This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230362e302f32342d3234203d3e20323632323533.roa
File:                     3136372e3235302e3230362e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          udH8+g4aR9Jj7IWUvrXNya816gvkBxPg1ErFLczcJJI=
Subject key identifier:   D7:3A:BD:E6:9C:97:7C:B7:56:88:74:E5:11:A9:D4:39:97:BA:AF:0C
Certificate issuer:       /CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
Certificate serial:       4D8CA8363A5FB8727EAC1470A082D8E5C04A79D9
Authority key identifier: D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230362e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 06 Jan 2026 20:51:42 +0000
ROA not before:           Tue 06 Jan 2026 20:46:42 +0000
ROA not after:            Tue 05 Jan 2027 20:51:42 +0000
asID:                     262253
IP address blocks:        167.250.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 16:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8c:a8:36:3a:5f:b8:72:7e:ac:14:70:a0:82:d8:e5:c0:4a:79:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
        Validity
            Not Before: Jan  6 20:46:42 2026 GMT
            Not After : Jan  5 20:51:42 2027 GMT
        Subject: CN=D73ABDE69C977CB7568874E511A9D43997BAAF0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:ba:27:5a:87:78:20:aa:d7:10:01:23:f5:
                    eb:32:be:4e:84:53:67:1c:29:f9:67:70:d9:ee:0a:
                    a1:17:c9:2d:7e:46:0e:c0:79:14:51:0f:e4:a6:05:
                    c8:34:2c:1b:b2:e0:ba:41:ad:80:63:51:fe:fa:9a:
                    6f:7b:a5:c8:be:81:bf:79:9c:65:20:c5:1b:0b:04:
                    e3:32:d0:c1:03:37:65:23:d1:75:e8:ff:60:3c:b0:
                    1d:ea:4e:50:82:78:ce:45:68:64:67:95:73:fe:e6:
                    7c:e6:f4:f9:97:b7:3b:6e:bf:df:c9:1f:db:b0:67:
                    ae:8b:1e:c2:a7:f9:c0:f6:aa:e0:90:0c:d4:62:99:
                    d0:92:2d:60:4e:02:1c:f1:91:e6:ed:59:49:64:fa:
                    b1:b9:0a:2c:8a:eb:f7:f2:ce:69:9e:a5:b5:6f:c4:
                    68:80:a9:60:fe:71:16:c9:79:94:53:37:8c:07:c1:
                    04:e9:fa:70:c4:f0:9d:3a:5a:45:be:ee:5e:11:ce:
                    e2:af:1a:58:85:7b:63:c0:5a:3c:8d:e9:83:7d:e4:
                    89:3e:fd:f8:ba:3b:41:79:f8:3c:22:a2:df:c0:2e:
                    6c:8a:19:66:bd:1d:9d:b9:c5:6a:ab:c0:0c:df:d4:
                    8b:06:7e:e6:05:2f:c5:c8:0a:14:e2:c0:88:f0:22:
                    99:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3A:BD:E6:9C:97:7C:B7:56:88:74:E5:11:A9:D4:39:97:BA:AF:0C
            X509v3 Authority Key Identifier:
                keyid:D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230362e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:66:69:37:d9:dd:1f:9e:48:63:5f:01:31:46:d1:17:d2:7f:
