This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e203139353832.roa
File:                     323830313a303a3464303a3a2f34382d3438203d3e203139353832.roa (raw, json)
Hash identifier:          060vjulZOflvYjF75ovUTRyUuwQhB+08U3b4hjSbgqA=
Subject key identifier:   BF:0E:BB:A4:80:A0:F5:52:31:B2:D9:05:0F:E5:4F:6F:39:BA:89:14
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       6F1EAE3DE5B9EB197A034D0CE282C854ADAF5600
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e203139353832.roa
Signing time:             Tue 06 Jan 2026 19:45:59 +0000
ROA not before:           Tue 06 Jan 2026 19:40:59 +0000
ROA not after:            Tue 05 Jan 2027 19:45:59 +0000
asID:                     19582
IP address blocks:        2801:0:4d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1e:ae:3d:e5:b9:eb:19:7a:03:4d:0c:e2:82:c8:54:ad:af:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Jan  6 19:40:59 2026 GMT
            Not After : Jan  5 19:45:59 2027 GMT
        Subject: CN=BF0EBBA480A0F55231B2D9050FE54F6F39BA8914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:be:63:ad:41:31:cf:23:27:ff:bb:47:ff:00:
                    5c:33:55:88:d6:ec:d5:76:ab:50:f8:d7:7d:82:07:
                    75:e3:bd:9a:94:52:7f:ac:0e:2e:16:40:89:21:5a:
                    2b:1c:29:19:6b:33:e9:2c:90:6c:08:bf:c7:9a:10:
                    4e:06:b0:c4:f8:d2:21:d8:1c:81:21:e1:dd:24:fe:
                    01:e5:28:9b:ca:54:0f:aa:79:db:dc:37:13:9b:bf:
                    1c:ae:d9:11:de:d1:4f:1d:86:a8:62:78:b7:cb:fd:
                    52:07:96:e9:90:bf:de:48:a6:ba:00:28:6f:62:0f:
                    30:ca:bf:6f:21:bb:d2:ad:9d:8c:00:65:b6:8e:62:
                    7c:08:18:d8:f8:e1:c6:21:67:c7:2d:45:36:41:30:
                    a6:4c:6f:99:85:4c:6f:70:3a:53:ec:54:0e:57:23:
                    6b:44:cf:ca:bb:38:46:fd:66:13:04:5a:c0:66:8e:
                    83:cf:fc:ef:f6:d1:82:11:9d:f6:e4:70:35:95:9c:
                    48:34:cc:dc:5c:db:c1:a2:a7:2d:5a:b2:97:01:65:
                    1b:aa:50:6e:e0:58:46:a7:da:b4:7d:0e:2d:1c:fd:
                    bc:86:4b:70:2a:0e:ee:ad:be:b7:7e:ec:e0:38:2f:
                    9a:b1:b0:d0:01:05:4e:51:d9:4f:c1:90:48:dc:ff:
                    2e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0E:BB:A4:80:A0:F5:52:31:B2:D9:05:0F:E5:4F:6F:39:BA:89:14
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e203139353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:4d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:4d:95:99:49:55:42:37:37:bf:ce:2d:c5:99:82:e3:f5:39:
         74:ad:e6:de:11:4e:ab:e5:46:71:1f:5b:41:bf:de:e9:00:60:
         0b:53:d7:43:a3:e4:07:31:3f:79:a2:ad:96:f9:95:7e:38:c8:
         3d:01:75:a4:fd:ec:0d:59:1c:24:4c:03:f4:69:b0:1c:61:10:
         1c:77:d9:24:5d:df:68:a6:6f:1e:b8:69:24:eb:be:45:11:79:
         cb:dc:ca:51:ed:27:1d:83:9c:c6:6c:5f:e8:b5:31:c9:22:73:
         a1:95:5b:82:34:a6:71:ed:aa:52:0b:e9:67:b7:66:2a:d1:85:
         0b:44:77:72:05:af:2b:32:11:89:d5:6a:3c:a2:53:3a:40:32:
         81:67:e8:a1:59:1a:d3:f2:1b:79:30:4b:c1:5e:80:99:9c:6d:
         4a:d1:94:73:90:9d:09:51:34:de:be:2a:4e:79:d4:38:09:5c:
         f4:d3:f9:b8:8b:db:cd:f4:b3:cb:ba:91:3c:75:c6:c6:61:d9:
         bb:37:6d:eb:99:ac:9d:c6:2e:d5:9a:ea:2a:6a:0c:e8:5b:2e:
         84:4c:98:7b:9d:f7:c2:78:58:5c:3b:c2:e3:be:9a:c7:1b:9a:
         e5:c3:bf:96:76:25:78:e7:6f:8d:76:72:3e:b9:73:0d:af:3e:
         06:3d:51:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:13:57 2026 by rpki-client