This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e31322e302f32332d3233203d3e203332303938.roa
File:                     3138372e3235312e31322e302f32332d3233203d3e203332303938.roa (raw, json)
Hash identifier:          4Ak9JowIhHxuwmAL+LKzFlWa1MXtho5k6IFdmCUoeLI=
Subject key identifier:   8C:81:18:6C:5A:97:19:08:57:C7:95:65:28:FE:4B:EC:99:39:90:FB
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       3E7FD54E75361B178D599ACBCDF8712378BD8694
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e31322e302f32332d3233203d3e203332303938.roa
Signing time:             Tue 06 Jan 2026 19:40:53 +0000
ROA not before:           Tue 06 Jan 2026 19:35:53 +0000
ROA not after:            Tue 05 Jan 2027 19:40:53 +0000
asID:                     32098
IP address blocks:        187.251.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7f:d5:4e:75:36:1b:17:8d:59:9a:cb:cd:f8:71:23:78:bd:86:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jan  6 19:35:53 2026 GMT
            Not After : Jan  5 19:40:53 2027 GMT
        Subject: CN=8C81186C5A97190857C7956528FE4BEC993990FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:0a:da:81:bb:16:94:71:00:ff:87:f0:10:
                    74:95:e2:1a:3e:e8:4a:93:fd:1f:f8:f2:3b:e1:e5:
                    22:ff:0b:b6:99:7e:49:05:47:e0:a1:88:1d:ce:15:
                    de:a5:92:c3:ce:a2:d1:5a:45:23:81:79:d2:96:fb:
                    b7:c3:77:8f:c7:20:96:81:3d:35:33:f6:19:1e:6f:
                    b0:0f:83:2e:35:49:24:e7:74:0e:cf:65:c6:b2:eb:
                    42:42:c0:d7:7e:2b:72:6c:04:95:56:05:88:49:5c:
                    f1:ca:9d:da:6a:6a:49:87:8b:f2:b9:39:f6:ad:0b:
                    30:b9:bf:46:b5:7a:31:49:83:36:ff:d0:5b:15:31:
                    ef:37:c4:8a:39:e1:96:6f:f0:dc:82:f3:34:bf:2f:
                    96:eb:9e:6b:75:54:e8:ad:5b:d5:90:71:c4:1a:79:
                    d2:10:56:62:ad:88:24:e5:b6:b4:8f:e4:1c:2e:b1:
                    f0:46:c5:54:3f:ee:1c:2d:24:0a:ec:78:c2:de:5a:
                    4d:6d:0b:cb:ab:46:47:c6:b6:d6:cd:71:66:91:bc:
                    f1:16:7e:5f:73:42:8b:c4:5f:08:21:91:39:8d:de:
                    cf:05:21:8f:d2:d9:05:58:46:de:d4:58:58:49:6f:
                    ff:bd:22:2d:82:9b:1b:1b:6f:56:1b:37:31:6e:f2:
                    34:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:81:18:6C:5A:97:19:08:57:C7:95:65:28:FE:4B:EC:99:39:90:FB
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e31322e302f32332d3233203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:e7:9a:dd:71:d5:82:53:6a:bd:13:70:e5:a2:0b:9b:6b:b9:
         44:b1:ac:51:e6:6e:d2:af:70:cf:75:b2:c2:db:d1:d9:5f:ff:
         b1:0e:7c:1a:44:dc:18:48:2d:c3:c0:0f:c5:a9:a9:53:27:c7:
         f6:3f:31:4b:0f:9c:16:6c:0a:02:51:f6:75:50:c1:c0:a2:f0:
         c6:33:57:9b:56:cb:fe:b0:80:56:fd:a0:e2:da:b4:fe:b5:6f:
         d5:96:71:7a:ab:d8:66:ab:5a:1a:00:78:04:4f:27:04:fd:a0:
         1b:9d:83:a3:78:27:c8:7e:31:cd:ac:e8:f5:85:aa:a8:da:9a:
         b4:81:18:d1:55:97:2a:8e:a1:ec:34:9f:5e:3f:92:b6:64:df:
         0e:74:63:65:d3:cd:8f:26:15:0f:5d:a5:e7:81:0b:6b:20:06:
         62:7b:01:38:5c:e0:49:32:5c:bf:38:16:d9:50:dd:ed:bc:6b:
         1c:6a:97:f7:74:6f:63:65:d0:04:25:e3:a8:3e:f6:88:c1:5a:
         60:f8:cd:33:b7:19:48:eb:eb:c8:6d:15:ba:4b:f8:91:f4:5e:
         ac:e2:68:b9:ed:47:f3:26:25:0c:10:09:a5:03:18:13:90:e6:
         0b:9e:fc:8c:3b:58:2d:d9:a7:2c:d6:80:cd:35:f9:8e:26:b7:
         5a:bb:3a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:01:45 2026 by rpki-client