This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136312e302f32342d3234203d3e203134353933.roa
File:                     3134392e31392e3136312e302f32342d3234203d3e203134353933.roa (raw, json)
Hash identifier:          pWEJMoAmpXqy0rndi4Kl9QFvedXn7K+favLQD4tYr1Q=
Subject key identifier:   9F:81:C5:73:45:6F:8A:55:BD:F9:91:3E:AD:9B:D1:8D:0E:5A:F2:A5
Certificate issuer:       /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial:       20B189A790894A74D1C4CB6B3C77F8144AA99DF9
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136312e302f32342d3234203d3e203134353933.roa
Signing time:             Tue 06 Jan 2026 19:10:51 +0000
ROA not before:           Tue 06 Jan 2026 19:05:51 +0000
ROA not after:            Tue 05 Jan 2027 19:10:51 +0000
asID:                     14593
IP address blocks:        149.19.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 16:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b1:89:a7:90:89:4a:74:d1:c4:cb:6b:3c:77:f8:14:4a:a9:9d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Validity
            Not Before: Jan  6 19:05:51 2026 GMT
            Not After : Jan  5 19:10:51 2027 GMT
        Subject: CN=9F81C573456F8A55BDF9913EAD9BD18D0E5AF2A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ea:32:8b:18:30:d2:4f:f1:65:50:55:30:b0:
                    96:d0:e6:65:d2:30:39:24:74:d1:c0:7b:55:17:00:
                    33:81:a9:53:30:c3:88:81:c8:8e:3a:01:1a:e0:50:
                    1f:02:0a:7e:27:41:78:f0:08:c1:9c:61:e9:77:72:
                    e1:9b:9b:2b:06:e3:19:8c:f8:39:ab:a3:92:0f:0f:
                    7b:aa:7c:4f:82:fe:6b:9f:35:a9:90:eb:70:a4:cb:
                    64:4c:ac:3b:6e:39:19:fa:83:08:68:ec:ce:32:d0:
                    80:8c:b5:0d:ae:3c:9e:8d:bf:40:79:cf:31:61:f4:
                    7d:f5:d6:8e:fb:2c:0c:b3:25:31:50:e9:ee:c0:67:
                    16:20:57:4d:63:55:78:96:ec:dd:97:29:c1:fe:be:
                    08:24:b9:dd:69:62:3f:d4:f4:8b:fb:33:82:50:43:
                    3d:9b:94:d5:f2:1a:3d:63:c6:bd:71:d2:e8:aa:0e:
                    9a:3b:87:60:4b:ac:9f:2b:75:3a:d8:88:a7:ff:d7:
                    33:ff:90:df:e1:2c:7b:99:0c:17:0b:a3:25:20:18:
                    3b:a8:c6:71:eb:28:21:09:f6:05:30:85:6d:82:2b:
                    66:1b:e3:81:1b:eb:ff:f7:a6:41:17:6e:e3:12:ce:
                    ea:9c:85:ac:a0:60:f4:24:f2:5e:9f:25:3a:08:7d:
                    21:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:81:C5:73:45:6F:8A:55:BD:F9:91:3E:AD:9B:D1:8D:0E:5A:F2:A5
            X509v3 Authority Key Identifier:
                keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136312e302f32342d3234203d3e203134353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:87:3f:6b:9d:74:aa:2b:dd:e2:1d:68:16:80:a9:93:69:ed:
