This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3231362e302f32322d3234203d3e20323632323032.roa
File:                     3138362e31352e3231362e302f32322d3234203d3e20323632323032.roa (raw, json)
Hash identifier:          z+a8SUUbA20egndkHgvzt+YT40TUCUk5fC6NqjlIXHE=
Subject key identifier:   B3:B1:F4:13:5A:62:0B:71:BC:DE:6C:62:94:42:EA:EF:39:42:22:6C
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       65A84FF930027598CC80415DD34849B42DEDC213
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3231362e302f32322d3234203d3e20323632323032.roa
Signing time:             Tue 06 Jan 2026 19:00:08 +0000
ROA not before:           Tue 06 Jan 2026 18:55:08 +0000
ROA not after:            Tue 05 Jan 2027 19:00:08 +0000
asID:                     262202
IP address blocks:        186.15.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a8:4f:f9:30:02:75:98:cc:80:41:5d:d3:48:49:b4:2d:ed:c2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Jan  6 18:55:08 2026 GMT
            Not After : Jan  5 19:00:08 2027 GMT
        Subject: CN=B3B1F4135A620B71BCDE6C629442EAEF3942226C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:5d:63:92:bd:ee:88:98:03:c8:82:ad:51:
                    18:d6:e2:ad:5c:8a:cd:33:ef:ef:3a:9c:69:cd:63:
                    40:10:40:bc:ea:37:55:a8:9d:80:70:38:2d:84:91:
                    ba:e3:28:50:c0:35:fe:7f:e4:4d:31:a2:ef:5c:99:
                    2f:6b:3d:12:ea:58:00:fe:e4:b3:04:8b:4d:2a:3a:
                    f7:2b:71:ae:3b:11:61:95:0a:12:6d:43:17:84:fc:
                    80:bf:11:b0:56:04:92:13:ef:b5:83:83:6c:49:28:
                    0d:76:db:17:a9:8a:a3:aa:82:fb:33:c8:67:24:62:
                    53:78:42:ab:e1:44:66:5e:f7:ca:38:76:01:0b:8a:
                    94:e9:f9:33:3d:20:40:af:ad:dd:b4:a8:bc:87:8d:
                    92:f4:0a:a4:f5:fa:40:40:57:fb:8d:de:0a:d4:53:
                    06:c6:6d:89:c6:8a:9b:07:23:74:f5:3a:50:27:89:
                    a3:7c:37:df:13:62:8a:23:c4:1f:34:89:f9:1f:40:
                    bd:b6:a2:b7:3c:6e:06:bf:e8:c8:18:ff:66:0e:73:
                    c5:ef:52:14:ca:f2:a8:a4:73:7c:9e:f8:ff:fd:f9:
                    e8:a1:14:91:52:f7:c2:7d:b2:60:a2:d4:81:8f:29:
                    17:7a:13:b4:e7:bd:96:fe:f9:68:db:97:cd:ee:47:
                    63:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B1:F4:13:5A:62:0B:71:BC:DE:6C:62:94:42:EA:EF:39:42:22:6C
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3231362e302f32322d3234203d3e20323632323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.15.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:ff:24:92:c4:91:c5:24:c9:bb:6e:93:a9:b9:0d:c4:64:fe:
         36:20:b3:aa:8c:8d:4b:d9:c0:8f:db:37:eb:0f:fc:12:d5:9b:
