cf:
                    1e:49:32:d5:23:59:a3:c9:a4:c2:9c:f5:22:c0:9b:
                    94:16:b0:db:8f:e0:bd:19:20:95:d2:2e:1a:01:92:
                    ce:d1:6e:67:98:f5:d4:4c:a5:bb:54:bc:62:78:59:
                    0f:66:ce:4b:2b:62:f9:c2:a6:0d:0f:7c:24:00:c4:
                    27:66:54:47:5d:04:8b:87:0f:79:83:e5:c5:85:00:
                    f0:6f:0d:e6:5a:06:e4:10:1c:35:56:dd:8c:5a:4a:
                    dd:ed:ca:39:d0:22:48:54:74:44:f1:b1:b6:52:7e:
                    7c:8c:8a:b7:73:e9:08:b2:b7:bd:0e:90:24:87:cb:
                    cd:3e:41:3f:c3:68:4b:9e:35:b7:aa:81:cd:ce:e5:
                    d3:71:b5:44:a3:5b:bd:0d:73:56:d7:7a:45:14:be:
                    82:dc:4a:5a:11:a5:42:62:c1:87:a1:fc:a3:b5:ba:
                    da:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6B:9B:A6:95:D8:75:F7:0A:95:DB:C3:6A:93:64:D0:03:09:A1:AD
            X509v3 Authority Key Identifier:
                keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230302e36332e34302e302f32312d3234203d3e20323635353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:2a:e6:1a:3c:e4:da:1d:28:74:7c:67:df:13:df:96:8a:61:
         f4:2c:1f:73:ab:2c:59:ec:91:94:db:8c:4c:34:76:a8:02:3a:
         8a:94:af:3a:08:d2:00:2d:17:1a:ed:d0:c2:8b:cc:f3:64:aa:
         0e:fd:1f:cc:59:7a:13:16:35:c7:91:3f:7d:99:d7:28:f1:43:
         89:7f:72:74:03:c9:76:9a:93:a8:05:d4:e4:d3:cc:d0:50:12:
         71:a6:4f:5f:b0:4d:cb:ff:82:06:be:fa:a9:f4:79:9e:70:8f:
         b3:88:58:2c:38:3c:01:90:c9:d7:e7:54:6f:56:04:11:13:f0:
         fe:18:42:f3:42:62:b3:ef:45:03:03:ba:10:39:a1:2c:b1:57:
         bc:fe:b6:8e:75:f1:46:9f:64:3d:ac:97:0e:cf:b3:7b:b8:33:
         18:61:47:ec:c4:f9:e8:dd:13:c5:05:03:a7:48:1f:1c:f4:9a:
         aa:a5:57:ae:e6:a7:9e:17:cb:c3:e1:92:e8:09:08:99:f3:51:
         e7:95:51:36:8f:e8:85:04:c1:8b:0d:10:c4:15:f0:c0:fe:55:
         dd:ba:53:84:c6:36:92:37:c2:a4:6d:73:2b:e9:bc:29:65:15:
         45:b2:67:ce:ef:1f:32:fb:30:9b:c5:c6:35:cb:89:0b:a2:f9:
         7b:28:74:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:09 2026 by rpki-client