This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234392e302f32342d3234203d3e203138363738.roa
File:                     3139302e31342e3234392e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          d5gqkjekGtvHY3OMgOkpvPGXc9sLo78jY0myOzG+yLA=
Subject key identifier:   DE:5B:92:14:BE:37:4B:96:3F:90:CE:32:7B:B2:28:35:3F:06:3B:21
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       6CDCD440D95DC00C98EF1F53249151ED0CD129FC
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234392e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 06 Jan 2026 20:48:36 +0000
ROA not before:           Tue 06 Jan 2026 20:43:36 +0000
ROA not after:            Tue 05 Jan 2027 20:48:36 +0000
asID:                     18678
IP address blocks:        190.14.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 03:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:dc:d4:40:d9:5d:c0:0c:98:ef:1f:53:24:91:51:ed:0c:d1:29:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Jan  6 20:43:36 2026 GMT
            Not After : Jan  5 20:48:36 2027 GMT
        Subject: CN=DE5B9214BE374B963F90CE327BB228353F063B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5d:68:c2:f2:a3:ce:3a:52:d4:59:2c:7d:d1:
                    da:a1:6c:3c:ab:c3:21:36:1e:e3:b0:bf:12:5d:fe:
                    85:ad:c9:03:4f:29:3a:3e:98:5e:46:c7:f1:53:36:
                    63:a0:0e:46:7e:18:aa:3b:f9:a1:d5:22:f1:7b:d9:
                    73:3e:1e:69:04:9f:70:10:de:6c:5c:b3:b7:9d:37:
                    ce:4a:87:d9:cc:c9:1a:b4:69:fe:e9:1c:f1:9d:20:
                    47:ac:00:62:a3:05:56:5b:c8:e2:df:b1:21:5a:f9:
                    91:4c:64:90:eb:36:6c:34:93:3d:36:88:c3:ac:b7:
                    f0:7f:ee:02:93:8a:28:14:bd:4b:9a:1d:b0:7d:9f:
                    a1:b1:8a:cb:e8:5d:31:29:13:dc:8c:16:40:ba:67:
                    48:fe:44:ab:b5:8e:93:e7:3d:6e:41:7b:0c:59:b0:
                    b5:37:05:68:58:8a:53:1d:59:5f:76:ac:23:93:63:
                    46:bd:67:2d:d0:3a:07:08:70:68:b8:31:2a:b4:11:
                    92:48:5f:f6:cc:8f:c6:6a:2a:aa:e6:e7:79:f0:95:
                    0f:74:34:23:f8:32:76:d3:94:64:06:57:99:ac:05:
                    01:ba:eb:15:58:25:f7:fa:57:5a:7a:a3:7c:aa:69:
                    27:65:d4:11:f1:e0:db:ea:f2:b2:96:87:57:fe:9d:
                    d7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5B:92:14:BE:37:4B:96:3F:90:CE:32:7B:B2:28:35:3F:06:3B:21
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234392e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:e2:26:9e:61:28:46:95:5c:27:fa:5b:d2:ed:60:f4:1b:ae:
         87:9c:53:ea:35:f1:d1:ea:5f:f6:f2:74:d2:d6:7b:25:f3:8e:
         46:77:da:b4:13:d7:0f:08:c2:4d:df:f4:f9:0d:d6:9a:56:e9:
         79:3b:11:af:5a:fe:bf:ec:1f:f6:b0:94:f6:85:1d:3f:54:79:
         27:5f:71:dc:d2:66:72:52:38:4f:6a:52:36:78:30:e1:75:c4:
         8d:6e:bc:7f:ec:96:16:f7:e2:2b:23:cf:71:a9:b7:7e:b4:5d:
         0e:b6:6f:79:c3:f9:0c:f9:c4:c3:65:3a:e8:25:77:22:90:0b:
         67:70:23:2b:11:fd:64:d2:1f:88:2d:22:29:71:b7:e1:8e:2e:
         86:3e:bf:2f:3c:c6:9a:a3:c9:35:21:64:a1:c1:ad:d1:ad:f2:
         d3:e2:8a:33:63:64:28:5b:46:20:51:73:c6:78:0f:05:aa:41:
         05:5a:97:68:71:04:38:f7:3c:65:e7:5d:aa:35:b2:f5:db:54:
         dd:25:7c:82:d9:7f:3c:6a:2c:cc:31:c3:80:43:8c:9f:e4:f1:
         0a:77:4d:60:6c:d1:83:6d:9a:54:a4:1e:03:1d:cf:ee:15:80:
         ca:c7:5f:34:c5:7e:f0:28:f1:4b:aa:9a:a5:34:28:19:7a:5c:
         87:13:df:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:22:13 2026 by rpki-client