This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39352e302f32342d3234203d3e20323732303436.roa
File:                     3230302e36332e39352e302f32342d3234203d3e20323732303436.roa (raw, json)
Hash identifier:          VxXQ3d17rMyqlGzdL1/hUWFKi60x62IChtbQspAiiQc=
Subject key identifier:   F8:3B:93:8C:7B:F7:C5:D4:92:2C:6F:E8:53:1E:E1:45:3A:CF:96:E7
Certificate issuer:       /CN=89FBB987F4762D9626E55719EF46050943DEE51C
Certificate serial:       2B2EBB3B0794A3AD576CDF7144E050D5D5C7F8EB
Authority key identifier: 89:FB:B9:87:F4:76:2D:96:26:E5:57:19:EF:46:05:09:43:DE:E5:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39352e302f32342d3234203d3e20323732303436.roa
Signing time:             Tue 06 Jan 2026 20:55:56 +0000
ROA not before:           Tue 06 Jan 2026 20:50:56 +0000
ROA not after:            Tue 05 Jan 2027 20:55:56 +0000
asID:                     272046
IP address blocks:        200.63.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 01:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2e:bb:3b:07:94:a3:ad:57:6c:df:71:44:e0:50:d5:d5:c7:f8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89FBB987F4762D9626E55719EF46050943DEE51C
        Validity
            Not Before: Jan  6 20:50:56 2026 GMT
            Not After : Jan  5 20:55:56 2027 GMT
        Subject: CN=F83B938C7BF7C5D4922C6FE8531EE1453ACF96E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:31:d7:39:1e:06:06:1a:6d:b8:88:54:50:6e:
                    ba:44:36:11:17:9b:74:dc:f6:40:fd:5b:12:45:8a:
                    3d:17:c5:c4:c3:e0:16:79:da:67:c2:19:1a:0e:0f:
                    1f:5b:eb:35:07:a5:48:f4:7a:36:27:b7:73:ed:e5:
                    c2:bc:e1:ce:b6:02:11:1e:30:09:f4:a1:27:94:6b:
                    79:54:9e:8d:2e:e5:50:13:ca:82:50:f2:26:f4:ac:
                    91:9a:ae:5b:25:c4:d3:cd:e7:4b:ce:f7:1f:5e:a4:
                    c8:8c:45:38:f2:d3:76:a2:85:2d:90:70:3f:e3:a3:
                    c1:bc:68:8a:95:b7:ba:90:ca:f5:94:a3:a1:9a:f3:
                    fb:ff:38:46:69:d4:1e:f2:d5:6a:95:d3:83:c9:92:
                    b8:93:4e:ae:7b:a7:0a:e6:8a:da:91:9b:2c:b9:c8:
                    95:a6:e5:b2:dd:0f:75:83:ce:d1:eb:7b:54:6b:12:
                    41:c1:fa:de:d1:ac:29:7a:8f:53:5d:56:4d:03:97:
                    e0:d8:1c:a0:79:20:55:44:46:ce:e2:45:5f:4a:00:
                    df:e9:b5:3d:38:02:fb:21:f7:48:dd:73:d7:eb:d0:
                    f1:c0:9a:a3:09:89:18:b6:91:30:da:52:94:81:86:
                    70:a4:ca:20:78:75:fd:2f:5e:51:3f:ce:ec:e1:e3:
                    5d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3B:93:8C:7B:F7:C5:D4:92:2C:6F:E8:53:1E:E1:45:3A:CF:96:E7
            X509v3 Authority Key Identifier:
                keyid:89:FB:B9:87:F4:76:2D:96:26:E5:57:19:EF:46:05:09:43:DE:E5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39352e302f32342d3234203d3e20323732303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:6c:84:a5:ac:d5:55:f5:f3:a6:0a:92:95:6f:f9:1b:35:cf:
