This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38382e302f32332d3234203d3e203233333833.roa
File:                     3139312e3130332e38382e302f32332d3234203d3e203233333833.roa (raw, json)
Hash identifier:          g1wXPRzDiF6mLgrNtWpSNX+5jw+hNcILMf7hx3v4X/M=
Subject key identifier:   81:15:E3:61:0B:0A:D0:F3:DA:05:63:01:6E:70:C6:78:EF:E7:51:2D
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       763F7D2D5762EB66536793FDF1B33B5CDAC25B55
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38382e302f32332d3234203d3e203233333833.roa
Signing time:             Tue 06 Jan 2026 19:19:35 +0000
ROA not before:           Tue 06 Jan 2026 19:14:35 +0000
ROA not after:            Tue 05 Jan 2027 19:19:35 +0000
asID:                     23383
IP address blocks:        191.103.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3f:7d:2d:57:62:eb:66:53:67:93:fd:f1:b3:3b:5c:da:c2:5b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Jan  6 19:14:35 2026 GMT
            Not After : Jan  5 19:19:35 2027 GMT
        Subject: CN=8115E3610B0AD0F3DA0563016E70C678EFE7512D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:d2:42:6a:e9:a4:f0:71:af:47:61:90:48:
                    7f:2b:e9:31:74:b3:63:63:a4:da:0f:48:e2:ae:cf:
                    1c:60:5d:f1:82:f9:7e:a1:34:c4:b7:eb:5f:9a:71:
                    de:a7:fa:c0:99:61:5d:62:e9:5c:39:a8:4c:f3:78:
                    43:5e:81:45:8f:f9:5a:5f:f6:df:72:9e:44:30:e3:
                    dd:11:ec:70:1b:1c:17:b1:b0:c6:28:60:bb:73:8d:
                    48:9d:2d:ca:15:b0:a1:df:48:97:7a:8f:0f:13:c8:
                    21:68:37:40:86:35:89:8f:d5:6b:9c:aa:40:85:c4:
                    65:de:c7:9c:b0:44:f3:e4:7b:80:2e:d4:30:22:3b:
                    a4:bc:ab:68:f2:20:0c:12:18:8e:32:ed:9a:eb:a5:
                    21:9f:62:ec:ed:e9:fb:9d:eb:35:24:e3:1b:c7:4d:
                    cb:39:32:c5:a7:ca:1c:2c:cc:2f:24:6c:40:31:f4:
                    80:f2:8d:c1:d3:46:e7:8e:12:3a:f6:dd:b8:dc:4d:
                    a1:38:e3:8d:0b:45:a5:f8:28:d9:10:6e:19:08:c8:
                    0f:d0:1a:08:a2:cc:7b:99:ef:44:29:18:e1:00:e9:
                    d6:d5:47:99:1e:01:5d:8a:32:6a:41:4b:59:e7:4a:
                    4d:e1:f9:c8:cd:86:38:90:c5:5b:9f:40:d7:31:7a:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:15:E3:61:0B:0A:D0:F3:DA:05:63:01:6E:70:C6:78:EF:E7:51:2D
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38382e302f32332d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:5e:a2:45:13:21:10:21:2b:e0:00:e0:47:08:76:37:fe:e1:
         a4:87:d6:a0:42:5e:2b:d3:78:b3:fe:9e:79:1a:c2:67:a6:7c:
         79:70:fe:1f:f0:a1:41:54:7c:44:34:7a:2b:a6:57:43:cf:61:
         63:8b:84:82:69:26:33:d9:81:eb:5f:bf:74:1c:8a:61:4d:b8:
         17:2c:81:f9:13:fb:8e:f3:ca:9a:d1:85:82:ff:9f:47:9b:77:
         4d:7e:98:00:53:31:01:ed:81:9b:9c:70:67:1f:63:53:4f:26:
         c4:98:cb:7c:e1:26:8a:ed:ba:89:00:51:05:99:c6:5d:32:3f:
         b0:4d:c4:67:df:64:b6:08:80:63:67:2e:9e:90:b0:19:bc:f2:
         55:ff:e5:95:1e:94:d8:b0:a7:2c:30:60:9b:0b:a9:3f:3d:a2:
         62:c4:d9:6f:04:ee:64:60:e8:5a:d6:f9:1b:fe:21:36:a0:06:
         5c:88:c6:b8:02:06:94:05:82:64:ef:0c:c4:7d:6e:e9:3d:34:
         98:f0:9b:5f:96:5b:04:09:dc:db:2d:8c:0d:b8:e8:4a:e5:47:
         f8:c4:5f:17:a5:fb:c7:b9:fb:50:55:be:0a:b1:29:56:c8:c7:
         b9:20:51:42:8f:5e:50:85:be:37:d8:80:6b:28:df:18:79:f3:
         fb:82:5a:15
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdj99LVdi62ZTZ5P98bM7XNrCW1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM0N0JERDdGNjE5RUNBRDdBOTFDRkRBMjczRTgxRUQ4
ODM2RjdFODAeFw0yNjAxMDYxOTE0MzVaFw0yNzAxMDUxOTE5MzVaMDMxMTAvBgNV
BAMTKDgxMTVFMzYxMEIwQUQwRjNEQTA1NjMwMTZFNzBDNjc4RUZFNzUxMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmYNJCaumk8HGvR2GQSH8r6TF0
s2NjpNoPSOKuzxxgXfGC+X6hNMS361+acd6n+sCZYV1i6Vw5qEzzeENegUWP+Vpf
9t9ynkQw490R7HAbHBexsMYoYLtzjUidLcoVsKHfSJd6jw8TyCFoN0CGNYmP1Wuc
qkCFxGXex5ywRPPke4Au1DAiO6S8q2jyIAwSGI4y7ZrrpSGfYuzt6fud6zUk4xvH
Tcs5MsWnyhwszC8kbEAx9IDyjcHTRueOEjr23bjcTaE4440LRaX4KNkQbhkIyA/Q
GgiizHuZ70QpGOEA6dbVR5keAV2KMmpBS1nnSk3h+cjNhjiQxVufQNcxepJzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgRXjYQsK0PPaBWMBbnDGeO/nUS0wHwYDVR0j
BBgwFoAUE0e91/YZ7K16kc/aJz6B7Yg29+gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNUM4NUI2OTcxRDhEODkwMkI3MDVDNTY0RDE2NjBEMzcw
MDFDMTQwQkYzRUQ2NzVGMUIyOEMyNDAyQUQyQzg3LzAvMTM0N0JERDdGNjE5RUNB
RDdBOTFDRkRBMjczRTgxRUQ4ODM2RjdFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzQ3QkREN0Y2MTlFQ0FEN0E5
MUNGREEyNzNFODFFRDg4MzZGN0U4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTVDODVCNjk3MUQ4RDg5MDJCNzA1QzU2NEQxNjYwRDM3MDAxQzE0MEJG
M0VENjc1RjFCMjhDMjQwMkFEMkM4Ny8wLzMxMzkzMTJlMzEzMDMzMmUzODM4MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMzMzMzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb9nWDAN
BgkqhkiG9w0BAQsFAAOCAQEAZV6iRRMhECEr4ADgRwh2N/7hpIfWoEJeK9N4s/6e
eRrCZ6Z8eXD+H/ChQVR8RDR6K6ZXQ89hY4uEgmkmM9mB61+/dByKYU24FyyB+RP7
jvPKmtGFgv+fR5t3TX6YAFMxAe2Bm5xwZx9jU08mxJjLfOEmiu26iQBRBZnGXTI/
sE3EZ99ktgiAY2cunpCwGbzyVf/llR6U2LCnLDBgmwupPz2iYsTZbwTuZGDoWtb5
G/4hNqAGXIjGuAIGlAWCZO8MxH1u6T00mPCbX5ZbBAnc2y2MDbjoSuVH+MRfF6X7
x7n7UFW+CrEpVsjHuSBRQo9eUIW+N9iAayjfGHnz+4JaFQ==
-----END CERTIFICATE-----
Generated at Fri Jan 23 18:54:50 2026 by rpki-client