This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3139203d3e203230333132.roa
File:                     3135302e3138362e302e302f31352d3139203d3e203230333132.roa (raw, json)
Hash identifier:          RlLHzmlizV3P78/U3+EuxZ4BXfyyqOihsEGljJm4NSs=
Subject key identifier:   70:8E:54:15:C7:59:4A:D7:4D:E1:B7:47:A9:84:45:FE:69:8E:AA:23
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       6F2E795AB02CD176833F7421766DE25590A6FDAC
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3139203d3e203230333132.roa
Signing time:             Tue 06 Jan 2026 19:17:27 +0000
ROA not before:           Tue 06 Jan 2026 19:12:27 +0000
ROA not after:            Tue 05 Jan 2027 19:17:27 +0000
asID:                     20312
IP address blocks:        150.186.0.0/15 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2e:79:5a:b0:2c:d1:76:83:3f:74:21:76:6d:e2:55:90:a6:fd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Jan  6 19:12:27 2026 GMT
            Not After : Jan  5 19:17:27 2027 GMT
        Subject: CN=708E5415C7594AD74DE1B747A98445FE698EAA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:82:d1:36:ee:0b:d9:a5:95:de:75:b8:26:
                    4e:a9:ea:45:32:fa:55:12:88:51:a5:72:40:23:c6:
                    2c:89:7f:bf:a4:27:88:2d:d3:14:a4:d8:60:be:74:
                    49:e8:13:07:af:3c:e8:1e:82:05:3b:ea:17:8a:fd:
                    aa:d7:cc:00:d4:01:b9:97:ab:ec:ed:45:09:4d:5a:
                    db:a1:0e:09:a6:22:1d:35:e4:3e:00:2d:a2:5b:58:
                    db:9d:12:8d:bc:75:46:3e:16:8f:8b:6f:59:80:9c:
                    d0:a9:46:f0:c2:21:39:0f:98:99:09:18:c5:29:9e:
                    bf:20:1f:4c:73:8f:77:3f:67:6f:f0:78:e9:1a:00:
                    5b:77:fd:18:7e:4a:46:76:a7:02:5d:2a:80:b4:1c:
                    c6:25:5d:bc:77:b6:33:5b:1a:e3:e4:06:b6:cd:c7:
                    2f:06:97:49:0c:f3:72:77:e2:3b:ca:28:2b:6d:43:
                    12:11:36:63:fa:6f:5b:d6:7b:37:bf:ab:23:2f:de:
                    a6:87:e0:f3:a2:e7:1b:b3:59:ae:dd:bf:6f:08:6f:
                    13:3e:f3:0c:aa:d1:07:29:3f:ef:3f:8f:84:09:a1:
                    70:b2:cb:f7:c4:e3:65:bc:25:15:54:f1:a2:81:e6:
                    ee:b7:01:e7:63:36:0d:69:e8:42:d8:90:1a:f9:d4:
                    97:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8E:54:15:C7:59:4A:D7:4D:E1:B7:47:A9:84:45:FE:69:8E:AA:23
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e302e302f31352d3139203d3e203230333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.186.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         c8:58:0b:64:e6:ce:54:f7:12:7a:b1:25:54:a7:b1:6d:ab:96:
         d4:b7:e2:a3:bc:4f:0c:21:17:96:cb:55:2c:6c:32:d8:77:bd:
         7b:43:6d:a4:91:00:7b:98:30:ec:c6:03:46:58:ca:43:30:88:
         f8:56:11:e4:f3:fa:62:3a:54:3e:78:e2:70:f7:3a:05:3d:4c:
         7f:d4:23:82:d8:06:ba:18:7d:a4:7a:02:06:02:d5:42:27:35:
         ab:f8:73:66:49:e3:c0:38:04:05:52:96:01:31:9e:07:a8:1d:
         39:92:9a:8c:90:1d:f1:5b:15:b1:92:b2:f5:d9:e7:f1:7b:d9:
         7d:21:2b:e1:5f:09:f9:d7:4f:52:a7:9e:38:68:b1:3e:16:e0:
         f8:55:3e:5f:0b:7b:4c:cc:85:d0:dd:9d:4f:a4:06:5d:a6:84:
         2f:c5:87:cf:5e:d1:05:d6:de:a6:6b:a4:7e:17:c9:cd:6e:75:
         98:28:c1:44:88:8f:b8:8f:e0:c0:a4:1b:71:54:91:ca:e8:b0:
         31:53:66:d7:bb:00:7d:1b:78:9b:d4:53:69:80:46:c7:ab:f7:
         6c:f8:06:17:59:23:08:60:c6:38:15:c8:7b:04:ac:19:64:d7:
         30:6b:db:35:a0:e1:fb:eb:c3:23:d4:81:ee:44:8e:9f:d8:1e:
         52:27:ad:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:32:39 2026 by rpki-client