This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e34382e302f32342d3234203d3e20323633373637.roa
File:                     3136372e3235302e34382e302f32342d3234203d3e20323633373637.roa (raw, json)
Hash identifier:          ovZctJ+ae92DUpL5RBd9x1M4NyHXxJ2WIwXZGXnO5kQ=
Subject key identifier:   6A:AA:A8:AA:F9:B4:39:52:A6:A9:79:A0:CF:14:93:22:43:D2:F6:B0
Certificate issuer:       /CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
Certificate serial:       4CDCE79AAC54280010649B4BA5C3FDF5C5B2132B
Authority key identifier: 86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e34382e302f32342d3234203d3e20323633373637.roa
Signing time:             Tue 06 Jan 2026 19:47:57 +0000
ROA not before:           Tue 06 Jan 2026 19:42:57 +0000
ROA not after:            Tue 05 Jan 2027 19:47:57 +0000
asID:                     263767
IP address blocks:        167.250.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 15:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:dc:e7:9a:ac:54:28:00:10:64:9b:4b:a5:c3:fd:f5:c5:b2:13:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
        Validity
            Not Before: Jan  6 19:42:57 2026 GMT
            Not After : Jan  5 19:47:57 2027 GMT
        Subject: CN=6AAAA8AAF9B43952A6A979A0CF14932243D2F6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:db:ca:56:06:c8:74:49:80:bd:ad:48:b8:46:
                    87:e9:c5:b9:8c:7a:74:3a:77:4c:02:e0:4d:b2:f0:
                    3b:9d:38:52:45:9d:8c:c1:da:9b:dd:23:f2:18:0b:
                    a0:4d:63:98:01:63:fd:8f:a0:e0:77:f3:ee:bb:43:
                    ad:09:3c:1a:7c:7b:80:e1:b4:da:03:bb:ea:e5:43:
                    1d:ee:9a:c2:1a:83:dd:ef:71:f2:8f:35:bc:30:65:
                    2a:4c:ff:74:3d:16:eb:fd:64:ba:32:27:4b:91:69:
                    95:0f:66:27:57:99:37:d6:4f:75:0f:87:6e:b0:18:
                    0b:d5:7f:12:bf:cb:68:23:ce:6b:58:84:c8:18:e2:
                    88:64:99:f6:dc:98:e0:6c:30:61:2e:1b:13:03:80:
                    9a:55:b4:bd:24:d3:09:0f:40:dd:6c:11:5a:b1:fd:
                    b9:1a:79:87:0b:34:08:4a:bf:85:c2:9a:19:4f:22:
                    d3:d3:fd:86:03:72:16:1f:9f:46:4f:91:f0:bd:2a:
                    67:8b:db:54:61:1b:9b:5f:0a:59:6a:a9:f1:cc:8c:
                    2d:44:06:22:e7:78:aa:3e:bc:55:2a:9b:93:86:76:
                    f1:86:17:b0:97:7e:9d:07:d0:bd:27:48:d8:90:8c:
                    96:3e:9d:2e:24:f5:0d:4d:37:91:11:33:ea:15:69:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AA:A8:AA:F9:B4:39:52:A6:A9:79:A0:CF:14:93:22:43:D2:F6:B0
            X509v3 Authority Key Identifier:
                keyid:86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e34382e302f32342d3234203d3e20323633373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:a8:40:3f:ed:82:72:6e:3f:1f:ef:7f:4a:58:41:ba:e5:4b:
         2e:73:b6:64:73:d5:15:4a:4f:dc:a2:c1:15:7b:36:8f:e5:ba:
         a5:29:3e:1d:7b:3d:b4:07:14:b1:87:b6:f0:90:ff:93:08:67:
         83:29:28:e0:58:d4:d4:90:d9:97:31:97:9d:52:fc:21:51:c5:
         46:99:71:84:21:70:e6:e7:10:64:01:f1:78:5b:49:59:9b:dc:
         a8:12:d2:52:61:fd:60:d4:4e:d2:f9:00:63:ac:16:0b:7c:f6:
         74:19:85:34:04:05:75:ee:be:6f:61:26:87:6d:5a:e3:d6:62:
         1d:ce:5e:97:c6:72:03:51:ff:f6:68:c3:ff:0c:d3:58:bc:28:
         35:b1:66:1c:8a:b0:e1:38:b4:fa:48:6c:66:d9:e3:f6:5b:a4:
         ca:21:a1:15:77:2b:f3:6e:84:75:36:d2:75:d5:84:08:b0:7d:
         fc:8c:f5:c1:da:61:78:80:bc:8f:23:d3:03:3d:bd:af:c2:2c:
         b0:72:33:29:af:b1:3c:e0:cd:be:ad:23:6a:de:8e:52:35:8f:
         45:00:51:07:d3:51:f0:51:c1:d0:3d:75:cd:0c:ed:28:05:d9:
         da:68:48:f1:ff:b9:7c:6d:e7:51:5b:c9:0f:3a:71:58:ee:a6:
         c8:6c:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:14:17 2026 by rpki-client