         5c:7c:78:3e:ce:57:4a:96:df:37:ee:0b:e8:ea:a4:6a:1c:84:
         33:4b:28:67:5c:64:b4:ae:13:1a:fc:d0:16:4b:cb:cf:97:a8:
         f5:51:6c:61:ac:af:e2:f4:e2:8a:79:e2:da:98:66:24:a3:59:
         55:5f:cc:2d:f3:a3:fb:85:10:ed:b4:dc:f9:b4:d8:b3:d6:78:
         e9:6e:e8:5b:b5:a4:7e:61:87:b8:6b:3d:47:b7:0c:88:b6:b8:
         b3:d4:8a:3f:bf:5c:b8:cb:91:e9:23:45:4e:4c:45:cf:8e:60:
         08:0d:ff:db:b1:89:1f:a7:3b:28:71:18:ec:52:d8:df:00:1c:
         40:24:12:ed:85:65:4b:36:c7:5d:e8:d4:09:f3:66:93:d1:ef:
         4c:60:25:92:87:28:ee:b5:19:a7:13:62:cb:6d:de:0a:33:ab:
         07:25:6e:dd:aa:b7:58:65:69:c4:32:ef:f7:f0:cc:88:e6:82:
         2d:dc:a0:18:51:9e:a9:b8:9f:94:6b:64:32:11:89:d1:02:b2:
         af:34:11:52:cb:79:a5:7f:fc:3d:b5:4e:b2:77:48:60:26:37:
         29:ad:68:bc:20:80:5d:bc:31:6e:4b:c5:ac:dc:8a:60:58:a1:
         bf:3d:73:60
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUKy67OweUo61XbN9xROBQ1dXH+OswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlGQkI5ODdGNDc2MkQ5NjI2RTU1NzE5RUY0NjA1MDk0
M0RFRTUxQzAeFw0yNjAxMDYyMDUwNTZaFw0yNzAxMDUyMDU1NTZaMDMxMTAvBgNV
BAMTKEY4M0I5MzhDN0JGN0M1RDQ5MjJDNkZFODUzMUVFMTQ1M0FDRjk2RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfMdc5HgYGGm24iFRQbrpENhEX
m3Tc9kD9WxJFij0XxcTD4BZ52mfCGRoODx9b6zUHpUj0ejYnt3Pt5cK84c62AhEe
MAn0oSeUa3lUno0u5VATyoJQ8ib0rJGarlslxNPN50vO9x9epMiMRTjy03aihS2Q
cD/jo8G8aIqVt7qQyvWUo6Ga8/v/OEZp1B7y1WqV04PJkriTTq57pwrmitqRmyy5
yJWm5bLdD3WDztHre1RrEkHB+t7RrCl6j1NdVk0Dl+DYHKB5IFVERs7iRV9KAN/p
tT04Avsh90jdc9fr0PHAmqMJiRi2kTDaUpSBhnCkyiB4df0vXlE/zuzh410bAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU+DuTjHv3xdSSLG/oUx7hRTrPlucwHwYDVR0j
BBgwFoAUifu5h/R2LZYm5VcZ70YFCUPe5RwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QkFBRUZBQkZGQjQwNzdCMDJGMzdBNkNBNEVBQzUzOUI0
MDc5NDgxQzgwQzgzRjZGOUQyQkZGMzA3NDRDRkFBLzAvODlGQkI5ODdGNDc2MkQ5
NjI2RTU1NzE5RUY0NjA1MDk0M0RFRTUxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OUZCQjk4N0Y0NzYyRDk2MjZF
NTU3MTlFRjQ2MDUwOTQzREVFNTFDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkJBQUVGQUJGRkI0MDc3QjAyRjM3QTZDQTRFQUM1MzlCNDA3OTQ4MUM4
MEM4M0Y2RjlEMkJGRjMwNzQ0Q0ZBQS8wLzMyMzAzMDJlMzYzMzJlMzkzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMjMwMzQzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg/XzAN
BgkqhkiG9w0BAQsFAAOCAQEAkWyEpazVVfXzpgqSlW/5GzXPXHx4Ps5XSpbfN+4L
6OqkahyEM0soZ1xktK4TGvzQFkvLz5eo9VFsYayv4vTiinni2phmJKNZVV/MLfOj
+4UQ7bTc+bTYs9Z46W7oW7WkfmGHuGs9R7cMiLa4s9SKP79cuMuR6SNFTkxFz45g
CA3/27GJH6c7KHEY7FLY3wAcQCQS7YVlSzbHXejUCfNmk9HvTGAlkoco7rUZpxNi
y23eCjOrByVu3aq3WGVpxDLv9/DMiOaCLdygGFGeqbiflGtkMhGJ0QKyrzQRUst5
pX/8PbVOsndIYCY3Ka1ovCCAXbwxbkvFrNyKYFihvz1zYA==
-----END CERTIFICATE-----
Generated at Tue Jan 13 05:21:54 2026 by rpki-client