This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38362e302f32332d3234203d3e203134373534.roa
File:                     3139302e3134382e38362e302f32332d3234203d3e203134373534.roa (raw, json)
Hash identifier:          M7tKnW5xSk4P1p55xDuuwiU5GWiAXUQxuqcNdolB7Ko=
Subject key identifier:   B6:88:52:8E:B0:FF:E6:F3:03:C5:A9:D9:9D:C8:E9:9E:AC:A1:37:1A
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       4C3CB64A7917B5AB213B55D7467CA4B2F39F1AD6
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38362e302f32332d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:47:19 +0000
ROA not before:           Tue 06 Jan 2026 19:42:19 +0000
ROA not after:            Tue 05 Jan 2027 19:47:19 +0000
asID:                     14754
IP address blocks:        190.148.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3c:b6:4a:79:17:b5:ab:21:3b:55:d7:46:7c:a4:b2:f3:9f:1a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:19 2026 GMT
            Not After : Jan  5 19:47:19 2027 GMT
        Subject: CN=B688528EB0FFE6F303C5A9D99DC8E99EACA1371A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:b7:1c:f3:68:37:b5:ec:62:d0:b2:9d:df:
                    07:64:91:8f:48:b6:71:9c:f4:c7:fc:c8:8b:d5:cb:
                    f9:b3:1e:be:42:45:1a:af:14:ab:17:3b:2d:62:6e:
                    43:0e:21:db:70:8d:b9:1f:32:c4:e5:60:74:ea:0e:
                    44:6d:bf:93:0f:f2:53:ee:e6:15:3a:07:04:59:02:
                    9d:2c:30:36:4d:3b:de:68:59:cc:44:cc:42:74:05:
                    36:ea:29:6d:3d:af:7a:4f:e9:cf:ac:3c:51:94:a2:
                    c6:9c:10:7a:ea:fa:a9:f4:f6:34:90:fa:9f:df:21:
                    69:b4:0c:da:e8:94:9a:7d:27:12:d1:89:4a:82:53:
                    91:47:45:e7:a5:d7:b6:47:12:5c:92:e4:10:d9:1f:
                    f4:23:d7:c6:44:df:28:07:1a:45:a2:d4:23:b6:f5:
                    57:cc:2e:4c:fe:bd:92:2f:75:f1:6d:3e:d8:7a:ef:
                    46:d8:0d:1b:bf:03:df:bd:8b:51:df:82:1c:b4:33:
                    ad:d4:7d:80:60:58:b5:77:c5:72:42:1c:0c:9e:2c:
                    de:ed:bd:6a:0d:d1:af:fa:cc:fd:67:f3:7d:3c:fd:
                    c4:09:98:b0:c6:55:6b:ff:35:fe:a1:97:e2:f6:be:
                    76:af:47:72:3e:c9:fa:99:f7:a6:79:57:46:f3:6f:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:88:52:8E:B0:FF:E6:F3:03:C5:A9:D9:9D:C8:E9:9E:AC:A1:37:1A
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38362e302f32332d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.148.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:c1:94:da:85:4a:cc:5b:28:67:45:01:8d:cb:57:c2:c9:71:
         57:5e:32:32:a4:0e:d0:18:ae:b1:e9:7b:cd:e0:d9:c3:59:72:
         b6:d8:cb:ad:8c:1c:5d:6e:a5:92:61:98:7d:13:31:34:ad:f8:
         4e:40:15:65:d5:2d:eb:53:e0:75:81:ff:58:27:4b:12:c9:7d:
         3c:45:c3:18:9c:8b:73:ad:b9:8a:22:11:59:f4:1c:03:c3:12:
         8b:cb:67:80:7b:e7:c7:3c:cb:3b:87:e6:aa:63:16:d6:e8:97:
         b4:19:87:85:de:d9:c6:a7:2a:14:6d:4e:52:66:56:b2:01:ab:
         7f:f0:c4:75:cc:49:39:13:ee:e2:13:eb:bf:34:a7:90:3e:6b:
         85:90:5e:c9:99:5e:87:39:41:c6:19:ec:17:4f:6b:a5:cc:40:
         c3:04:2e:42:72:e0:37:8c:e3:24:45:ba:57:bd:d6:de:88:75:
         4b:39:21:24:31:18:14:43:eb:f8:d7:d0:80:14:6a:55:26:e9:
         2a:d6:a4:69:68:f4:71:96:11:81:2c:3a:0d:1e:0b:9b:52:c0:
         30:97:bd:2b:6d:a0:2b:79:7f:0d:f5:bb:d2:e4:50:90:41:80:
         22:3f:ee:6a:ff:65:4d:c8:86:61:e4:ac:88:b4:df:ac:b2:5b:
         16:b9:74:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:01:34 2026 by rpki-client