This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134322e302f32342d3234203d3e203237383931.roa
File:                     3135302e3138372e3134322e302f32342d3234203d3e203237383931.roa (raw, json)
Hash identifier:          Kr8yTr9R3+M90dVBXBTDKLOAJees6CFAtsJpQ/x+aTM=
Subject key identifier:   B3:58:C9:BC:E3:F3:EC:D4:DC:EE:C3:18:A0:78:36:42:DF:A5:25:93
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       41C87C5C439D3AE5436A49D4DFCF07FCD5AD6FF6
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134322e302f32342d3234203d3e203237383931.roa
Signing time:             Tue 06 Jan 2026 19:17:24 +0000
ROA not before:           Tue 06 Jan 2026 19:12:24 +0000
ROA not after:            Tue 05 Jan 2027 19:17:24 +0000
asID:                     27891
IP address blocks:        150.187.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c8:7c:5c:43:9d:3a:e5:43:6a:49:d4:df:cf:07:fc:d5:ad:6f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Jan  6 19:12:24 2026 GMT
            Not After : Jan  5 19:17:24 2027 GMT
        Subject: CN=B358C9BCE3F3ECD4DCEEC318A0783642DFA52593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:da:81:fb:72:11:1b:9c:03:5f:9b:14:26:
                    ae:0a:32:16:4a:b8:7a:0f:ac:9f:e0:c4:96:6d:6b:
                    2f:e6:35:73:57:c4:bd:9a:c9:8e:59:b7:a2:95:8f:
                    c2:72:18:5b:e5:61:3b:75:5e:e1:02:6a:11:dd:80:
                    ea:41:8a:71:1a:ff:d5:e3:f8:1c:04:71:f7:30:22:
                    ac:32:ba:6c:81:17:cd:05:b5:1e:98:9e:53:b8:b8:
                    eb:a7:e8:24:73:05:2a:b0:76:05:24:b4:ff:ae:94:
                    bf:3d:fd:ec:ce:53:af:3a:48:0e:1f:52:9a:c2:61:
                    31:5c:81:80:ec:d6:5f:05:28:91:85:85:c0:69:66:
                    62:f3:53:c3:97:73:ec:91:50:72:f3:03:9a:e4:b9:
                    df:d4:1e:4d:ef:0d:06:09:5e:dc:9b:0e:e5:8f:de:
                    d7:cb:7c:29:2b:b5:5d:d0:73:c2:cf:e3:ab:b3:82:
                    43:ec:04:00:55:e4:88:c1:69:24:3e:fe:3d:73:c8:
                    a4:eb:1d:bb:af:3b:00:03:0c:d8:6c:2c:1b:bc:5f:
                    51:e2:3b:6b:2b:5d:29:43:c6:95:80:ba:11:61:17:
                    3a:99:a8:ca:f1:1f:4a:ca:e7:dd:19:07:30:f8:f1:
                    7e:57:02:10:39:32:df:0b:2f:a6:bf:da:75:12:88:
                    0c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:58:C9:BC:E3:F3:EC:D4:DC:EE:C3:18:A0:78:36:42:DF:A5:25:93
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134322e302f32342d3234203d3e203237383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.187.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:9f:4d:13:6d:8e:50:8d:5c:80:30:7a:56:5f:20:7e:08:
         99:aa:3c:b1:9f:c2:63:63:ca:da:f1:1e:e2:44:fa:53:aa:bc:
