This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3136372e3235302e33362e302f32322d3234203d3e20323633373137.roa
File:                     3136372e3235302e33362e302f32322d3234203d3e20323633373137.roa (raw, json)
Hash identifier:          MIVWBVrZqKbtLGVnGaTX5wp79jbDq4Y+4L2Vh4HOfFg=
Subject key identifier:   C9:27:E2:74:F2:96:99:B6:F2:CF:1F:FD:8E:72:C4:90:CA:25:8D:71
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       644C87C33FA30AEEAA43B79E0E50812B27BE7341
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3136372e3235302e33362e302f32322d3234203d3e20323633373137.roa
Signing time:             Tue 06 Jan 2026 19:38:34 +0000
ROA not before:           Tue 06 Jan 2026 19:33:34 +0000
ROA not after:            Tue 05 Jan 2027 19:38:34 +0000
asID:                     263717
IP address blocks:        167.250.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4c:87:c3:3f:a3:0a:ee:aa:43:b7:9e:0e:50:81:2b:27:be:73:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Jan  6 19:33:34 2026 GMT
            Not After : Jan  5 19:38:34 2027 GMT
        Subject: CN=C927E274F29699B6F2CF1FFD8E72C490CA258D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:c5:20:eb:02:9f:ad:5e:6c:4a:16:21:bb:
                    fd:fa:96:64:98:aa:11:cd:80:11:ad:71:ad:85:ab:
                    49:6f:a9:26:14:11:ae:64:8e:5f:c4:c8:d6:be:dd:
                    29:16:25:3a:82:cc:61:08:50:35:f7:eb:72:95:72:
                    33:f7:ac:74:68:85:dc:7f:e8:23:31:d5:a8:cb:0b:
                    92:cb:b1:c3:3b:27:34:a2:f3:10:c0:58:7a:ce:16:
                    05:1c:4d:d1:2f:2e:4c:fe:5e:ec:36:ad:18:a4:d1:
                    f0:30:1e:f3:47:95:65:ee:03:33:3a:e8:c3:f2:f5:
                    12:8e:67:e3:f0:9a:5f:c5:d0:c1:9b:e3:94:52:0b:
                    82:3e:ba:18:29:91:eb:40:b3:65:25:1f:2d:49:44:
                    84:e0:f9:ff:94:27:75:7d:98:13:32:84:e3:e2:3e:
                    e5:c4:e0:39:3b:9b:db:08:2f:49:f7:3b:ff:3b:87:
                    33:a9:40:8a:79:2c:59:d5:b6:93:2e:5c:b1:40:6f:
                    5a:8b:a8:35:91:b2:f4:22:ca:54:31:63:a7:62:e1:
                    34:50:75:5f:16:0e:0c:0c:3a:4f:7d:87:90:74:37:
                    f5:96:da:14:bd:a7:67:0e:c9:68:34:8f:09:68:84:
                    ce:9a:fd:ec:9d:f6:12:ef:54:3c:25:ec:72:45:bb:
                    1c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:27:E2:74:F2:96:99:B6:F2:CF:1F:FD:8E:72:C4:90:CA:25:8D:71
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3136372e3235302e33362e302f32322d3234203d3e20323633373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:33:07:e1:53:7b:77:17:59:75:a8:28:54:96:21:69:8d:1f:
         7c:81:26:64:20:49:e9:91:e9:24:23:27:6b:cb:cd:41:bc:5b:
         3d:29:14:82:fe:8f:f7:48:07:fe:6a:2c:47:be:f5:81:da:73:
         e9:83:d0:13:7a:0d:99:c3:90:cb:12:3e:d8:57:bc:a3:f8:13:
         52:bb:71:cb:2a:a4:e1:de:db:53:e1:35:fe:4d:d6:2f:13:06:
         f7:80:3e:d6:44:ed:da:18:c9:e2:17:53:93:a0:0e:61:44:dc:
         70:ec:87:d6:68:17:5f:22:5f:0e:52:b2:1c:fc:3e:74:aa:db:
         68:8b:53:4a:74:eb:aa:42:f5:5d:44:e9:c4:1e:29:1d:9b:1d:
         0e:dd:eb:b8:06:69:8b:5c:c7:4d:5e:6e:2f:25:76:98:e8:4c:
         31:4f:0a:76:da:ca:93:9d:f6:06:f6:03:c2:c6:b7:2e:0b:ef:
         09:cf:8c:d7:54:1c:93:7a:92:b9:a9:03:78:0b:9b:2c:b5:63:
         33:93:a8:ed:8b:a0:17:95:59:22:12:9b:19:b4:de:72:7a:aa:
         ed:c4:69:1b:84:0e:f4:a5:06:fb:8e:64:f6:95:27:7e:87:8a:
         98:9d:a7:16:3d:b8:f0:f4:9f:e5:6c:0d:f5:67:4c:9e:0d:31:
         dc:16:a2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:01:32 2026 by rpki-client