This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138392e302e302f31362d3234203d3e203230333132.roa
File:                     3135302e3138392e302e302f31362d3234203d3e203230333132.roa (raw, json)
Hash identifier:          mUd9NE/Pfw0ydZ5+8RrrP8/lJuFqt5m4nyUldL09Tvc=
Subject key identifier:   C3:FC:EC:30:20:B0:64:95:77:30:46:B4:2E:5E:1F:7D:C3:21:7E:BB
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       017FFEDDA4B960720AD7FDD82CBAC1ED11BDC7CD
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138392e302e302f31362d3234203d3e203230333132.roa
Signing time:             Tue 06 Jan 2026 19:17:27 +0000
ROA not before:           Tue 06 Jan 2026 19:12:27 +0000
ROA not after:            Tue 05 Jan 2027 19:17:27 +0000
asID:                     20312
IP address blocks:        150.189.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7f:fe:dd:a4:b9:60:72:0a:d7:fd:d8:2c:ba:c1:ed:11:bd:c7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Jan  6 19:12:27 2026 GMT
            Not After : Jan  5 19:17:27 2027 GMT
        Subject: CN=C3FCEC3020B06495773046B42E5E1F7DC3217EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:55:58:24:16:83:0a:b9:f0:d6:a8:f5:b2:d4:
                    71:f2:7e:b2:4f:96:69:22:68:50:9a:6f:6a:e9:da:
                    73:91:8a:68:ab:1f:2e:24:7b:84:fd:b9:a3:be:fc:
                    04:da:67:21:8d:26:35:da:5d:db:bc:be:b6:7f:45:
                    b6:44:7c:f1:53:e3:38:27:3f:9e:9e:39:5e:57:c9:
                    db:e1:de:fc:07:56:3a:38:17:c1:a1:af:9b:5d:07:
                    44:83:b5:7a:da:c3:49:be:eb:9c:20:ff:ea:53:00:
                    37:85:d7:9f:6a:0c:75:ca:d4:ca:8f:37:5f:0c:d7:
                    86:85:98:d0:60:28:a3:6f:43:8f:30:d0:0e:b7:76:
                    6b:29:cc:56:a8:83:6c:59:3c:ad:3a:0d:1f:ed:08:
                    42:5e:62:b4:f4:2b:4f:d7:45:4f:8b:20:b1:1e:cc:
                    fc:4c:ef:78:68:17:0e:12:d9:52:60:57:e7:00:b9:
                    d8:34:f5:5f:7d:c9:d5:8e:04:9c:ac:ed:30:a9:3d:
                    ba:da:23:dd:ae:38:5c:d1:48:f6:5b:e8:f1:7e:91:
                    f9:eb:de:26:59:ae:2f:f8:3a:6d:8a:3d:e9:b8:fa:
                    81:01:7a:0a:16:33:f2:33:bf:e4:88:2f:db:1a:c2:
                    8f:be:76:ff:03:37:25:3f:86:ab:66:ff:a7:32:c1:
                    32:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FC:EC:30:20:B0:64:95:77:30:46:B4:2E:5E:1F:7D:C3:21:7E:BB
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138392e302e302f31362d3234203d3e203230333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.189.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6c:19:c9:7a:b2:dd:b6:b1:ab:f0:18:c6:5e:80:89:1c:6c:4f:
         b9:ea:43:19:c0:40:0b:28:a5:05:de:ea:9f:71:c0:65:f9:69:
         14:90:1b:0d:1b:c8:b3:32:25:d6:ba:b6:62:40:19:98:80:e9:
         df:12:85:9c:f9:53:78:41:96:29:a3:0e:f6:58:36:bc:41:3d:
         ca:88:de:82:17:93:8e:79:de:e1:51:18:86:f5:2b:87:1e:bc:
         10:71:6e:ab:09:9d:1f:e7:ab:e8:43:28:f3:2e:02:51:b2:b3:
         4e:ec:f5:83:20:c8:0e:06:2f:56:05:61:ad:48:49:e0:96:84:
         85:a2:15:00:b0:f6:b9:ed:a9:1c:be:58:fc:1c:2d:8b:77:33:
         96:f6:3a:bb:4c:55:a4:f7:c7:f9:79:e9:5e:a5:20:85:3e:37:
         bd:0b:e2:ca:53:96:49:1e:cd:b8:f4:75:5a:d6:7d:f3:59:91:
         d2:89:fe:8b:a5:51:93:e3:d1:cb:e8:1c:00:3d:9f:ac:3f:59:
         92:71:d0:80:33:fa:dc:6f:03:87:a0:b2:47:8f:f6:29:05:92:
         d6:f9:35:30:3c:50:b8:5f:30:f3:dd:f4:d1:5d:44:89:c0:8f:
         c8:71:b2:c2:8c:5e:e1:b4:e6:3a:9f:5d:48:8e:98:65:fd:07:
         e5:78:40:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:53:17 2026 by rpki-client