This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E364B8F7767B6DAAF449C86EDED6726CAC89C8714F55C3851E646559A81B4E19/0/3136372e3235302e3139362e302f32332d3234203d3e20323637373438.roa
File:                     3136372e3235302e3139362e302f32332d3234203d3e20323637373438.roa (raw, json)
Hash identifier:          bAYjj/Z7l7AV+VE9GzTPXh+aFt0Qurczq0sN8F1OLkU=
Subject key identifier:   91:A0:34:D1:33:8F:EE:8C:E1:D8:78:2B:AF:3F:70:C1:E0:CC:13:28
Certificate issuer:       /CN=EFC95BAC1123D189B92EBD678C7CCE09083397C2
Certificate serial:       6634B01B3FCF253B9F878BB2C2D852A32EF9B042
Authority key identifier: EF:C9:5B:AC:11:23:D1:89:B9:2E:BD:67:8C:7C:CE:09:08:33:97:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFC95BAC1123D189B92EBD678C7CCE09083397C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E364B8F7767B6DAAF449C86EDED6726CAC89C8714F55C3851E646559A81B4E19/0/3136372e3235302e3139362e302f32332d3234203d3e20323637373438.roa
Signing time:             Tue 16 Dec 2025 19:55:07 +0000
ROA not before:           Tue 16 Dec 2025 19:50:07 +0000
ROA not after:            Tue 15 Dec 2026 19:55:07 +0000
asID:                     267748
IP address blocks:        167.250.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E364B8F7767B6DAAF449C86EDED6726CAC89C8714F55C3851E646559A81B4E19/0/EFC95BAC1123D189B92EBD678C7CCE09083397C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E364B8F7767B6DAAF449C86EDED6726CAC89C8714F55C3851E646559A81B4E19/0/EFC95BAC1123D189B92EBD678C7CCE09083397C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFC95BAC1123D189B92EBD678C7CCE09083397C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:34:b0:1b:3f:cf:25:3b:9f:87:8b:b2:c2:d8:52:a3:2e:f9:b0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC95BAC1123D189B92EBD678C7CCE09083397C2
        Validity
            Not Before: Dec 16 19:50:07 2025 GMT
            Not After : Dec 15 19:55:07 2026 GMT
        Subject: CN=91A034D1338FEE8CE1D8782BAF3F70C1E0CC1328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:13:b2:6b:f6:d3:0f:f5:5d:16:91:fe:38:
                    5a:c2:13:14:d5:dd:78:2b:60:e2:59:88:ae:24:8b:
                    73:37:c0:8d:fd:e5:e9:29:15:d3:cf:28:f1:bc:5e:
                    9d:3d:c2:49:46:b3:a1:7f:f2:8f:e0:71:c2:89:3c:
                    82:6e:f3:37:af:6d:0b:96:d4:f2:31:11:3a:2e:e2:
                    f3:eb:ae:76:2a:f2:01:53:7c:f4:04:97:ff:64:e3:
                    83:2d:f7:8f:8b:35:8d:5c:3c:8c:36:26:75:a9:2a:
                    97:e7:87:85:4b:15:98:58:32:5b:80:10:5e:65:2d:
                    5d:81:8b:42:14:0c:50:6f:ce:7b:b0:98:06:1c:53:
                    a6:1e:33:d6:61:24:14:af:88:bb:ad:9a:0f:b6:4c:
                    5d:c4:69:a6:d0:7e:c5:d2:1a:30:67:39:a4:26:34:
                    2c:34:c1:ad:2c:15:89:26:58:4f:e7:4b:a1:4a:60:
                    63:35:6c:7e:f8:80:f1:40:eb:bd:61:0e:f1:05:52:
                    07:16:33:1d:0a:57:a5:a3:3a:e8:60:e5:29:13:b5:
                    f3:c3:15:a0:ea:1e:61:a5:3f:df:11:f7:f0:1e:25:
                    71:20:27:0d:68:cf:29:41:8b:0a:e8:ca:f1:e2:fc:
                    56:e2:6e:d9:33:8c:3d:19:b6:97:31:a9:a4:8f:97:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A0:34:D1:33:8F:EE:8C:E1:D8:78:2B:AF:3F:70:C1:E0:CC:13:28
            X509v3 Authority Key Identifier:
                keyid:EF:C9:5B:AC:11:23:D1:89:B9:2E:BD:67:8C:7C:CE:09:08:33:97:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E364B8F7767B6DAAF449C86EDED6726CAC89C8714F55C3851E646559A81B4E19/0/EFC95BAC1123D189B92EBD678C7CCE09083397C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFC95BAC1123D189B92EBD678C7CCE09083397C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E364B8F7767B6DAAF449C86EDED6726CAC89C8714F55C3851E646559A81B4E19/0/3136372e3235302e3139362e302f32332d3234203d3e20323637373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:de:e0:8b:40:ea:c3:79:23:3d:ce:20:6f:b1:6c:22:d2:39:
         7d:ed:44:78:aa:c5:71:9a:0a:09:dd:ae:89:09:01:ba:19:7a:
         36:81:5a:d6:3f:9e:ef:1d:a9:32:9f:07:2f:7e:dd:89:c0:e7:
         78:fa:eb:8f:43:37:a9:f5:5c:88:27:13:70:e8:b3:f6:41:bf:
         aa:ba:72:73:82:c3:1b:ed:b3:2a:1f:3b:8f:77:79:6c:fc:16:
         14:69:55:96:ee:f8:25:a3:1d:1d:41:5b:57:0b:fc:0b:94:ea:
         3e:1e:54:b6:d0:e7:64:1e:51:1c:78:1d:34:cc:df:25:ad:2c:
         22:af:49:79:eb:23:7e:eb:66:ea:a4:27:89:96:4b:9c:e0:58:
         51:fc:b3:96:ab:90:47:7b:fa:a6:e3:1f:f8:37:2d:c0:c8:5b:
         95:f3:7e:6c:39:83:b4:aa:e4:c4:a1:d5:41:e3:3f:bf:2a:9a:
         7c:18:1c:80:a6:f6:2a:a7:8c:e3:58:73:9f:d7:d1:74:f3:96:
         b8:fc:32:d2:f7:01:24:ae:76:05:d1:fc:66:87:74:f5:3f:0d:
         c4:8e:53:56:45:67:5d:73:90:63:33:f5:26:01:2b:c9:71:28:
         39:b7:a6:d2:ab:8b:ed:1f:ce:be:d8:62:4e:3b:48:a9:8f:8c:
         34:72:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 07:40:59 2025 by rpki-client