This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3136372e3234392e33322e302f32322d3234203d3e203231383236.roa
File:                     3136372e3234392e33322e302f32322d3234203d3e203231383236.roa (raw, json)
Hash identifier:          HCwHlRQ7qlvaLkBKaleTVuFacWvqp4u4pVwS7FbdExw=
Subject key identifier:   B5:BD:9D:92:D3:27:7E:DF:CA:D9:AD:D4:B5:F2:0D:D5:54:AC:40:E6
Certificate issuer:       /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial:       1D258459137E43D51FE527333372888715DDB222
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3136372e3234392e33322e302f32322d3234203d3e203231383236.roa
Signing time:             Tue 06 Jan 2026 19:37:41 +0000
ROA not before:           Tue 06 Jan 2026 19:32:41 +0000
ROA not after:            Tue 05 Jan 2027 19:37:41 +0000
asID:                     21826
IP address blocks:        167.249.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:25:84:59:13:7e:43:d5:1f:e5:27:33:33:72:88:87:15:dd:b2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
        Validity
            Not Before: Jan  6 19:32:41 2026 GMT
            Not After : Jan  5 19:37:41 2027 GMT
        Subject: CN=B5BD9D92D3277EDFCAD9ADD4B5F20DD554AC40E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3b:27:b1:00:14:54:26:0e:0e:6e:39:d6:9b:
                    c9:21:e4:bc:20:1a:53:da:0a:c0:15:4b:de:0a:67:
                    bf:03:4e:c5:4d:cc:de:aa:48:7a:e8:31:7e:34:25:
                    39:a0:37:ca:1a:c9:90:15:83:36:cc:bb:68:19:d3:
                    b5:94:b0:6f:ce:0f:09:2c:e4:36:40:ce:43:0d:f1:
                    88:c7:9c:40:d7:4e:3e:85:e1:31:87:47:70:1a:22:
                    ae:7d:81:70:a7:7c:da:a0:23:c2:68:54:0c:41:b3:
                    33:1b:61:ab:4d:49:ad:d0:a4:85:fc:cf:13:c7:b5:
                    9f:96:07:7b:7e:2c:cd:30:42:8e:4f:4f:83:a2:fa:
                    89:09:89:69:59:88:82:33:d0:7c:89:89:9e:1d:59:
                    bf:94:53:6b:8c:f4:68:e8:db:f2:d8:72:ce:ad:f1:
                    20:45:81:08:6e:86:ec:44:1e:b6:17:8b:f3:a4:b6:
                    2f:2f:87:0d:59:0d:ca:31:e4:b5:e8:15:14:fd:64:
                    64:4d:bd:57:75:da:01:1a:40:0b:aa:01:66:a3:5b:
                    d2:6c:c1:26:d5:26:37:ea:03:83:ff:c5:43:e2:77:
                    e0:30:7c:cc:90:be:7e:52:72:77:20:85:6e:3d:81:
                    a8:7a:c4:25:96:0d:41:27:82:41:86:02:b9:74:1c:
                    17:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BD:9D:92:D3:27:7E:DF:CA:D9:AD:D4:B5:F2:0D:D5:54:AC:40:E6
            X509v3 Authority Key Identifier:
                keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3136372e3234392e33322e302f32322d3234203d3e203231383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:80:2e:da:de:bd:0b:5a:16:8d:1a:03:51:04:51:bd:36:d3:
         89:c9:b7:ce:84:a7:70:20:8c:3e:89:fe:45:58:33:34:91:d1:
         cb:3e:8a:56:29:f9:8c:44:95:c3:3d:89:4a:67:33:a6:e2:e4:
         02:b0:b1:7f:72:0a:5b:07:ae:86:8a:2a:85:df:c4:07:21:34:
         b7:a1:e3:1f:29:8e:b5:74:d6:b9:00:eb:d6:69:fe:fc:e3:2d:
         2d:fb:92:ad:f2:cf:19:43:78:85:e2:86:43:f5:e9:2a:44:cd:
         6c:eb:a0:8f:14:d6:13:c9:45:c1:cc:bf:62:1a:2a:ea:2b:e5:
         96:4d:f0:b1:57:91:1a:fa:09:40:7f:69:23:a5:a1:14:04:90:
         d3:9a:bd:48:94:48:9c:81:fc:61:f6:d8:39:61:0c:0a:e5:3e:
         dd:65:75:3f:c8:c6:a0:c6:a8:ec:b8:d7:24:f0:59:87:00:41:
         3d:63:e2:e8:2e:88:8c:24:9f:c1:87:53:1c:b1:76:ba:b6:8b:
         b8:09:6f:df:03:02:53:d5:0d:ca:7f:e9:02:d4:ec:41:2f:6f:
         f2:34:ef:08:82:45:d9:3b:3b:dd:69:66:28:5f:a2:a7:65:62:
         2f:86:3f:80:23:32:f2:02:96:43:26:bf:b6:21:d6:30:34:a8:
         1d:d0:cb:cb
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHSWEWRN+Q9Uf5SczM3KIhxXdsiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1RTBGMTMzRUY4QTZERjJFQ0NCRkRENkU5MTU5NjQ4
OTNBNDMyNDAeFw0yNjAxMDYxOTMyNDFaFw0yNzAxMDUxOTM3NDFaMDMxMTAvBgNV
BAMTKEI1QkQ5RDkyRDMyNzdFREZDQUQ5QURENEI1RjIwREQ1NTRBQzQwRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUOyexABRUJg4ObjnWm8kh5Lwg
GlPaCsAVS94KZ78DTsVNzN6qSHroMX40JTmgN8oayZAVgzbMu2gZ07WUsG/ODwks
5DZAzkMN8YjHnEDXTj6F4TGHR3AaIq59gXCnfNqgI8JoVAxBszMbYatNSa3QpIX8
zxPHtZ+WB3t+LM0wQo5PT4Oi+okJiWlZiIIz0HyJiZ4dWb+UU2uM9Gjo2/LYcs6t
8SBFgQhuhuxEHrYXi/Okti8vhw1ZDcox5LXoFRT9ZGRNvVd12gEaQAuqAWajW9Js
wSbVJjfqA4P/xUPid+AwfMyQvn5ScncghW49gah6xCWWDUEngkGGArl0HBcxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUtb2dktMnft/K2a3UtfIN1VSsQOYwHwYDVR0j
BBgwFoAUFl4PEz74pt8uzL/dbpFZZIk6QyQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRkY5NzQ0RTY0QzU2RTEzOEFFQzUxN0Q5MTBGNjFEODk1
Q0FENjQ1Q0NGMjFDQjdDMTZBMjc4RDVDMkY5NDRDLzAvMTY1RTBGMTMzRUY4QTZE
RjJFQ0NCRkRENkU5MTU5NjQ4OTNBNDMyNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNjVFMEYxMzNFRjhBNkRGMkVD
Q0JGREQ2RTkxNTk2NDg5M0E0MzI0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkZGOTc0NEU2NEM1NkUxMzhBRUM1MTdEOTEwRjYxRDg5NUNBRDY0NUND
RjIxQ0I3QzE2QTI3OEQ1QzJGOTQ0Qy8wLzMxMzYzNzJlMzIzNDM5MmUzMzMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMTM4MzIzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqf5IDAN
BgkqhkiG9w0BAQsFAAOCAQEAuYAu2t69C1oWjRoDUQRRvTbTicm3zoSncCCMPon+
RVgzNJHRyz6KVin5jESVwz2JSmczpuLkArCxf3IKWweuhooqhd/EByE0t6HjHymO
tXTWuQDr1mn+/OMtLfuSrfLPGUN4heKGQ/XpKkTNbOugjxTWE8lFwcy/Yhoq6ivl
lk3wsVeRGvoJQH9pI6WhFASQ05q9SJRInIH8YfbYOWEMCuU+3WV1P8jGoMao7LjX
JPBZhwBBPWPi6C6IjCSfwYdTHLF2uraLuAlv3wMCU9UNyn/pAtTsQS9v8jTvCIJF
2Ts73WlmKF+ip2ViL4Y/gCMy8gKWQya/tiHWMDSoHdDLyw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:57 2026 by rpki-client