This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e302e302f31382d3234203d3e203134373534.roa
File:                     3139302e3134382e302e302f31382d3234203d3e203134373534.roa (raw, json)
Hash identifier:          pZL98CGe7B4auhCSMrBBgSR0zdJzHp3AUBHfsix2sKc=
Subject key identifier:   63:C6:8E:1B:09:E8:C7:F6:E9:9E:EF:63:94:09:2C:57:93:46:EE:EC
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       2D3D9F0CC0FDC848042147AD2DC4EC2874F94A13
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e302e302f31382d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:47:26 +0000
ROA not before:           Tue 06 Jan 2026 19:42:26 +0000
ROA not after:            Tue 05 Jan 2027 19:47:26 +0000
asID:                     14754
IP address blocks:        190.148.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3d:9f:0c:c0:fd:c8:48:04:21:47:ad:2d:c4:ec:28:74:f9:4a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:26 2026 GMT
            Not After : Jan  5 19:47:26 2027 GMT
        Subject: CN=63C68E1B09E8C7F6E99EEF6394092C579346EEEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:53:43:61:64:fa:6a:d1:f5:c7:b2:00:4b:
                    47:a4:83:3e:7b:7e:9b:d8:2a:03:7f:de:7f:f1:54:
                    ea:c9:2b:be:ed:cb:fe:70:f6:5f:3a:3c:6d:03:9b:
                    11:22:f1:82:de:0c:0e:2a:35:44:ca:4d:2b:57:ce:
                    e5:70:16:8a:3e:63:12:65:0d:86:53:4b:28:c0:47:
                    f3:d4:10:81:13:97:23:84:e9:37:ea:25:e4:85:7c:
                    f3:eb:9f:4c:18:a1:c3:64:7d:b0:df:9c:c1:34:24:
                    cd:26:2e:f1:ce:11:1e:c8:08:b5:a6:3d:15:2b:bd:
                    f0:81:6b:de:3b:a1:32:ec:57:2a:3f:30:db:97:9d:
                    31:52:ef:1f:c9:51:37:75:87:8b:a3:b9:63:05:82:
                    88:3c:00:d9:1e:60:70:4b:34:ab:b6:21:d2:17:4e:
                    02:7c:a1:1d:19:b8:47:3d:91:2a:cb:c6:c8:e0:d6:
                    76:a0:11:bd:dc:b0:b6:17:46:52:b9:cd:57:68:d3:
                    3f:d7:26:95:9b:40:dc:c4:39:f0:56:ba:9d:73:cf:
                    6f:f6:c4:10:64:b1:f6:5e:f8:0a:a1:96:0c:96:1a:
                    4c:08:50:7d:42:85:fc:e6:22:0a:22:9d:d4:ec:6e:
                    08:6a:76:2e:01:2d:78:23:89:82:4f:06:c3:35:00:
                    f1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C6:8E:1B:09:E8:C7:F6:E9:9E:EF:63:94:09:2C:57:93:46:EE:EC
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e302e302f31382d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.148.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:1d:09:87:bc:4b:a7:27:41:b3:00:57:94:54:0e:2c:0b:c7:
         1b:75:61:e6:16:38:26:aa:64:1f:15:d1:d4:a6:3a:06:e0:9c:
         c9:41:37:08:fd:ff:2d:63:5f:0e:20:c1:a3:92:55:7f:73:09:
         68:1d:1e:98:4f:25:5a:22:81:74:4b:cc:44:3b:42:38:ec:9f:
         66:c1:a6:51:3e:c3:4e:fd:e3:46:44:67:de:f7:94:81:3a:e2:
         36:a1:ab:fd:a8:45:db:8f:90:81:59:5f:5f:a7:56:42:f8:7d:
         7b:4d:4c:05:64:89:c7:67:22:80:8c:e1:4e:9f:fd:47:1d:ff:
         e9:81:cb:08:42:2c:35:07:23:65:72:d8:7e:6a:a3:a1:be:cf:
         b9:60:07:87:b0:20:b8:af:24:97:29:b9:b2:68:39:51:9b:a8:
         01:5d:27:b1:e2:84:d1:8e:ce:7b:ca:f2:5d:0e:ad:26:9f:51:
         da:9d:0c:27:ec:fc:49:9b:83:a4:3c:ed:20:8d:34:85:1f:cf:
         5b:d2:29:b2:34:e3:5c:19:56:af:5b:a0:3b:82:0a:0d:37:70:
         d2:7c:5d:60:89:0f:02:6b:44:eb:16:a9:68:43:83:21:1f:c8:
         23:a3:f9:f8:56:57:17:fb:e5:ae:95:03:12:86:e3:ff:4d:9f:
         a6:49:71:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 20:33:18 2026 by rpki-client