         a7:37:4f:f4:1a:7f:ba:1c:32:6f:eb:c5:3b:fd:cd:6e:fe:76:
         54:a2:a1:11:59:9a:a6:f3:8d:ae:51:3e:fb:29:53:5f:92:70:
         12:c6:dc:d9:65:f0:6b:90:38:c5:a8:d5:cc:69:7e:7f:1e:17:
         18:73:d9:6d:14:9b:d0:9e:85:04:fd:e6:1f:e9:d6:4f:6f:51:
         8d:0a:d8:eb:6f:d1:1b:f1:f9:72:73:d1:9e:e5:8f:ba:f4:77:
         5f:63:47:e4:76:6d:c8:31:52:ec:ee:4b:22:f9:01:2b:af:ae:
         5d:e8:43:bf:34:4b:80:e1:fc:b6:75:0d:ab:39:2d:98:15:15:
         89:31:f7:a6:8f:b7:b8:7f:ce:f6:e9:16:7b:ba:6d:86:61:14:
         3d:19:cc:97:cb:10:9e:87:c2:0c:e1:d4:a7:79:de:9f:a9:f5:
         56:ca:01:93:25:5d:08:2b:ac:21:f5:5a:95:32:11:b5:47:13:
         a1:1c:cc:23:5c:44:14:e5:9b:58:fb:0f:27:49:90:8d:1c:10:
         39:15:0f:1c:70:fc:4d:39:33:ad:dc:27:4b:f8:a8:92:1e:9c:
         f9:38:8f:5d:9b:06:fc:5e:41:af:a6:e6:0f:b9:59:54:05:ab:
         8a:c6:32:76
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUTYyoNjpfuHJ+rBRwoILY5cBKedkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhGQzY3NzIwNUIwREE5Q0E5NzlCNkQ2OEI5NUI0OUM0
QjZDMzI2NzAeFw0yNjAxMDYyMDQ2NDJaFw0yNzAxMDUyMDUxNDJaMDMxMTAvBgNV
BAMTKEQ3M0FCREU2OUM5NzdDQjc1Njg4NzRFNTExQTlENDM5OTdCQUFGMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyoronWod4IKrXEAEj9esyvk6E
U2ccKflncNnuCqEXyS1+Rg7AeRRRD+SmBcg0LBuy4LpBrYBjUf76mm97pci+gb95
nGUgxRsLBOMy0MEDN2Uj0XXo/2A8sB3qTlCCeM5FaGRnlXP+5nzm9PmXtztuv9/J
H9uwZ66LHsKn+cD2quCQDNRimdCSLWBOAhzxkebtWUlk+rG5CiyK6/fyzmmepbVv
xGiAqWD+cRbJeZRTN4wHwQTp+nDE8J06WkW+7l4RzuKvGliFe2PAWjyN6YN95Ik+
/fi6O0F5+Dwiot/ALmyKGWa9HZ25xWqrwAzf1IsGfuYFL8XIChTiwIjwIpmlAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU1zq95pyXfLdWiHTlEanUOZe6rwwwHwYDVR0j
BBgwFoAU2PxncgWw2pypebbWi5W0nEtsMmcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEMzNEI4RjFDNDY1ODY5RTIxOUE2NUNBMzY5RTAyM0Iy
MUZEQUIyQ0MxQUQ2OTEwODhCM0Q4OEMxNERDRUIwLzAvRDhGQzY3NzIwNUIwREE5
Q0E5NzlCNkQ2OEI5NUI0OUM0QjZDMzI2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEZDNjc3MjA1QjBEQTlDQTk3
OUI2RDY4Qjk1QjQ5QzRCNkMzMjY3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRDMzRCOEYxQzQ2NTg2OUUyMTlBNjVDQTM2OUUwMjNCMjFGREFCMkND
MUFENjkxMDg4QjNEODhDMTREQ0VCMC8wLzMxMzYzNzJlMzIzNTMwMmUzMjMwMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjM1MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACn
+s4wDQYJKoZIhvcNAQELBQADggEBALBmaTfZ3R+eSGNfATFG0RfSf6c3T/Qaf7oc
Mm/rxTv9zW7+dlSioRFZmqbzja5RPvspU1+ScBLG3Nll8GuQOMWo1cxpfn8eFxhz
2W0Um9CehQT95h/p1k9vUY0K2Otv0Rvx+XJz0Z7lj7r0d19jR+R2bcgxUuzuSyL5
ASuvrl3oQ780S4Dh/LZ1Das5LZgVFYkx96aPt7h/zvbpFnu6bYZhFD0ZzJfLEJ6H
wgzh1Kd53p+p9VbKAZMlXQgrrCH1WpUyEbVHE6EczCNcRBTlm1j7DydJkI0cEDkV
Dxxw/E05M63cJ0v4qJIenPk4j12bBvxeQa+m5g+5WVQFq4rGMnY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:53 2026 by rpki-client