         da:ca:c1:e3:4e:ec:22:1e:b5:53:99:4d:70:71:c3:6c:d6:e0:
         2d:db:47:b5:33:e2:6c:cb:8c:9c:8a:61:32:1b:c8:d2:01:af:
         aa:e3:12:ab:15:81:1f:65:90:b0:66:2f:13:d0:49:45:12:65:
         8b:19:39:f9:7d:28:94:63:e1:68:38:a4:a1:37:c7:8d:2a:ae:
         73:db:02:5e:03:6a:8c:bc:0e:b3:1d:30:9d:9f:4e:20:bd:2e:
         bc:56:72:50:0f:cd:69:d6:b0:7f:13:ef:e3:f5:0f:cf:22:45:
         8e:ca:b5:6c:79:69:9a:55:61:e5:7e:3f:e7:40:fe:a9:1b:72:
         e4:83:e1:af:c2:20:93:aa:ad:1e:cb:19:15:81:42:d0:48:96:
         be:95:87:f0:01:dc:a8:d7:d0:5a:76:f8:91:29:27:a9:7b:0d:
         33:a2:67:1a:66:09:2a:27:60:df:6a:95:92:fd:b1:f7:26:46:
         30:68:09:0b:07:3e:4f:b1:c2:81:a6:de:e0:34:92:49:f3:8e:
         59:c3:85:6e:a6:fc:9c:cb:f7:91:a9:f5:10:25:fd:8b:ff:b1:
         aa:c2:96:43
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQch8XEOdOuVDaknU388H/NWtb/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEyQjM4Njg0REE2OTQxRDVCRDgyODgyNDM4QjVBNkEx
QkMzRUY4MzAeFw0yNjAxMDYxOTEyMjRaFw0yNzAxMDUxOTE3MjRaMDMxMTAvBgNV
BAMTKEIzNThDOUJDRTNGM0VDRDREQ0VFQzMxOEEwNzgzNjQyREZBNTI1OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/NqB+3IRG5wDX5sUJq4KMhZK
uHoPrJ/gxJZtay/mNXNXxL2ayY5Zt6KVj8JyGFvlYTt1XuECahHdgOpBinEa/9Xj
+BwEcfcwIqwyumyBF80FtR6YnlO4uOun6CRzBSqwdgUktP+ulL89/ezOU686SA4f
UprCYTFcgYDs1l8FKJGFhcBpZmLzU8OXc+yRUHLzA5rkud/UHk3vDQYJXtybDuWP
3tfLfCkrtV3Qc8LP46uzgkPsBABV5IjBaSQ+/j1zyKTrHbuvOwADDNhsLBu8X1Hi
O2srXSlDxpWAuhFhFzqZqMrxH0rK590ZBzD48X5XAhA5Mt8LL6a/2nUSiAwfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUs1jJvOPz7NTc7sMYoHg2Qt+lJZMwHwYDVR0j
BBgwFoAU8Ss4aE2mlB1b2CiCQ4taahvD74MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0JCRDlCMzA2RjY3NUREOUM2NUZDMzU5QTNFOEJEMDJF
ODgwMEQ4MDczN0RGMUVDODQ1QUY1NjE5ODgyMzQ5LzAvRjEyQjM4Njg0REE2OTQx
RDVCRDgyODgyNDM4QjVBNkExQkMzRUY4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMTJCMzg2ODREQTY5NDFENUJE
ODI4ODI0MzhCNUE2QTFCQzNFRjgzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNCQkQ5QjMwNkY2NzVERDlDNjVGQzM1OUEzRThCRDAyRTg4MDBEODA3
MzdERjFFQzg0NUFGNTYxOTg4MjM0OS8wLzMxMzUzMDJlMzEzODM3MmUzMTM0MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzgzOTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlruO
MA0GCSqGSIb3DQEBCwUAA4IBAQAdwJ9NE22OUI1cgDB6Vl8gfgiZqjyxn8JjY8ra
8R7iRPpTqrzaysHjTuwiHrVTmU1wccNs1uAt20e1M+Jsy4ycimEyG8jSAa+q4xKr
FYEfZZCwZi8T0ElFEmWLGTn5fSiUY+FoOKShN8eNKq5z2wJeA2qMvA6zHTCdn04g
vS68VnJQD81p1rB/E+/j9Q/PIkWOyrVseWmaVWHlfj/nQP6pG3Lkg+GvwiCTqq0e
yxkVgULQSJa+lYfwAdyo19BadviRKSepew0zomcaZgkqJ2DfapWS/bH3JkYwaAkL
Bz5PscKBpt7gNJJJ845Zw4Vupvycy/eRqfUQJf2L/7GqwpZD
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:58 2026 by rpki-client