         3d:b6:50:a2:c9:a3:2c:53:fa:37:e1:50:42:58:c9:a6:08:1d:
         ad:40:e7:8e:eb:1a:55:ed:d2:3e:97:66:9a:ac:41:b7:1e:26:
         3f:08:95:d9:e9:4f:65:d2:73:7d:fb:1e:88:a4:89:2b:9e:40:
         6a:12:70:67:83:ef:7b:16:5d:b2:c0:d5:fd:8e:fc:cc:74:cb:
         2b:79:38:1e:2e:a7:a2:7a:88:c0:68:62:db:59:a1:eb:91:8a:
         36:d0:00:35:64:57:39:72:21:4b:84:b3:60:64:de:06:91:10:
         06:85:c1:5d:40:70:99:75:53:83:68:e7:a8:21:6e:08:81:09:
         8f:0e:88:03:47:59:19:fe:46:fe:da:0b:09:62:7d:ec:a8:62:
         aa:43:ab:36:be:fa:8b:61:d5:61:41:71:96:64:16:35:64:86:
         79:a6:36:f7:35:f5:d3:be:71:9a:ad:e3:e1:0b:58:d2:9a:c9:
         43:0d:1c:f9:8d:08:5f:ba:2b:34:61:95:31:93:0d:d3:96:a8:
         bd:c8:c6:2f:a8:82:2b:22:42:96:50:fc:eb:b9:da:cb:b3:c6:
         52:d2:92:46:97:d5:a3:db:9c:da:e7:99:98:2c:1c:5c:1a:6b:
         b8:a6:13:ec
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUILGJp5CJSnTRxMtrPHf4FEqpnfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVEQTE3MUQ1QUUwOUU1NUE3MjgwREMyMjc2MTBEODJB
MkFCMDM1NjAeFw0yNjAxMDYxOTA1NTFaFw0yNzAxMDUxOTEwNTFaMDMxMTAvBgNV
BAMTKDlGODFDNTczNDU2RjhBNTVCREY5OTEzRUFEOUJEMThEMEU1QUYyQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6jKLGDDST/FlUFUwsJbQ5mXS
MDkkdNHAe1UXADOBqVMww4iByI46ARrgUB8CCn4nQXjwCMGcYel3cuGbmysG4xmM
+Dmro5IPD3uqfE+C/mufNamQ63Cky2RMrDtuORn6gwho7M4y0ICMtQ2uPJ6Nv0B5
zzFh9H311o77LAyzJTFQ6e7AZxYgV01jVXiW7N2XKcH+vggkud1pYj/U9Iv7M4JQ
Qz2blNXyGj1jxr1x0uiqDpo7h2BLrJ8rdTrYiKf/1zP/kN/hLHuZDBcLoyUgGDuo
xnHrKCEJ9gUwhW2CK2Yb44Eb6//3pkEXbuMSzuqchaygYPQk8l6fJToIfSG1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUn4HFc0VvilW9+ZE+rZvRjQ5a8qUwHwYDVR0j
BBgwFoAUFdoXHVrgnlWnKA3CJ2ENgqKrA1YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDgzNzdCOEY4MTBFNjlCMUU2REUzRjIyOTg0OEFCMzQ0
RkI3ODY0OTQyRjc2Q0NDQ0JFNUMyNTZCMjNENkJGLzAvMTVEQTE3MUQ1QUUwOUU1
NUE3MjgwREMyMjc2MTBEODJBMkFCMDM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNURBMTcxRDVBRTA5RTU1QTcy
ODBEQzIyNzYxMEQ4MkEyQUIwMzU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ4Mzc3QjhGODEwRTY5QjFFNkRFM0YyMjk4NDhBQjM0NEZCNzg2NDk0
MkY3NkNDQ0NCRTVDMjU2QjIzRDZCRi8wLzMxMzQzOTJlMzEzOTJlMzEzNjMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM1MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJUToTAN
BgkqhkiG9w0BAQsFAAOCAQEAKoc/a510qivd4h1oFoCpk2ntPbZQosmjLFP6N+FQ
QljJpggdrUDnjusaVe3SPpdmmqxBtx4mPwiV2elPZdJzffseiKSJK55AahJwZ4Pv
exZdssDV/Y78zHTLK3k4Hi6nonqIwGhi21mh65GKNtAANWRXOXIhS4SzYGTeBpEQ
BoXBXUBwmXVTg2jnqCFuCIEJjw6IA0dZGf5G/toLCWJ97KhiqkOrNr76i2HVYUFx
lmQWNWSGeaY29zX1075xmq3j4QtY0prJQw0c+Y0IX7orNGGVMZMN05aovcjGL6iC
KyJCllD867nay7PGUtKSRpfVo9uc2ueZmCwcXBpruKYT7A==
-----END CERTIFICATE-----
Generated at Tue Jan 13 03:09:11 2026 by rpki-client