This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3231302e302f32342d3234203d3e203532323731.roa
File:                     3136372e3235302e3231302e302f32342d3234203d3e203532323731.roa (raw, json)
Hash identifier:          MK30IM8oxGVHgaSWYjX+muy5xWx42eEmKoqL8Z/lW6M=
Subject key identifier:   DB:E3:1A:29:42:97:50:98:61:38:E6:4A:7A:A7:B7:13:35:86:23:11
Certificate issuer:       /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial:       64D57A3857787F181F53E706ABF4BEBEE3AC8E66
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3231302e302f32342d3234203d3e203532323731.roa
Signing time:             Tue 06 Jan 2026 19:40:12 +0000
ROA not before:           Tue 06 Jan 2026 19:35:12 +0000
ROA not after:            Tue 05 Jan 2027 19:40:12 +0000
asID:                     52271
IP address blocks:        167.250.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d5:7a:38:57:78:7f:18:1f:53:e7:06:ab:f4:be:be:e3:ac:8e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85939B22368B791C18889C114876582A293716F4
        Validity
            Not Before: Jan  6 19:35:12 2026 GMT
            Not After : Jan  5 19:40:12 2027 GMT
        Subject: CN=DBE31A29429750986138E64A7AA7B71335862311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:fa:bb:07:c5:f1:5a:6a:b8:88:b9:bb:1b:
                    e5:ad:45:06:3e:ac:87:70:d7:d9:05:49:ae:e3:cc:
                    9b:e9:ff:94:0a:c3:95:f5:3c:09:e3:e2:e7:bd:59:
                    50:a2:b6:ca:f1:70:42:50:df:12:3c:2a:c2:d1:2d:
                    11:82:e8:28:d1:8f:75:e1:65:8d:3d:87:83:8c:af:
                    2e:f0:6f:0a:12:b7:12:e0:db:a5:c3:96:58:16:de:
                    49:14:01:4d:ba:9f:a2:ea:33:05:76:45:2f:1d:66:
                    8d:e5:47:81:7d:16:ca:76:ed:c6:a1:23:cb:7c:b1:
                    5d:23:5b:d1:10:f5:b7:5c:f7:f2:f4:31:ea:79:44:
                    ea:21:b9:47:73:9a:f5:f6:16:16:15:80:29:45:fc:
                    49:9a:36:51:7a:9b:ab:dc:f2:ee:8a:e7:65:33:fc:
                    8f:13:9a:f8:fc:e5:e2:a7:f0:6e:d7:6e:6d:ba:2b:
                    88:19:5d:00:d2:84:97:4a:53:ea:24:ef:18:3c:2d:
                    ad:cf:5c:34:21:7c:3b:22:0c:77:6c:6e:ea:1c:6f:
                    0a:87:86:69:d2:ee:72:9e:e2:c6:9e:8a:70:a7:be:
                    5f:53:b3:18:56:ea:29:57:3c:bd:c6:c8:a8:9f:5e:
                    22:ad:c0:33:6f:2e:a6:48:e2:04:5f:32:5a:7a:f8:
                    cf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E3:1A:29:42:97:50:98:61:38:E6:4A:7A:A7:B7:13:35:86:23:11
            X509v3 Authority Key Identifier:
                keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3231302e302f32342d3234203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c2:8b:89:95:90:c2:ce:15:50:a7:7f:e6:e2:11:31:43:f1:
         5a:cd:5c:5b:60:8c:ad:02:39:ba:01:e8:29:bc:fa:ab:01:4b:
         78:e8:1d:32:09:86:10:cf:8c:06:9f:9f:3c:e1:77:c3:b2:18:
         82:7b:e0:01:ab:09:1e:8a:74:d7:1a:85:56:f1:ae:a6:fe:d9:
         29:ca:ca:8d:3f:26:1c:4a:b2:8b:dc:e8:e4:b9:bb:7f:57:0f:
         af:83:fa:81:a8:b3:9f:c2:c1:bd:1d:12:9e:9e:be:c5:1a:1b:
         84:58:52:bf:e4:21:37:41:4a:c3:b1:09:f9:3c:7c:01:c7:86:
         17:e6:5a:df:6e:cc:0f:d9:95:8f:0a:ff:4e:89:3c:3b:0f:68:
         85:83:5d:3b:29:e2:08:24:96:6a:0d:20:0f:f9:53:37:9a:5c:
         b2:d1:b7:42:f0:71:a6:9e:6e:43:11:99:b3:b7:99:54:04:89:
         9f:01:9f:47:ec:82:a6:ff:02:1a:6b:4f:eb:18:ff:9d:97:32:
         e4:c6:ab:09:e5:55:c5:da:09:01:c7:41:43:40:41:dd:80:13:
         86:d2:2a:eb:7e:57:05:2e:31:cc:62:93:a6:d2:68:2b:dd:24:
         81:fe:d6:80:e4:34:59:44:76:04:5f:c5:bc:31:ee:08:d6:58:
         c0:1b:f1:4a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZNV6OFd4fxgfU+cGq/S+vuOsjmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU5MzlCMjIzNjhCNzkxQzE4ODg5QzExNDg3NjU4MkEy
OTM3MTZGNDAeFw0yNjAxMDYxOTM1MTJaFw0yNzAxMDUxOTQwMTJaMDMxMTAvBgNV
BAMTKERCRTMxQTI5NDI5NzUwOTg2MTM4RTY0QTdBQTdCNzEzMzU4NjIzMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6/q7B8XxWmq4iLm7G+WtRQY+
rIdw19kFSa7jzJvp/5QKw5X1PAnj4ue9WVCitsrxcEJQ3xI8KsLRLRGC6CjRj3Xh
ZY09h4OMry7wbwoStxLg26XDllgW3kkUAU26n6LqMwV2RS8dZo3lR4F9Fsp27cah
I8t8sV0jW9EQ9bdc9/L0Mep5ROohuUdzmvX2FhYVgClF/EmaNlF6m6vc8u6K52Uz
/I8Tmvj85eKn8G7Xbm26K4gZXQDShJdKU+ok7xg8La3PXDQhfDsiDHdsbuocbwqH
hmnS7nKe4saeinCnvl9TsxhW6ilXPL3GyKifXiKtwDNvLqZI4gRfMlp6+M9lAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2+MaKUKXUJhhOOZKeqe3EzWGIxEwHwYDVR0j
BBgwFoAUhZObIjaLeRwYiJwRSHZYKik3FvQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOEQ0REE2NEE5QzVCMjE5QjdFQkUxMEI4NDZGRjM5NDZB
NzdGNzQyMDQ0ODRFRDVFODVFNjA2NzAwNjM5MzYzLzAvODU5MzlCMjIzNjhCNzkx
QzE4ODg5QzExNDg3NjU4MkEyOTM3MTZGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTkzOUIyMjM2OEI3OTFDMTg4
ODlDMTE0ODc2NTgyQTI5MzcxNkY0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMThENERBNjRBOUM1QjIxOUI3RUJFMTBCODQ2RkYzOTQ2QTc3Rjc0MjA0
NDg0RUQ1RTg1RTYwNjcwMDYzOTM2My8wLzMxMzYzNzJlMzIzNTMwMmUzMjMxMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/rS
MA0GCSqGSIb3DQEBCwUAA4IBAQCJwouJlZDCzhVQp3/m4hExQ/FazVxbYIytAjm6
AegpvPqrAUt46B0yCYYQz4wGn5884XfDshiCe+ABqwkeinTXGoVW8a6m/tkpysqN
PyYcSrKL3Ojkubt/Vw+vg/qBqLOfwsG9HRKenr7FGhuEWFK/5CE3QUrDsQn5PHwB
x4YX5lrfbswP2ZWPCv9OiTw7D2iFg107KeIIJJZqDSAP+VM3mlyy0bdC8HGmnm5D
EZmzt5lUBImfAZ9H7IKm/wIaa0/rGP+dlzLkxqsJ5VXF2gkBx0FDQEHdgBOG0irr
flcFLjHMYpOm0mgr3SSB/taA5DRZRHYEX8W8Me4I1ljAG/FK
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:34 2026 by rpki-client