This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3136203d3e203237383037.roa
File:                     3135302e3138362e302e302f31352d3136203d3e203237383037.roa (raw, json)
Hash identifier:          luHTJnzQlbEqPV37TTNrg1ODjSgPHnhM26zTHKduvxI=
Subject key identifier:   D7:73:75:9E:9E:FE:E8:C3:22:FD:5A:0D:11:9B:03:13:8B:F8:5C:15
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       1162FCD285A7B141F719E84D174B205C4E019FB4
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3136203d3e203237383037.roa
Signing time:             Tue 06 Jan 2026 19:17:25 +0000
ROA not before:           Tue 06 Jan 2026 19:12:25 +0000
ROA not after:            Tue 05 Jan 2027 19:17:25 +0000
asID:                     27807
IP address blocks:        150.186.0.0/15 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:62:fc:d2:85:a7:b1:41:f7:19:e8:4d:17:4b:20:5c:4e:01:9f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Jan  6 19:12:25 2026 GMT
            Not After : Jan  5 19:17:25 2027 GMT
        Subject: CN=D773759E9EFEE8C322FD5A0D119B03138BF85C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:df:3f:ef:05:36:8a:72:0e:cb:ff:e5:2e:eb:
                    24:7c:76:00:ba:22:81:c3:62:f2:78:26:a6:28:6b:
                    27:a9:59:fd:a4:77:ee:83:68:39:80:93:78:6c:b5:
                    76:d3:e8:12:ec:90:94:0f:a7:27:bf:74:19:26:91:
                    ee:49:c1:58:f1:f2:fc:41:02:90:bf:9d:1d:ee:46:
                    1d:23:ed:8e:33:85:d5:90:69:41:ee:fb:18:7f:83:
                    78:45:d8:02:b3:d4:3e:64:6a:a3:55:49:a4:1d:11:
                    7a:64:00:9a:44:06:20:88:41:0c:94:9e:04:2f:f2:
                    0e:61:58:76:d6:49:ce:f5:66:d7:a3:46:6e:09:bf:
                    a6:4a:21:b6:c8:8d:cf:14:0a:41:4a:ab:a1:57:0c:
                    cb:36:e5:97:4f:cd:0a:b0:ea:d0:3e:14:75:06:55:
                    b8:ac:b2:d4:55:54:9a:f5:d2:e7:7d:f6:dc:06:ec:
                    7c:52:11:e1:d4:19:aa:f2:52:fe:42:ab:78:9f:0a:
                    78:35:51:9e:36:30:8b:d0:5a:18:93:63:aa:9a:99:
                    25:e5:b2:83:ac:92:cd:e7:07:f4:39:ec:75:da:c6:
                    30:51:4e:68:69:dd:8e:7f:43:66:e2:d4:d7:8e:ad:
                    92:d5:47:1c:3e:22:87:e7:65:f7:9f:03:41:63:00:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:73:75:9E:9E:FE:E8:C3:22:FD:5A:0D:11:9B:03:13:8B:F8:5C:15
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3136203d3e203237383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.186.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a4:15:04:38:80:b8:a6:9f:ff:69:54:17:83:a0:7e:56:45:a7:
         cc:54:9e:c2:74:06:f9:9f:05:c1:a9:ef:b7:82:37:47:21:e9:
         14:b3:f3:bd:d1:98:14:8f:1f:ec:c2:df:77:f3:0a:3c:d8:f8:
         22:e6:93:56:a8:b5:81:ac:65:03:43:b2:4d:5c:8b:fe:ee:8d:
         71:91:3a:38:ab:e0:6f:4a:b3:05:c8:18:9e:46:9b:32:88:df:
         81:f8:a9:02:30:35:5e:bd:99:03:fe:ee:e8:77:b6:c2:7a:89:
         27:aa:36:00:7e:40:fe:24:02:66:e7:d2:64:af:c9:9c:bf:8f:
         99:1f:a0:0d:57:4e:8c:3a:5e:ed:f5:02:20:be:5e:8c:65:4d:
         ca:90:fb:eb:0e:cf:5a:f1:28:89:fa:66:66:e0:70:23:f0:16:
         be:4b:0e:fb:0d:38:09:ce:0c:9e:2c:9c:34:f9:a7:b5:8b:fd:
         03:4a:de:14:f1:cd:fc:80:db:b3:bc:b7:3d:1a:39:a3:a3:26:
         1c:69:d7:4a:15:0a:bf:12:48:ec:89:7e:dc:29:2a:11:94:9f:
         74:f5:6c:24:32:6b:ed:6e:c1:a6:33:0e:29:be:ce:72:15:c0:
         71:eb:d8:99:30:0b:55:3f:cf:be:30:d5:ab:56:89:67:ca:62:
         d1:c6:49:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:31 2026 by rpki-client