This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31362d3234203d3e203230333132.roa
File:                     3135302e3138382e302e302f31362d3234203d3e203230333132.roa (raw, json)
Hash identifier:          ENiqrwp8WexbV+HlQJWBloDCxsztTPmdDsRUzwXvZIY=
Subject key identifier:   9C:1F:E8:75:A5:0E:8D:09:55:5A:82:8B:7D:72:FB:BC:CA:D6:FB:13
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       491095CBBB381E5D0EFC67212A555E4116EB53F0
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31362d3234203d3e203230333132.roa
Signing time:             Tue 06 Jan 2026 19:17:25 +0000
ROA not before:           Tue 06 Jan 2026 19:12:25 +0000
ROA not after:            Tue 05 Jan 2027 19:17:25 +0000
asID:                     20312
IP address blocks:        150.188.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:10:95:cb:bb:38:1e:5d:0e:fc:67:21:2a:55:5e:41:16:eb:53:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Jan  6 19:12:25 2026 GMT
            Not After : Jan  5 19:17:25 2027 GMT
        Subject: CN=9C1FE875A50E8D09555A828B7D72FBBCCAD6FB13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:06:ae:2f:de:af:71:69:a7:bf:75:a3:15:
                    a3:69:59:b0:b6:e6:57:27:9b:4c:31:8f:4a:db:f3:
                    7d:dc:7f:eb:a7:b7:d4:4e:0d:1c:7b:84:d8:ae:95:
                    42:78:83:55:36:33:e9:d7:d8:be:a8:a5:29:4a:ba:
                    93:e2:cf:bc:dc:0e:24:82:e7:78:ff:00:a4:e8:6a:
                    be:4c:94:92:bb:ec:92:6c:84:c1:eb:eb:ab:ef:79:
                    13:bc:ed:50:8f:74:13:f4:5f:6b:e8:70:36:7b:17:
                    dc:d1:b4:6b:fd:c5:2d:68:5c:93:f1:f3:4f:ca:50:
                    ac:ee:d5:f2:95:ea:86:2f:a6:67:70:20:92:5c:79:
                    ca:8d:fa:c6:c6:b9:77:4b:a2:71:5b:dd:50:8e:b3:
                    14:ef:00:ce:5f:a4:a6:94:7a:f9:01:00:9a:37:43:
                    da:44:43:43:28:eb:9f:e0:20:52:ad:e0:db:2c:4d:
                    3e:18:26:bc:08:2b:31:42:86:48:e9:88:d6:92:31:
                    14:12:35:a3:c4:a8:25:49:50:a3:30:cd:99:1b:42:
                    2f:af:68:f8:95:9d:46:8f:26:b3:0b:44:ea:bb:d6:
                    67:0e:71:e1:ea:c3:11:55:d5:a8:e0:4c:39:e6:5d:
                    78:7e:a6:2a:ea:4a:53:6b:a5:7e:e9:78:67:93:ab:
                    3f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1F:E8:75:A5:0E:8D:09:55:5A:82:8B:7D:72:FB:BC:CA:D6:FB:13
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138382e302e302f31362d3234203d3e203230333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.188.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3e:96:61:ed:da:70:cc:38:a8:1b:34:5d:88:bb:39:5b:1c:9c:
         3b:84:62:ad:75:4f:d3:16:08:a5:36:61:6b:fd:53:a9:8d:73:
         71:70:73:82:f7:29:97:c7:6d:53:96:88:66:90:3d:ed:c3:74:
         1e:d4:d2:df:72:bf:9c:7e:9d:a7:29:df:1f:cc:fd:91:8b:b3:
         a7:ae:7b:aa:3b:f1:3c:58:a5:3f:c3:22:f5:27:2b:cf:b6:45:
         9b:3e:9e:d5:9b:a6:8e:65:55:1d:16:8f:2c:bc:b2:89:ed:e0:
         f4:ae:96:89:83:5d:d4:aa:12:6a:4e:1a:cf:fa:b9:cf:ae:93:
         09:2d:61:79:a5:03:10:bc:10:96:95:22:32:52:05:89:4d:81:
         37:c7:58:3b:bf:26:66:ff:94:9e:47:c8:dd:de:5a:9b:6a:6d:
         e2:d0:b4:49:ca:ab:95:38:2f:08:c0:8b:34:9c:b7:1d:0c:e0:
         d9:bc:0d:a3:60:91:cb:49:9a:3d:78:30:52:1e:2d:0c:f6:f6:
         ab:f6:4f:3b:84:99:f8:2c:f2:9e:f6:2f:e7:f3:9b:ed:06:1f:
         37:3c:5d:33:3f:75:6f:b2:1e:2d:cf:0a:6e:c3:80:ca:37:2d:
         56:8c:ac:99:19:52:fc:e4:ce:03:66:62:b3:2a:4e:f3:f7:09:
         2b:f7:2d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:46 2026 by rpki-client