This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3136342e302f32342d3234203d3e203532343531.roa
File:                     3139302e3134392e3136342e302f32342d3234203d3e203532343531.roa (raw, json)
Hash identifier:          GFcZWLLK9g2/sjRQHCkxdo7glwefseZwldvrycVQkgU=
Subject key identifier:   70:EB:DC:2F:7F:B2:0A:EA:10:E8:4B:91:D5:E1:8C:AA:52:E9:B7:9A
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       0F2515F86A63DB80D8C45CC47B4D7A08C740AB09
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3136342e302f32342d3234203d3e203532343531.roa
Signing time:             Tue 06 Jan 2026 19:47:12 +0000
ROA not before:           Tue 06 Jan 2026 19:42:12 +0000
ROA not after:            Tue 05 Jan 2027 19:47:12 +0000
asID:                     52451
IP address blocks:        190.149.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 18:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:25:15:f8:6a:63:db:80:d8:c4:5c:c4:7b:4d:7a:08:c7:40:ab:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:12 2026 GMT
            Not After : Jan  5 19:47:12 2027 GMT
        Subject: CN=70EBDC2F7FB20AEA10E84B91D5E18CAA52E9B79A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:94:2f:fa:72:e1:99:71:d0:bf:5c:60:9a:9a:
                    73:de:c5:0a:f3:78:5d:01:86:7d:05:99:a1:db:bc:
                    2d:49:d1:3d:ce:0e:d1:f7:6f:ac:6e:f1:7a:17:82:
                    fe:77:98:9e:71:5c:4e:cd:7f:36:04:28:f3:6b:76:
                    4c:48:1c:b0:d4:1c:95:a1:f2:47:40:28:31:8e:68:
                    0d:4f:8b:11:4a:44:57:78:d5:74:41:09:7e:b9:a1:
                    57:25:09:6f:31:b2:74:cd:22:58:b7:a0:8b:45:d4:
                    86:d7:e7:1c:49:42:4d:fa:b8:b6:2b:79:0a:0f:37:
                    91:f2:04:f7:d3:d3:d1:c4:be:77:1a:78:a3:74:9d:
                    ab:41:96:d6:28:67:13:e1:81:b8:40:8c:23:d9:6b:
                    a4:a3:05:47:72:ea:c0:56:a0:e6:f0:7a:a1:fa:91:
                    f2:ff:ba:91:2c:63:2f:f6:a1:66:4c:15:be:2e:44:
                    8e:dd:d9:96:1f:4e:f5:f6:1b:e6:30:9b:8b:21:4b:
                    d4:b7:76:d2:23:94:6f:b7:31:c1:0e:33:29:fc:be:
                    20:6e:62:5c:8e:61:aa:d0:6c:d7:f0:10:a1:b5:94:
                    71:29:9e:9c:da:a1:59:9b:f3:df:20:34:15:00:81:
                    e1:6e:0e:34:68:7a:d0:3d:dc:e1:f0:2b:aa:7f:2a:
                    ec:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EB:DC:2F:7F:B2:0A:EA:10:E8:4B:91:D5:E1:8C:AA:52:E9:B7:9A
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3136342e302f32342d3234203d3e203532343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:22:fa:72:82:ad:eb:d8:86:72:17:11:30:31:38:58:af:8b:
         f4:a3:50:68:7c:25:a0:da:3b:f0:dc:c6:f4:03:55:e4:dc:86:
         7a:73:59:5b:60:14:14:34:9f:a9:d7:a9:29:db:af:6d:ae:06:
         c3:94:dc:73:c5:e9:74:c0:9a:a4:9f:3a:10:8b:55:b8:a2:c6:
         87:f6:21:b4:66:97:8c:1b:05:7f:21:87:a6:ec:f1:ea:ba:b0:
         4c:eb:87:46:0b:90:85:79:42:93:c5:65:bc:4a:a6:df:67:20:
         da:f7:36:f6:44:c2:b4:de:6b:67:9b:32:b5:6d:fa:9f:98:1b:
         7c:2a:9b:8f:4e:56:5d:a2:b8:2b:ed:69:7f:60:bd:bf:ef:e8:
         38:89:55:d0:b7:5a:8e:52:8c:84:50:4a:a7:14:9b:2c:65:2a:
         5e:db:93:46:1d:f5:10:9f:de:21:96:96:2d:ba:f4:d4:95:2c:
         d6:c4:6e:ca:c7:aa:e8:1d:bc:8e:3f:b3:9c:36:92:d4:df:72:
         ab:3d:86:32:90:0b:73:71:69:77:99:ee:31:2d:87:a4:a3:8c:
         1d:fc:4a:2d:39:91:fa:24:49:d1:c9:f3:e6:de:c9:71:68:33:
         20:7b:15:50:f0:3d:1b:8e:4a:8d:1e:bb:dd:e9:0b:84:7c:af:
         39:89:0f:d4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDyUV+Gpj24DYxFzEe016CMdAqwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNjAxMDYxOTQyMTJaFw0yNzAxMDUxOTQ3MTJaMDMxMTAvBgNV
BAMTKDcwRUJEQzJGN0ZCMjBBRUExMEU4NEI5MUQ1RTE4Q0FBNTJFOUI3OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXlC/6cuGZcdC/XGCamnPexQrz
eF0Bhn0FmaHbvC1J0T3ODtH3b6xu8XoXgv53mJ5xXE7NfzYEKPNrdkxIHLDUHJWh
8kdAKDGOaA1PixFKRFd41XRBCX65oVclCW8xsnTNIli3oItF1IbX5xxJQk36uLYr
eQoPN5HyBPfT09HEvncaeKN0natBltYoZxPhgbhAjCPZa6SjBUdy6sBWoObweqH6
kfL/upEsYy/2oWZMFb4uRI7d2ZYfTvX2G+Ywm4shS9S3dtIjlG+3McEOMyn8viBu
YlyOYarQbNfwEKG1lHEpnpzaoVmb898gNBUAgeFuDjRoetA93OHwK6p/KuxFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcOvcL3+yCuoQ6EuR1eGMqlLpt5owHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMxMzkzMDJlMzEzNDM5MmUzMTM2MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvpWk
MA0GCSqGSIb3DQEBCwUAA4IBAQAkIvpygq3r2IZyFxEwMThYr4v0o1BofCWg2jvw
3Mb0A1Xk3IZ6c1lbYBQUNJ+p16kp269trgbDlNxzxel0wJqknzoQi1W4osaH9iG0
ZpeMGwV/IYem7PHqurBM64dGC5CFeUKTxWW8SqbfZyDa9zb2RMK03mtnmzK1bfqf
mBt8KpuPTlZdorgr7Wl/YL2/7+g4iVXQt1qOUoyEUEqnFJssZSpe25NGHfUQn94h
lpYtuvTUlSzWxG7Kx6roHbyOP7OcNpLU33KrPYYykAtzcWl3me4xLYeko4wd/Eot
OZH6JEnRyfPm3slxaDMgexVQ8D0bjkqNHrvd6QuEfK85iQ/U
-----END CERTIFICATE-----
Generated at Sun Jan 11 15:12:50 2026 by rpki-client