This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134382e302f32342d3234203d3e203237383931.roa
File:                     3135302e3138372e3134382e302f32342d3234203d3e203237383931.roa (raw, json)
Hash identifier:          Q9JIPbaMMBKQLUCLvLA8cwOPt+ETc5SrrOCGJPStqd0=
Subject key identifier:   4D:F4:B6:87:B6:53:E7:DD:00:5E:99:94:76:E4:B6:08:6C:1A:7F:00
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       63BFCE5AFC8D9E1099E3D70B47522A58E8B18B8A
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134382e302f32342d3234203d3e203237383931.roa
Signing time:             Tue 06 Jan 2026 19:17:26 +0000
ROA not before:           Tue 06 Jan 2026 19:12:26 +0000
ROA not after:            Tue 05 Jan 2027 19:17:26 +0000
asID:                     27891
IP address blocks:        150.187.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:bf:ce:5a:fc:8d:9e:10:99:e3:d7:0b:47:52:2a:58:e8:b1:8b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Jan  6 19:12:26 2026 GMT
            Not After : Jan  5 19:17:26 2027 GMT
        Subject: CN=4DF4B687B653E7DD005E999476E4B6086C1A7F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:35:99:46:c0:a3:39:f0:a7:bb:be:66:db:
                    f9:7f:6e:4f:59:19:be:5d:4c:23:6e:ab:ef:28:5e:
                    18:57:51:c0:77:6a:b7:40:a5:00:6b:97:33:b1:bb:
                    48:9d:1d:64:65:b4:8b:91:34:08:b0:e6:ac:bc:27:
                    78:30:62:8c:ca:e2:e1:89:9b:d0:bb:41:21:d2:e5:
                    2c:62:17:d3:d1:7a:80:3c:8e:d2:3a:c5:f8:10:f1:
                    a7:80:2e:97:10:df:85:9e:82:7c:1a:41:ce:f3:8b:
                    5c:1b:db:e5:b4:f9:7c:f8:44:b5:5d:e6:2b:2a:a8:
                    43:58:09:e0:0f:e7:cf:a0:64:b1:ed:57:9f:a5:42:
                    f1:2d:e1:37:72:f9:9e:d5:70:9d:be:cc:c9:53:fa:
                    13:f8:03:4a:12:7d:a2:7f:84:98:b8:31:da:50:84:
                    96:0a:e6:50:8e:1c:66:ea:bb:66:57:94:62:54:a2:
                    0d:06:d3:ea:01:f2:6b:92:c6:94:ee:a8:21:2c:09:
                    2c:d7:76:ab:86:ab:1b:78:aa:75:bc:d6:09:31:56:
                    28:c9:38:6e:3b:7d:36:fa:04:74:eb:9d:5e:86:48:
                    dd:bb:55:2a:a3:65:15:97:f4:76:d0:e1:5b:ab:b5:
                    33:62:01:de:fb:f4:13:34:b0:9a:7f:25:e2:79:ba:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F4:B6:87:B6:53:E7:DD:00:5E:99:94:76:E4:B6:08:6C:1A:7F:00
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138372e3134382e302f32342d3234203d3e203237383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.187.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:88:6d:19:a5:14:83:38:b0:73:7f:33:84:ef:54:7d:f6:d9:
         fc:48:c8:c2:db:07:78:df:54:ce:b3:15:79:cc:a4:eb:d5:5c:
         15:e2:03:ae:d3:cd:43:6b:1f:a8:73:2c:ec:10:e6:9e:cf:be:
         59:a3:d5:c9:78:25:27:68:38:79:19:82:d0:c9:41:51:da:85:
         92:7e:8b:20:d3:6b:d1:40:a1:d2:4c:c8:1b:3a:31:b8:ae:be:
         58:75:23:d9:a9:a3:90:b3:ba:4f:33:e4:12:ee:83:67:88:c6:
         b5:79:df:00:10:2f:65:1d:92:c9:d4:32:5c:03:89:1b:fc:54:
         78:eb:cb:fb:6e:19:8d:90:c5:c6:36:27:b9:4a:25:eb:e2:60:
         cb:58:16:50:f0:b7:d6:26:3c:a2:56:43:ea:db:a7:0d:21:2b:
         c5:ef:bc:18:f5:19:ce:11:eb:37:4e:e8:0c:bf:1b:13:97:67:
         5d:7f:ef:e1:91:df:dc:e4:dd:1a:83:13:4e:38:c0:69:59:b5:
         3a:9d:7f:9e:87:33:de:78:84:d6:4e:18:e5:53:e8:e9:57:0f:
         5b:07:86:0d:e6:5b:1b:64:e4:54:5d:48:fc:8b:5b:3b:ec:48:
         bb:9c:11:af:35:dd:f9:79:fe:83:57:d9:79:a0:97:b7:1f:31:
         e7:81:12:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:30 2026 by rpki-client