This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/3136372e3234392e3231362e302f32322d3234203d3e20323633373634.roa
File:                     3136372e3234392e3231362e302f32322d3234203d3e20323633373634.roa (raw, json)
Hash identifier:          LY9LigxkMLyl1WSSSeBE+Ip0QoY1yJNJlyUensh/t+Q=
Subject key identifier:   6C:83:D0:B6:90:F1:3C:66:0F:C9:8C:52:73:17:EA:24:B4:5E:25:4A
Certificate issuer:       /CN=9A074897DF26261B55AA7647F456CB204D8528E1
Certificate serial:       6694F0CED8C09283C7FE3A5BFB1DE0FEB7B07083
Authority key identifier: 9A:07:48:97:DF:26:26:1B:55:AA:76:47:F4:56:CB:20:4D:85:28:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A074897DF26261B55AA7647F456CB204D8528E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/3136372e3234392e3231362e302f32322d3234203d3e20323633373634.roa
Signing time:             Tue 06 Jan 2026 19:31:06 +0000
ROA not before:           Tue 06 Jan 2026 19:26:06 +0000
ROA not after:            Tue 05 Jan 2027 19:31:06 +0000
asID:                     263764
IP address blocks:        167.249.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/9A074897DF26261B55AA7647F456CB204D8528E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/9A074897DF26261B55AA7647F456CB204D8528E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A074897DF26261B55AA7647F456CB204D8528E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 17:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:94:f0:ce:d8:c0:92:83:c7:fe:3a:5b:fb:1d:e0:fe:b7:b0:70:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A074897DF26261B55AA7647F456CB204D8528E1
        Validity
            Not Before: Jan  6 19:26:06 2026 GMT
            Not After : Jan  5 19:31:06 2027 GMT
        Subject: CN=6C83D0B690F13C660FC98C527317EA24B45E254A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:78:3d:f4:bf:9b:32:61:6f:68:ba:24:73:
                    74:e3:21:48:b8:ec:3f:b5:2e:5a:4e:ed:9c:c7:fe:
                    f2:f0:23:78:4f:9f:bf:72:aa:5d:14:87:88:a1:8f:
                    3d:64:5b:cd:14:f6:84:3f:8c:41:f3:57:36:99:ee:
                    b0:18:6e:b2:26:a8:a4:e0:ed:5c:20:95:01:3a:61:
                    99:15:85:98:e2:a3:23:04:12:48:b8:2a:79:a1:00:
                    ea:66:fb:c6:66:f1:43:75:df:97:ba:65:15:f3:2d:
                    bd:3a:95:9f:f2:85:e9:c8:50:6e:12:9c:e4:59:7e:
                    03:e8:f2:43:8c:69:9c:7f:36:c0:24:10:1f:b2:8e:
                    6d:11:1e:36:36:ea:47:72:2a:a6:c3:c4:b0:46:9b:
                    de:d4:47:ec:94:1d:e3:58:04:fa:9b:a0:8f:c2:c4:
                    9a:1b:d1:c2:da:a3:92:45:ff:25:4a:6d:a2:0f:e9:
                    4d:60:b4:e0:fd:eb:e3:79:a8:f6:a6:fc:9a:83:fd:
                    c6:c6:55:fc:64:66:df:96:9b:d3:a7:9e:14:91:89:
                    97:fc:de:ea:6d:01:e5:50:bf:c9:aa:b6:ec:82:21:
                    95:65:09:83:71:69:70:fa:19:eb:c4:9c:13:8c:ec:
                    bd:1a:55:97:4b:1c:45:14:7b:13:38:29:53:6d:4f:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:83:D0:B6:90:F1:3C:66:0F:C9:8C:52:73:17:EA:24:B4:5E:25:4A
            X509v3 Authority Key Identifier:
                keyid:9A:07:48:97:DF:26:26:1B:55:AA:76:47:F4:56:CB:20:4D:85:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/9A074897DF26261B55AA7647F456CB204D8528E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A074897DF26261B55AA7647F456CB204D8528E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/3136372e3234392e3231362e302f32322d3234203d3e20323633373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:2e:33:29:be:cc:bc:b6:ef:16:4f:bf:9e:d2:6d:2f:ca:39:
         88:46:3d:e7:64:b4:51:57:1c:1d:00:9d:9a:20:13:45:87:2e:
         0a:0c:50:8a:9d:4a:8c:99:f6:bf:81:e4:7c:b7:c6:de:ad:9c:
         68:e3:c9:e5:01:30:17:bc:77:fe:bc:d0:3b:6e:6e:0e:93:a4:
         07:a7:ef:1c:77:4a:17:de:82:6e:f9:80:95:b2:d6:a0:17:66:
         ae:f6:d4:fd:f1:16:6a:79:da:ad:10:84:4b:3c:b0:95:86:0c:
         d1:81:60:af:2d:f0:f7:94:ce:1f:9b:cf:40:c9:d1:7a:5d:02:
         10:b5:f2:4c:8c:59:96:0a:23:92:45:89:cb:e3:b6:1a:4a:15:
         e9:f5:90:d2:1e:15:1b:6c:87:63:2b:52:ab:7f:5d:07:1a:bc:
         0c:be:63:20:42:b7:a9:a6:8b:f9:0a:a0:bf:8c:97:7b:a2:be:
         31:b1:29:ef:e2:b6:53:d5:08:a1:7d:d6:d3:86:e8:2e:a7:ca:
         c2:72:ef:58:ca:5d:92:c9:05:dc:f8:c4:7f:87:02:1a:58:15:
         25:f1:d5:b1:35:c1:25:c4:3c:81:57:6a:1c:1b:1e:74:38:72:
         a9:ab:a1:cb:c7:87:14:c4:35:bb:aa:95:48:31:90:13:e8:ad:
         9a:54:b1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 04:10:32 2026 by rpki-client