This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230372e302f32342d3234203d3e20323632323533.roa
File:                     3136372e3235302e3230372e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          G9z+CEgK69FZBJdiG0UrzqOOY1x+cGoUIyfLhG3W5is=
Subject key identifier:   9A:E1:BE:86:36:32:2E:A6:E3:19:1A:5A:7A:AC:45:27:DA:1F:16:13
Certificate issuer:       /CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
Certificate serial:       500352E4E29E664C5B2F4400BD945BA0035B7A41
Authority key identifier: D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230372e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 06 Jan 2026 20:51:41 +0000
ROA not before:           Tue 06 Jan 2026 20:46:41 +0000
ROA not after:            Tue 05 Jan 2027 20:51:41 +0000
asID:                     262253
IP address blocks:        167.250.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 16:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:03:52:e4:e2:9e:66:4c:5b:2f:44:00:bd:94:5b:a0:03:5b:7a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
        Validity
            Not Before: Jan  6 20:46:41 2026 GMT
            Not After : Jan  5 20:51:41 2027 GMT
        Subject: CN=9AE1BE8636322EA6E3191A5A7AAC4527DA1F1613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:5b:d8:47:90:ac:6d:3c:4b:de:78:f5:6e:
                    1a:55:13:2a:49:e5:62:4b:ed:a0:5d:eb:78:18:3e:
                    08:2b:8b:d9:11:3d:a8:21:d7:8a:46:91:8b:d7:a6:
                    c6:b2:8f:c0:3b:8c:be:91:05:c5:a7:39:2c:f7:c0:
                    9e:f9:b6:b0:f2:ef:76:f7:90:73:f5:1c:0b:60:e0:
                    66:0f:2e:0f:a8:99:22:ca:b0:c7:46:46:1d:be:d1:
                    a3:8c:42:c3:8d:77:0c:60:a9:ea:79:dc:64:fb:62:
                    ff:95:c4:94:6d:f0:46:29:07:c1:d0:19:f3:6f:ad:
                    fe:56:ed:e0:a6:82:ca:c3:76:30:94:51:bb:80:31:
                    1a:88:36:ec:d8:6b:0d:c3:d2:cc:8e:51:96:a7:00:
                    80:18:e3:c4:23:d4:8a:a4:ba:81:c5:e8:fc:55:9c:
                    cd:0a:25:a0:49:f9:e9:f7:f5:c3:74:b9:92:17:8e:
                    ea:29:7f:92:5f:61:a5:0c:8f:c9:e5:c9:2c:f5:cb:
                    45:1f:59:2d:cd:45:70:8e:3d:1c:7d:2a:35:0e:92:
                    1e:fb:cc:ce:1d:aa:1e:c2:3d:ca:b1:9a:a7:3d:96:
                    83:63:3b:d6:48:a3:5d:96:fc:b3:2d:36:4b:6c:99:
                    b5:f9:af:d8:2d:63:d4:df:53:be:a1:8c:eb:64:b8:
                    09:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E1:BE:86:36:32:2E:A6:E3:19:1A:5A:7A:AC:45:27:DA:1F:16:13
            X509v3 Authority Key Identifier:
                keyid:D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230372e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:99:e8:f6:f9:f8:b1:67:73:1e:28:fd:e2:0f:73:0f:ad:b1:
         3a:63:d0:48:02:45:67:86:f1:dc:55:44:f4:01:90:24:19:70:
         85:fb:87:0a:81:64:81:00:ce:5e:04:78:30:5b:8c:3d:b0:55:
         81:a5:a0:ec:a5:43:a1:c3:97:42:b9:f1:c2:ec:70:92:0e:9e:
         0a:ae:0e:79:42:19:4c:d1:09:35:df:5b:44:17:5c:51:2f:b0:
         20:07:50:21:90:25:c6:8a:06:ee:02:b7:63:70:9a:50:db:83:
         5c:d0:1a:bf:8f:2a:c1:c1:54:96:e0:a7:e2:dc:87:f8:2d:fd:
         a1:93:1e:01:a4:75:3c:48:e4:bd:15:18:a2:f9:b1:0b:6b:35:
         68:91:75:b1:e0:62:6b:82:0a:c8:b6:33:c4:ae:1a:ef:51:77:
         72:52:1f:d9:97:b3:b5:07:b8:f9:25:39:e0:d4:0f:fa:10:ed:
         29:1f:25:b2:7d:c5:c4:7f:a2:8e:b6:56:7c:aa:38:cf:44:a9:
         1e:60:d4:3f:f3:39:ac:51:0e:34:e2:1d:c6:af:46:f9:df:09:
         92:36:d6:ef:2d:5b:f3:3c:84:a3:f7:c1:b6:a6:57:81:ab:b7:
         8d:0a:8a:fe:75:c3:91:94:cd:23:5d:d0:df:92:b4:15:df:5a:
         ed:8d:cc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:55 2026 by rpki-client