This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139342e302f32342d3234203d3e20323633383135.roa
File:                     3136372e3234392e3139342e302f32342d3234203d3e20323633383135.roa (raw, json)
Hash identifier:          UN8Dg6uuPLcDjkG+ejQ6Dnw/DRn+YPLKxHoi6LrSZxs=
Subject key identifier:   9C:E9:C6:28:26:BA:45:4C:8A:70:F6:33:B0:AA:E6:BD:BB:95:06:E7
Certificate issuer:       /CN=8511BF5F476710251836E1F3F5006C888AE1B68A
Certificate serial:       5BE450A77C87044F01EB0A1E4F4C68A7B3FCDA93
Authority key identifier: 85:11:BF:5F:47:67:10:25:18:36:E1:F3:F5:00:6C:88:8A:E1:B6:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139342e302f32342d3234203d3e20323633383135.roa
Signing time:             Tue 06 Jan 2026 20:54:57 +0000
ROA not before:           Tue 06 Jan 2026 20:49:57 +0000
ROA not after:            Tue 05 Jan 2027 20:54:57 +0000
asID:                     263815
IP address blocks:        167.249.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e4:50:a7:7c:87:04:4f:01:eb:0a:1e:4f:4c:68:a7:b3:fc:da:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511BF5F476710251836E1F3F5006C888AE1B68A
        Validity
            Not Before: Jan  6 20:49:57 2026 GMT
            Not After : Jan  5 20:54:57 2027 GMT
        Subject: CN=9CE9C62826BA454C8A70F633B0AAE6BDBB9506E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:11:73:29:64:78:74:bf:3c:a1:32:2f:bf:df:
                    53:d3:a1:b1:08:82:fa:75:17:3f:ff:11:66:bb:50:
                    46:6c:e7:05:47:01:29:90:c7:79:65:0d:31:5e:21:
                    fd:3e:a9:f6:cf:0d:eb:4c:47:5e:b5:44:99:ad:89:
                    8a:9a:bc:46:26:5e:21:19:42:3a:1a:f3:83:9b:27:
                    0c:cf:3f:86:a8:82:b7:b4:3b:f3:35:de:31:7d:3f:
                    4d:dc:73:d3:70:5c:2c:a9:8c:08:0f:32:c4:77:34:
                    c7:f5:53:9e:46:dd:55:60:d8:8c:35:a4:9b:25:e5:
                    1e:cc:a0:7a:cf:69:3a:91:2e:56:57:25:3b:5d:df:
                    73:1c:05:dc:41:5f:34:00:66:d6:a9:12:23:94:9c:
                    a6:b9:8e:21:7d:79:14:d9:f6:a0:c5:5c:3e:9c:d1:
                    b5:18:ec:9a:9d:c4:78:c7:6b:c4:6f:b9:ca:c3:ad:
                    e1:a4:9b:59:e3:e1:c4:ba:d6:ca:ce:19:85:66:5c:
                    01:a8:8a:dd:ab:4c:1f:80:ef:77:a3:16:9d:5c:6a:
                    66:8b:fb:03:41:1d:82:a1:93:64:82:19:2a:58:ad:
                    4b:fd:52:e3:21:87:af:dd:6e:ab:80:f3:2b:09:d7:
                    57:b0:85:82:49:96:36:05:f6:2d:7f:16:63:f6:33:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E9:C6:28:26:BA:45:4C:8A:70:F6:33:B0:AA:E6:BD:BB:95:06:E7
            X509v3 Authority Key Identifier:
                keyid:85:11:BF:5F:47:67:10:25:18:36:E1:F3:F5:00:6C:88:8A:E1:B6:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139342e302f32342d3234203d3e20323633383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:04:91:ce:77:9d:a5:57:f9:9d:19:fc:68:87:65:f5:69:48:
         fe:c4:2f:e2:d3:44:06:b2:51:e1:96:dc:f5:be:77:13:52:14:
         a4:5c:fd:e7:3d:8b:46:de:2a:ce:46:a6:d8:a8:52:ce:05:10:
         88:0b:8c:8f:4a:c0:4d:93:9c:55:6d:3e:33:88:b8:b7:6f:4e:
         82:0c:2b:56:65:49:60:56:55:41:33:7e:08:e1:3a:ac:d1:c4:
         c1:60:fb:a8:ff:15:11:e6:ed:9a:8f:98:59:07:0b:18:64:02:
         cd:d5:d0:72:d9:d2:d2:e5:ff:73:75:9b:9b:ca:a7:cb:ea:d6:
         ec:e6:fe:24:3b:50:71:d3:60:8e:0d:93:d6:8d:de:b1:56:2d:
         06:0b:1d:58:7d:f8:a4:c9:9d:c4:16:04:15:ea:66:9d:fb:d8:
         cd:2b:12:79:bd:ee:c2:ed:95:87:a1:41:20:93:d1:3b:8d:bb:
         67:e5:05:0e:63:94:be:92:f2:d1:9d:43:53:f6:11:d5:6c:4c:
         39:72:a9:76:87:2e:50:73:02:63:78:9c:75:6a:f3:68:26:23:
         66:c7:33:d1:90:82:00:48:7f:fa:d0:20:7a:1e:52:b4:a4:f1:
         f3:78:b7:7d:c7:fa:eb:94:a0:30:bc:ad:76:d9:72:a0:a4:90:
         f3:70:ed:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:48 2026 by rpki-client