This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3134342e302f32312d3234203d3e203134373534.roa
File:                     3139302e3134392e3134342e302f32312d3234203d3e203134373534.roa (raw, json)
Hash identifier:          6Q2nvI9FqUInutFw7PfMIYUg2ulzN7zfATz4pVEc4cs=
Subject key identifier:   8D:42:A1:3F:1D:75:D5:7D:3F:27:73:C1:AC:99:16:33:1B:CC:EE:89
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       012E1BF824A963E1C994F560C2C44CF9E83A54A2
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3134342e302f32312d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:47:07 +0000
ROA not before:           Tue 06 Jan 2026 19:42:07 +0000
ROA not after:            Tue 05 Jan 2027 19:47:07 +0000
asID:                     14754
IP address blocks:        190.149.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2e:1b:f8:24:a9:63:e1:c9:94:f5:60:c2:c4:4c:f9:e8:3a:54:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:07 2026 GMT
            Not After : Jan  5 19:47:07 2027 GMT
        Subject: CN=8D42A13F1D75D57D3F2773C1AC9916331BCCEE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:98:12:f1:39:34:08:fd:21:81:e6:35:78:16:
                    73:50:00:33:b2:cb:79:e1:13:47:87:08:a1:e3:2f:
                    46:15:9b:33:b2:6c:05:0c:e8:d5:e3:8e:24:6e:92:
                    12:09:e6:87:ec:b1:81:aa:40:58:6d:da:7c:c3:b1:
                    ce:38:60:05:d1:89:3d:08:eb:58:c5:77:f7:7d:6f:
                    a7:fa:e0:77:92:52:f0:fd:d9:09:ed:9a:4e:9d:2e:
                    38:e3:d1:f7:ec:4c:e9:46:7e:58:59:9b:a6:14:e3:
                    bf:a2:20:c0:ea:1a:1b:41:05:6b:94:08:f0:52:4c:
                    7d:51:f3:07:15:ad:25:94:00:77:90:79:5b:46:10:
                    be:e0:06:5b:d0:9c:54:3a:08:f3:a0:dd:0c:66:4b:
                    c0:65:b3:c4:51:d5:d9:6b:7d:8b:fb:0a:fd:64:dc:
                    b0:81:1f:e1:42:6d:49:18:a4:ef:d3:c7:e5:f1:2a:
                    dd:c1:f6:0f:4f:c1:d8:70:96:50:96:b1:31:88:61:
                    ed:0a:a8:34:8e:a7:6b:33:05:61:30:59:fd:50:c4:
                    a4:26:4a:7e:05:43:02:bd:48:55:65:4b:71:ca:ef:
                    17:d2:a1:67:3b:14:97:1b:cb:63:e4:53:a2:93:fd:
                    99:a5:dc:37:e2:71:2a:f4:9b:51:63:42:f6:88:8b:
                    a9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:42:A1:3F:1D:75:D5:7D:3F:27:73:C1:AC:99:16:33:1B:CC:EE:89
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3134342e302f32312d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:07:2b:e6:b9:4b:26:d9:f6:4e:1d:28:6e:45:cd:55:09:d7:
         b9:3a:1e:5a:ab:89:b1:a5:f3:09:a5:31:38:4e:b6:58:5a:45:
         e9:f8:8d:6b:52:91:88:71:6d:50:97:13:73:4a:ed:4c:a7:e7:
         93:52:a7:fa:f9:e4:df:33:ec:62:cd:67:b2:83:b5:9b:f3:ca:
         a5:9e:30:da:e1:58:cb:82:65:02:e4:fa:93:f7:cc:86:cc:2b:
         90:fb:22:45:6f:73:d2:b7:6e:31:19:65:50:d2:29:7c:0e:ee:
         e2:60:10:60:fe:80:b9:07:33:2b:65:b2:80:4c:cb:ac:30:bc:
         aa:ff:a8:e8:62:46:9c:40:4a:86:71:27:82:f7:6d:f7:2b:ce:
         50:77:43:0e:7a:ef:05:f1:dc:8a:31:98:d4:ea:38:11:94:46:
         96:fb:4f:89:cc:79:9f:ba:64:ea:57:58:e7:ba:d6:d2:e1:a1:
         5b:b5:7e:08:31:bb:c0:16:6b:20:bc:ff:ac:65:61:fa:fa:58:
         8c:f5:85:0a:df:88:4b:57:99:1d:36:cf:42:75:d2:74:0d:88:
         4c:5f:c3:27:64:ac:61:20:64:fa:3b:60:56:0a:1d:fb:7d:49:
         3b:c8:31:0d:72:e1:64:69:b0:14:fd:ec:ca:06:0c:49:07:ec:
         a7:56:4d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:11:39 2026 by rpki-client