This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3134392e3133342e302f32342d3332203d3e203134373534.roa
File:                     3139302e3134392e3133342e302f32342d3332203d3e203134373534.roa (raw, json)
Hash identifier:          9oxzuE6lftStXwN2Nq1cNlgptLf+G+6Y4pjOnJ2HuNU=
Subject key identifier:   F7:BA:8F:84:73:8E:D2:1C:8D:5D:80:C8:40:4E:22:E6:F6:6C:97:89
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       30191E20641AA043CDEF90282241EFE53B82BEB2
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3134392e3133342e302f32342d3332203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:21:14 +0000
ROA not before:           Tue 06 Jan 2026 19:16:14 +0000
ROA not after:            Tue 05 Jan 2027 19:21:14 +0000
asID:                     14754
IP address blocks:        190.149.134.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 09:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:19:1e:20:64:1a:a0:43:cd:ef:90:28:22:41:ef:e5:3b:82:be:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Jan  6 19:16:14 2026 GMT
            Not After : Jan  5 19:21:14 2027 GMT
        Subject: CN=F7BA8F84738ED21C8D5D80C8404E22E6F66C9789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:46:21:93:8c:8f:98:8d:ff:2f:6e:25:8a:f0:
                    20:c1:fc:da:89:85:a1:d9:07:6e:ab:b5:85:97:53:
                    de:f3:ad:2f:2f:6a:f1:7c:c7:5f:98:ad:e6:f6:ec:
                    2b:35:42:1d:69:8d:bc:cb:19:9e:a3:49:f0:e4:14:
                    7c:a4:c5:c1:9c:96:f3:5a:47:8f:0a:ef:b3:0a:8a:
                    e5:12:c2:d4:aa:40:18:7c:9b:da:af:f4:a7:ee:a0:
                    32:17:03:30:95:c1:71:65:ce:de:30:e8:49:6d:f3:
                    a3:88:25:b5:24:7a:f8:3c:b8:d1:86:9f:a8:a0:f5:
                    dd:45:7d:3f:97:ef:87:33:83:60:c5:1c:94:b8:13:
                    c0:51:90:4f:ea:a2:40:10:fa:73:ba:e6:f8:db:01:
                    b1:40:99:1d:de:e5:65:37:69:d6:d4:f3:5e:68:a0:
                    d2:d9:12:75:e1:fc:9b:a2:41:af:af:3c:08:a1:60:
                    dc:86:ce:59:ed:51:95:45:b6:f3:ee:db:bf:78:b6:
                    6e:65:31:11:1c:b9:7c:f4:e6:44:72:54:03:ff:c0:
                    ef:4b:67:74:64:51:7e:26:07:36:fd:30:47:ce:f7:
                    e7:cc:e8:24:b8:dc:b5:3b:ad:37:00:be:02:86:23:
                    c1:5f:3e:68:db:6b:d2:99:bc:fb:80:23:64:70:a8:
                    25:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BA:8F:84:73:8E:D2:1C:8D:5D:80:C8:40:4E:22:E6:F6:6C:97:89
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3134392e3133342e302f32342d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:43:98:3f:96:ad:be:b1:75:1d:0b:2c:c5:15:86:98:c8:a2:
         cb:e7:78:fc:0c:89:59:59:95:9d:30:29:eb:e8:a0:32:3a:1a:
         14:35:81:96:4f:75:40:05:6b:09:5e:99:a9:68:00:22:eb:5d:
         e3:a9:74:8c:8a:44:df:1a:f2:19:66:07:eb:c1:9c:6b:4b:ee:
         2e:a8:ec:2d:f4:0c:65:d4:4a:a5:4a:ec:f7:c1:af:32:cd:14:
         44:12:fa:cb:64:a8:86:85:70:d9:54:62:56:a6:d8:13:42:78:
         fa:01:15:df:a2:eb:3c:e8:5b:45:ef:37:97:76:6f:3d:3e:15:
         3f:04:8c:10:0c:6c:76:8e:0e:ad:dc:10:b7:30:6f:45:37:c9:
         8d:2a:2b:b4:ff:1a:fc:a7:46:11:6f:cc:06:a0:9b:04:28:3c:
         5f:96:b1:bd:ee:50:58:4d:8b:28:24:90:2c:d2:c9:2e:3c:09:
         6e:e7:ec:58:9b:34:0c:f0:59:9c:71:29:ee:fe:f3:0a:fc:78:
         bb:1b:fa:fb:7e:1f:c1:3b:6f:d7:ae:09:55:34:65:a5:f0:26:
         46:34:99:07:93:23:20:4d:3a:01:d9:1e:3d:ae:1d:61:4d:3f:
         9d:18:41:8d:63:4c:19:f3:21:47:92:b4:82:90:fa:59:90:bb:
         c0:a6:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:27 2026 by rpki-client