This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3230382e302f32342d3234203d3e203532323731.roa
File:                     3136372e3235302e3230382e302f32342d3234203d3e203532323731.roa (raw, json)
Hash identifier:          woNdFir1XljfNGJlLtPo6SLuOtKvPbB903I8D1Y/1nk=
Subject key identifier:   07:34:C7:03:C4:76:C1:EE:E7:22:0D:6D:3B:83:86:D7:8A:A5:3A:95
Certificate issuer:       /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial:       10B0E83E023904CF9CCF7D0FE719F3CC8BD4E1C1
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3230382e302f32342d3234203d3e203532323731.roa
Signing time:             Tue 06 Jan 2026 19:40:15 +0000
ROA not before:           Tue 06 Jan 2026 19:35:15 +0000
ROA not after:            Tue 05 Jan 2027 19:40:15 +0000
asID:                     52271
IP address blocks:        167.250.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b0:e8:3e:02:39:04:cf:9c:cf:7d:0f:e7:19:f3:cc:8b:d4:e1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85939B22368B791C18889C114876582A293716F4
        Validity
            Not Before: Jan  6 19:35:15 2026 GMT
            Not After : Jan  5 19:40:15 2027 GMT
        Subject: CN=0734C703C476C1EEE7220D6D3B8386D78AA53A95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ea:54:a4:0f:fe:f9:dd:35:f2:c4:9e:c9:e0:
                    ce:8b:3f:17:5a:15:3c:e2:f5:9d:df:2f:e2:6b:64:
                    8d:26:0f:45:71:25:6f:fb:35:42:e4:7a:63:cf:d2:
                    4b:4d:42:51:45:7d:f0:c1:50:29:46:83:16:61:1a:
                    75:89:d0:17:15:86:68:15:e7:7d:97:f0:48:e0:5a:
                    e1:b2:cd:f3:86:18:d1:ef:48:1a:73:8b:e1:35:24:
                    5b:6c:5b:41:be:7a:9a:c6:34:1b:d1:cc:ac:be:40:
                    a8:53:c4:89:c5:db:e4:89:60:f7:cb:0b:83:7a:a8:
                    94:5a:93:5f:aa:01:cf:d5:fa:4b:32:3b:8a:cd:5a:
                    29:60:2f:c5:0d:ad:a5:ea:5f:53:ee:47:34:97:42:
                    43:33:16:19:c4:62:a0:fe:51:d7:e9:6f:1f:93:8f:
                    bd:ef:8c:66:c2:a2:23:cc:1c:1c:46:f9:63:b8:0e:
                    77:57:62:79:2e:dd:58:85:62:7b:50:bd:d8:59:0c:
                    5c:81:f1:18:78:29:98:61:7c:f9:e5:2b:05:85:a3:
                    b5:65:21:c4:ad:f3:37:87:17:10:77:3c:dc:56:2b:
                    f8:09:50:e3:6a:78:b3:3d:40:31:19:f2:f3:17:d0:
                    75:b2:8a:6c:18:61:44:20:74:2f:c5:71:47:5e:d5:
                    8c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:34:C7:03:C4:76:C1:EE:E7:22:0D:6D:3B:83:86:D7:8A:A5:3A:95
            X509v3 Authority Key Identifier:
                keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3230382e302f32342d3234203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:5d:70:13:db:43:e4:1f:92:a0:e7:35:47:d8:6f:f7:d0:f7:
         10:48:4a:9d:87:67:0e:a7:63:04:b7:45:5b:7f:7a:3c:9d:cc:
         3e:b3:5b:bf:64:8e:f1:6d:cc:6b:b1:89:76:68:e7:0c:54:a5:
         42:79:6d:d8:97:65:07:f4:4e:b3:1d:b1:ca:e9:af:cf:33:75:
         66:f4:02:2c:3a:02:45:68:30:bc:c8:88:28:c7:b6:17:56:76:
         f4:60:23:4c:08:7f:61:a8:fb:4f:92:2e:f5:10:8b:48:32:18:
         de:b0:f8:79:98:78:68:63:a3:8c:84:0e:e9:e3:fc:6a:57:b2:
         46:c0:9b:b0:26:0b:e8:6c:ee:5a:6b:7e:e2:18:c6:63:7f:47:
         d4:0f:ba:32:c3:89:31:26:30:75:8b:ad:21:83:9f:dc:bc:7b:
         c9:e5:75:1c:b8:de:20:ca:67:33:4a:f0:8a:0f:2b:c5:51:3b:
         9f:64:ab:a4:34:68:fb:a1:a7:9f:45:47:be:cd:7b:eb:01:9d:
         0f:f4:e3:f2:1e:52:fa:0d:86:14:a7:5c:b9:3a:45:9f:2e:1f:
         60:3e:3b:22:f0:8b:12:f0:34:b5:48:6f:a5:15:44:f3:1f:12:
         10:0c:0f:76:02:6a:14:d2:81:73:b8:d6:dc:90:d5:17:80:51:
         55:f4:27:e0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUELDoPgI5BM+cz30P5xnzzIvU4cEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU5MzlCMjIzNjhCNzkxQzE4ODg5QzExNDg3NjU4MkEy
OTM3MTZGNDAeFw0yNjAxMDYxOTM1MTVaFw0yNzAxMDUxOTQwMTVaMDMxMTAvBgNV
BAMTKDA3MzRDNzAzQzQ3NkMxRUVFNzIyMEQ2RDNCODM4NkQ3OEFBNTNBOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt6lSkD/753TXyxJ7J4M6LPxda
FTzi9Z3fL+JrZI0mD0VxJW/7NULkemPP0ktNQlFFffDBUClGgxZhGnWJ0BcVhmgV
532X8EjgWuGyzfOGGNHvSBpzi+E1JFtsW0G+eprGNBvRzKy+QKhTxInF2+SJYPfL
C4N6qJRak1+qAc/V+ksyO4rNWilgL8UNraXqX1PuRzSXQkMzFhnEYqD+Udfpbx+T
j73vjGbCoiPMHBxG+WO4DndXYnku3ViFYntQvdhZDFyB8Rh4KZhhfPnlKwWFo7Vl
IcSt8zeHFxB3PNxWK/gJUONqeLM9QDEZ8vMX0HWyimwYYUQgdC/FcUde1YzzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBzTHA8R2we7nIg1tO4OG14qlOpUwHwYDVR0j
BBgwFoAUhZObIjaLeRwYiJwRSHZYKik3FvQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOEQ0REE2NEE5QzVCMjE5QjdFQkUxMEI4NDZGRjM5NDZB
NzdGNzQyMDQ0ODRFRDVFODVFNjA2NzAwNjM5MzYzLzAvODU5MzlCMjIzNjhCNzkx
QzE4ODg5QzExNDg3NjU4MkEyOTM3MTZGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTkzOUIyMjM2OEI3OTFDMTg4
ODlDMTE0ODc2NTgyQTI5MzcxNkY0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMThENERBNjRBOUM1QjIxOUI3RUJFMTBCODQ2RkYzOTQ2QTc3Rjc0MjA0
NDg0RUQ1RTg1RTYwNjcwMDYzOTM2My8wLzMxMzYzNzJlMzIzNTMwMmUzMjMwMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/rQ
MA0GCSqGSIb3DQEBCwUAA4IBAQA8XXAT20PkH5Kg5zVH2G/30PcQSEqdh2cOp2ME
t0Vbf3o8ncw+s1u/ZI7xbcxrsYl2aOcMVKVCeW3Yl2UH9E6zHbHK6a/PM3Vm9AIs
OgJFaDC8yIgox7YXVnb0YCNMCH9hqPtPki71EItIMhjesPh5mHhoY6OMhA7p4/xq
V7JGwJuwJgvobO5aa37iGMZjf0fUD7oyw4kxJjB1i60hg5/cvHvJ5XUcuN4gymcz
SvCKDyvFUTufZKukNGj7oaefRUe+zXvrAZ0P9OPyHlL6DYYUp1y5OkWfLh9gPjsi
8IsS8DS1SG+lFUTzHxIQDA92AmoU0oFzuNbckNUXgFFV9Cfg
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:38 2026 by rpki-client