This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35312e302f32342d3234203d3e20323633373637.roa
File:                     3136372e3235302e35312e302f32342d3234203d3e20323633373637.roa (raw, json)
Hash identifier:          V0FSGdZqsp6D1zKeyiW6vB0xU4OUdC3CyTzozjZXong=
Subject key identifier:   BF:EC:5A:66:77:FA:77:2C:3D:73:3D:CA:76:C6:76:C9:C0:54:CB:F1
Certificate issuer:       /CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
Certificate serial:       1C2DBDD01116E83BE5473D1BB74695D089567967
Authority key identifier: 86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35312e302f32342d3234203d3e20323633373637.roa
Signing time:             Tue 06 Jan 2026 19:47:57 +0000
ROA not before:           Tue 06 Jan 2026 19:42:57 +0000
ROA not after:            Tue 05 Jan 2027 19:47:57 +0000
asID:                     263767
IP address blocks:        167.250.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2d:bd:d0:11:16:e8:3b:e5:47:3d:1b:b7:46:95:d0:89:56:79:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
        Validity
            Not Before: Jan  6 19:42:57 2026 GMT
            Not After : Jan  5 19:47:57 2027 GMT
        Subject: CN=BFEC5A6677FA772C3D733DCA76C676C9C054CBF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:67:42:e8:cd:63:a1:e9:8f:11:ff:12:2d:6e:
                    5f:0e:85:30:95:2a:4d:e8:d3:c3:78:1f:98:4a:cd:
                    d4:59:46:b7:06:73:e1:1c:82:f5:75:6f:e0:e5:a8:
                    db:5d:ff:d8:c3:af:e5:3e:0c:cd:ef:74:b2:54:77:
                    cb:67:d0:cb:04:17:a1:8f:4e:06:13:c7:2f:88:10:
                    aa:81:f3:fe:7e:1c:29:8e:90:de:fa:4f:b8:24:b7:
                    d0:d7:79:26:81:1a:e9:5a:c3:a2:2f:c5:6c:12:c2:
                    cb:d4:26:b3:15:1e:d3:e4:1c:18:af:54:04:ab:a7:
                    b3:83:e8:b3:5d:ba:b6:38:14:3a:aa:f0:89:cd:c3:
                    2d:e3:7e:07:a7:11:8e:3d:09:8e:d5:e6:30:68:1d:
                    03:46:05:2f:90:c6:59:e8:ae:27:25:91:1f:72:2d:
                    f4:a4:30:4b:89:ec:1e:f4:c2:34:e8:39:5b:32:7d:
                    de:3d:e1:0d:b0:f6:6f:07:f6:20:0e:3f:55:4a:00:
                    54:64:9e:8f:cf:4e:1b:af:55:75:e1:ba:51:5d:4e:
                    65:55:d6:68:a5:d6:a0:79:59:eb:2a:3c:22:07:70:
                    cc:e4:e4:53:5c:ae:43:1d:60:43:b7:cc:c6:5b:f5:
                    39:92:5b:b8:34:d8:92:90:ef:d9:e5:e8:92:b6:ee:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EC:5A:66:77:FA:77:2C:3D:73:3D:CA:76:C6:76:C9:C0:54:CB:F1
            X509v3 Authority Key Identifier:
                keyid:86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35312e302f32342d3234203d3e20323633373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:76:0f:de:63:49:46:54:dd:68:1a:70:fb:8a:b7:f0:3b:86:
         2c:e2:03:9b:fd:51:2c:d2:52:1f:58:a8:f6:d0:d6:25:26:ca:
         82:39:74:14:59:7a:56:71:fc:a8:24:60:a7:30:36:ed:75:f3:
         75:81:f3:38:cc:a7:68:2a:c2:07:a0:95:4b:9c:4f:ed:f6:fc:
         99:a5:44:63:54:c9:a8:4a:92:4d:f0:31:8b:c3:55:be:55:b3:
         de:6c:14:b2:2e:f2:fd:e6:8a:14:65:1b:55:d9:57:5a:96:56:
         76:9a:3b:a7:36:d9:12:ae:4f:b4:4a:dd:35:70:43:e7:02:27:
         7d:95:bf:2d:3b:9c:8b:1f:85:4c:b3:0a:26:99:d0:85:2d:01:
         8a:10:a3:4d:c9:b1:b6:72:80:05:16:74:7e:e7:29:89:b4:03:
         6b:78:65:e5:c1:95:79:85:c1:fb:32:04:10:57:88:3d:a4:59:
         62:07:9c:f9:b2:51:c1:92:46:65:37:28:b3:46:ed:95:25:4b:
         ba:9e:57:07:22:57:7d:a4:e1:e5:cb:f3:b1:a3:e4:81:6f:9f:
         34:95:86:f4:11:0b:7c:21:08:3f:57:fd:ad:17:a3:ed:92:2d:
         bc:4c:1d:d8:b4:c3:03:bf:32:a2:bc:cb:88:1e:44:5f:ec:a9:
         b4:6c:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:18 2026 by rpki-client