This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e3232322e302f32342d3234203d3e203237383932.roa
File:                     3135302e3138352e3232322e302f32342d3234203d3e203237383932.roa (raw, json)
Hash identifier:          3b3PnOb1YfkpNIgmOxfapVMfJloqNdn4Fo+BetUL0hM=
Subject key identifier:   92:0E:9A:23:92:48:CC:31:2A:2D:A4:F8:CF:ED:BB:97:F3:18:94:80
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       7932F8FB157DFEE764B5F9055E2D7B3BBE908D13
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e3232322e302f32342d3234203d3e203237383932.roa
Signing time:             Tue 06 Jan 2026 19:17:22 +0000
ROA not before:           Tue 06 Jan 2026 19:12:22 +0000
ROA not after:            Tue 05 Jan 2027 19:17:22 +0000
asID:                     27892
IP address blocks:        150.185.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:32:f8:fb:15:7d:fe:e7:64:b5:f9:05:5e:2d:7b:3b:be:90:8d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Jan  6 19:12:22 2026 GMT
            Not After : Jan  5 19:17:22 2027 GMT
        Subject: CN=920E9A239248CC312A2DA4F8CFEDBB97F3189480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:db:96:49:f2:70:1e:cb:5d:56:a4:a0:36:
                    be:91:c8:eb:df:31:ea:10:40:91:98:bd:00:36:33:
                    0c:1d:11:5d:d8:d8:95:65:a3:72:61:3c:e0:c4:84:
                    24:b7:93:07:73:7c:17:6d:d6:d0:13:31:81:45:d3:
                    85:2d:d1:85:12:50:56:0c:6f:9c:a0:94:a4:0d:11:
                    18:f7:03:a8:53:4a:04:e4:19:1a:50:44:9d:c3:aa:
                    ab:67:29:ca:be:5b:99:79:ea:16:3d:f3:dc:5a:2e:
                    8c:cf:e5:14:01:c9:df:43:7e:3b:07:9c:27:58:02:
                    8c:57:43:0d:44:06:11:a4:5e:77:c5:b5:0d:f7:a3:
                    81:0f:87:d2:e6:23:6b:26:6f:ad:b9:a7:82:e8:94:
                    51:b5:77:53:1f:28:8e:2e:ba:59:04:d5:4b:f7:71:
                    c7:45:f6:e9:88:91:64:d5:92:2b:7b:de:64:e8:92:
                    50:00:43:63:fe:e7:f6:08:aa:7e:97:2f:8b:f0:d7:
                    fd:ec:e9:27:98:51:69:bf:91:fe:0a:73:cf:21:81:
                    0e:41:92:5f:91:6a:f5:c6:07:de:8d:b1:d9:17:80:
                    74:15:7f:24:49:ca:a7:df:70:23:fd:fc:75:98:37:
                    69:6d:86:f4:e7:fd:0d:e0:ce:17:a2:a7:41:43:42:
                    44:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0E:9A:23:92:48:CC:31:2A:2D:A4:F8:CF:ED:BB:97:F3:18:94:80
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e3232322e302f32342d3234203d3e203237383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.185.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:28:ac:ee:24:42:cb:72:90:10:51:96:8e:a6:4b:62:9a:cc:
         bc:40:b3:d0:03:34:25:a6:ef:77:6f:d6:3d:72:a8:7b:5a:f9:
         d2:37:08:16:3c:18:4d:d7:ec:be:53:69:68:e3:5b:d6:c6:c3:
         e6:2c:d8:f1:ea:86:47:8b:e7:8b:66:2b:77:fe:44:90:e6:58:
         c7:0b:51:24:39:88:95:e7:28:9a:b1:10:13:7e:2c:80:19:63:
         38:48:22:01:1e:e3:23:10:15:2e:05:d6:3d:59:b4:c2:2e:70:
         9a:40:99:51:ff:e1:7a:a8:39:39:0b:01:a7:51:1c:5c:43:21:
         ac:bd:5d:77:d0:06:9d:8f:3e:08:cf:ae:48:21:58:af:af:05:
         4b:81:02:0e:a6:e3:a3:6c:34:b4:fb:ce:27:1b:51:14:d6:93:
         94:09:16:f1:16:b2:61:a1:66:83:75:92:6d:1b:62:08:43:d1:
         3f:a7:51:a8:09:6a:9e:fa:d8:04:15:ab:63:d5:28:20:15:75:
         b0:56:4c:9b:d4:38:7c:b6:6d:28:85:0e:35:da:d1:36:4e:da:
         b1:fa:7d:0e:16:37:83:f2:89:d9:45:13:2b:10:e0:e2:13:ad:
         96:77:dc:3c:e4:b2:0d:eb:43:eb:3b:45:44:7b:89:af:b0:0a:
         20:4f:b6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 22:15:27 2026 by rpki-client