This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/3136372e3235302e3139322e302f32322d3234203d3e20323634363534.roa
File:                     3136372e3235302e3139322e302f32322d3234203d3e20323634363534.roa (raw, json)
Hash identifier:          4RBBWzgfhsqfLrMMUlPhFUvVgCYcO0RxQ3xgvNCTzeI=
Subject key identifier:   F8:F1:0D:43:FD:CC:75:4E:46:17:9A:74:61:C0:4C:9E:19:E3:90:EF
Certificate issuer:       /CN=1FD1A388E3A16919543D3606F9D94575043AAD9D
Certificate serial:       07C8982247C61C7E9C35F0891400EF5A430AA699
Authority key identifier: 1F:D1:A3:88:E3:A1:69:19:54:3D:36:06:F9:D9:45:75:04:3A:AD:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/3136372e3235302e3139322e302f32322d3234203d3e20323634363534.roa
Signing time:             Tue 06 Jan 2026 19:17:02 +0000
ROA not before:           Tue 06 Jan 2026 19:12:02 +0000
ROA not after:            Tue 05 Jan 2027 19:17:02 +0000
asID:                     264654
IP address blocks:        167.250.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 16:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c8:98:22:47:c6:1c:7e:9c:35:f0:89:14:00:ef:5a:43:0a:a6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD1A388E3A16919543D3606F9D94575043AAD9D
        Validity
            Not Before: Jan  6 19:12:02 2026 GMT
            Not After : Jan  5 19:17:02 2027 GMT
        Subject: CN=F8F10D43FDCC754E46179A7461C04C9E19E390EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:20:89:27:a6:cc:07:84:3c:af:da:e3:cf:
                    39:8c:11:32:fb:b6:5b:03:6f:97:4b:b6:e1:32:76:
                    f7:5e:a4:c7:46:40:bc:c3:3d:35:d1:8c:e0:46:e3:
                    f9:98:9c:5a:75:66:d6:5d:0d:2b:37:94:2c:a0:c5:
                    2a:3e:97:9f:f6:65:11:41:28:ef:77:51:60:40:81:
                    39:98:e7:ba:ff:36:89:b1:98:c3:73:47:d2:49:3f:
                    ad:55:0e:a5:74:e3:46:dd:0a:66:d3:c2:26:10:fa:
                    d1:3d:d9:7f:4e:8a:43:57:d8:3d:be:7f:be:cf:3e:
                    cd:ba:e5:ff:55:ba:19:b4:3c:19:ed:5e:d4:c7:95:
                    e4:16:47:a0:14:8f:18:da:57:d1:c9:d7:be:a9:4b:
                    67:e1:ec:0b:a4:72:8a:ed:a5:a5:01:72:54:6c:21:
                    21:b8:2e:aa:6b:c4:30:91:9e:34:c4:6e:e3:bb:23:
                    95:72:c6:60:08:6e:fb:a3:29:24:db:c5:db:98:36:
                    88:03:ef:77:a0:8f:64:21:d8:b9:e8:48:ae:ad:04:
                    9d:2d:6f:3e:91:3a:1d:46:1e:cf:76:79:36:c5:2a:
                    97:e5:4f:85:da:ee:d4:ac:84:80:20:8c:79:a3:57:
                    f6:85:b6:6c:0f:56:c9:b0:87:cc:c5:aa:10:7c:8a:
                    6f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F1:0D:43:FD:CC:75:4E:46:17:9A:74:61:C0:4C:9E:19:E3:90:EF
            X509v3 Authority Key Identifier:
                keyid:1F:D1:A3:88:E3:A1:69:19:54:3D:36:06:F9:D9:45:75:04:3A:AD:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/3136372e3235302e3139322e302f32322d3234203d3e20323634363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:16:2a:20:5d:1d:02:64:7a:37:f7:fb:d8:d5:b3:38:47:e5:
         70:e2:56:00:ce:35:09:4e:05:54:38:52:7b:75:cc:d5:b0:5a:
         97:ef:20:e9:7f:2e:6d:2c:eb:73:aa:dc:46:2f:57:4a:e8:0e:
         54:ea:11:18:c2:93:9d:c0:9c:d1:a7:dc:8f:42:fa:b0:ed:e2:
         68:05:e9:12:c7:19:a8:d8:c8:63:05:b2:a2:3b:93:a6:b8:e8:
         6d:9f:eb:bc:92:fd:c1:05:6a:d0:cc:72:07:ec:79:cb:92:32:
         6f:3a:60:cc:65:98:62:d2:98:2a:32:e4:61:2b:7b:c0:ec:2c:
         d9:b1:b5:33:ff:3e:f4:76:1d:a9:a1:bd:cc:72:65:2d:36:1b:
         f1:97:a9:2f:8c:24:62:d4:06:e9:fc:22:46:3e:53:b2:7d:43:
         26:ce:04:7e:f2:fb:a7:ea:28:42:34:08:24:86:31:e8:6f:c5:
         39:e6:5a:f1:80:97:bc:9c:b1:70:c2:76:4c:b1:cd:c7:59:26:
         78:92:52:cc:69:97:11:dc:69:82:51:65:f8:5d:0a:fd:8a:68:
         64:f3:05:97:a9:5f:85:ad:43:28:17:89:99:4a:49:25:8a:b4:
         1e:41:21:85:a7:a8:37:34:cf:f5:68:53:18:6f:d0:48:c9:c5:
         d0:54:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:57:37 2026 by rpki-client