         92:68:58:83:84:ad:d7:36:46:7c:55:20:e5:1a:4f:52:24:21:
         44:d2:36:45:e9:66:54:ad:12:ba:85:c8:89:ce:92:ed:38:92:
         e3:94:ec:7f:9f:ee:7a:aa:a4:c2:13:7d:ab:08:24:44:fd:12:
         34:0a:86:e6:0d:84:c8:f0:48:3c:1b:59:41:13:0e:8b:f4:5d:
         bf:7d:49:8e:aa:49:9b:5b:02:33:19:03:8a:47:d3:70:d1:ae:
         ba:2c:ce:86:f8:d2:fd:1e:dc:ad:9d:17:e1:0d:47:fd:cf:f2:
         3b:55:a0:48:72:36:a4:ce:8f:12:04:92:e8:5a:9e:79:32:78:
         95:e2:7e:25:0c:db:23:50:d6:cb:ca:dd:90:e7:de:e9:59:70:
         ee:59:66:0d:45:84:7a:28:c2:55:cf:4e:f6:8e:94:ca:51:54:
         e0:15:a2:68:90:67:2d:05:a4:24:0c:d7:95:42:92:6a:4f:24:
         f6:43:78:5a:08:e1:e4:29:47:62:1f:c3:ba:02:6d:96:ca:fa:
         f6:9d:92:f2:1f:9e:52:04:2b:95:ee:10:dd:71:5c:7d:03:47:
         50:cf:5a:8c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZahP+TACdZjMgEFd00hJtC3twhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxMUFDQkE3MkU4MEMwMEZFQzEzRDMwQUM2NzYxMzhB
N0FDNDhDNzAeFw0yNjAxMDYxODU1MDhaFw0yNzAxMDUxOTAwMDhaMDMxMTAvBgNV
BAMTKEIzQjFGNDEzNUE2MjBCNzFCQ0RFNkM2Mjk0NDJFQUVGMzk0MjIyNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFF1jkr3uiJgDyIKtURjW4q1c
is0z7+86nGnNY0AQQLzqN1WonYBwOC2EkbrjKFDANf5/5E0xou9cmS9rPRLqWAD+
5LMEi00qOvcrca47EWGVChJtQxeE/IC/EbBWBJIT77WDg2xJKA122xepiqOqgvsz
yGckYlN4QqvhRGZe98o4dgELipTp+TM9IECvrd20qLyHjZL0CqT1+kBAV/uN3grU
UwbGbYnGipsHI3T1OlAniaN8N98TYoojxB80ifkfQL22orc8bga/6MgY/2YOc8Xv
UhTK8qikc3ye+P/9+eihFJFS98J9smCi1IGPKRd6E7TnvZb++Wjbl83uR2MjAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUs7H0E1piC3G83mxilELq7zlCImwwHwYDVR0j
BBgwFoAU9RGsunLoDAD+wT0wrGdhOKesSMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUExQTQ3QzgyRTU0NDM1M0U0QkQzNjc5RDI1NTI4REQz
MzZDMEMzQkU3RjlDOEI4ODQ1NEU3QzQxN0I2OUZGLzAvRjUxMUFDQkE3MkU4MEMw
MEZFQzEzRDMwQUM2NzYxMzhBN0FDNDhDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTExQUNCQTcyRTgwQzAwRkVD
MTNEMzBBQzY3NjEzOEE3QUM0OEM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVBMUE0N0M4MkU1NDQzNTNFNEJEMzY3OUQyNTUyOEREMzM2QzBDM0JF
N0Y5QzhCODg0NTRFN0M0MTdCNjlGRi8wLzMxMzgzNjJlMzEzNTJlMzIzMTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzIzMDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCug/Y
MA0GCSqGSIb3DQEBCwUAA4IBAQBX/ySSxJHFJMm7bpOpuQ3EZP42ILOqjI1L2cCP
2zfrD/wS1ZuSaFiDhK3XNkZ8VSDlGk9SJCFE0jZF6WZUrRK6hciJzpLtOJLjlOx/
n+56qqTCE32rCCRE/RI0CobmDYTI8Eg8G1lBEw6L9F2/fUmOqkmbWwIzGQOKR9Nw
0a66LM6G+NL9HtytnRfhDUf9z/I7VaBIcjakzo8SBJLoWp55MniV4n4lDNsjUNbL
yt2Q597pWXDuWWYNRYR6KMJVz072jpTKUVTgFaJokGctBaQkDNeVQpJqTyT2Q3ha
COHkKUdiH8O6Am2Wyvr2nZLyH55SBCuV7hDdcVx9A0dQz1qM
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:28 2026 by rpki-client