This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e3132382e302f31372d3234203d3e203134373534.roa
File:                     3139302e3134382e3132382e302f31372d3234203d3e203134373534.roa (raw, json)
Hash identifier:          9osGNCXs3f+sumhUoyV3b8dLe4jccc5DdV2u0UdimR8=
Subject key identifier:   BD:FE:59:CF:20:F8:85:6A:29:56:3D:78:6D:BE:A5:B5:74:D7:C3:A9
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       46D6E6AFE9A2BA55E2097E96B492B7E7B1D7C97A
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e3132382e302f31372d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:47:25 +0000
ROA not before:           Tue 06 Jan 2026 19:42:25 +0000
ROA not after:            Tue 05 Jan 2027 19:47:25 +0000
asID:                     14754
IP address blocks:        190.148.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Feb 2026 02:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d6:e6:af:e9:a2:ba:55:e2:09:7e:96:b4:92:b7:e7:b1:d7:c9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:25 2026 GMT
            Not After : Jan  5 19:47:25 2027 GMT
        Subject: CN=BDFE59CF20F8856A29563D786DBEA5B574D7C3A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:e3:0b:84:95:f3:2f:a2:1c:89:ea:2e:34:
                    35:55:77:7d:9e:94:0a:6d:d7:f9:7b:72:87:a1:ef:
                    37:ab:6d:da:df:d7:4d:d5:29:81:ab:36:d6:3b:62:
                    47:f7:4e:c7:d0:70:94:a3:d0:0f:32:5b:81:aa:45:
                    4b:14:06:2e:ed:e3:d5:ce:dc:20:ec:d6:25:b7:d5:
                    ba:83:dc:0e:5f:2c:94:5e:41:a9:9c:cc:9e:f5:22:
                    1a:0f:cf:c2:b7:20:ed:48:b5:13:fa:49:e7:08:b5:
                    18:6c:ec:96:9d:8a:d4:ab:81:64:5b:6e:51:e7:a9:
                    3a:ae:e8:ea:fe:a6:af:cb:75:70:77:5c:ce:75:27:
                    80:cb:27:a0:35:27:fa:4d:b9:41:be:3d:9b:a3:98:
                    c3:b9:ca:c5:21:2d:80:20:2e:b8:f1:83:bb:5a:2a:
                    fb:27:f9:75:9e:e3:eb:f0:16:c3:de:03:7e:c9:8d:
                    35:10:ac:fd:2b:0a:30:c5:32:85:a4:44:7a:06:dc:
                    a9:33:c5:83:4c:77:88:b0:e2:1d:82:bf:6b:bf:98:
                    67:8b:fe:87:82:62:5b:ed:cc:83:88:80:59:ef:da:
                    cc:7f:ed:97:b0:c1:03:30:77:3e:fc:fc:e8:50:6c:
                    2b:cf:a2:f8:ca:93:8a:c7:f5:d5:44:8c:2e:65:49:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FE:59:CF:20:F8:85:6A:29:56:3D:78:6D:BE:A5:B5:74:D7:C3:A9
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e3132382e302f31372d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.148.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         35:5a:22:fc:16:84:e4:19:12:39:89:22:5b:ea:51:b6:bd:96:
         0b:a6:3f:f8:31:b2:5a:fe:34:a0:0b:0d:33:10:aa:ce:4d:ea:
         61:e6:7a:f3:de:a2:0d:48:18:bd:85:e7:60:3b:f6:40:46:30:
         be:1b:ea:00:ef:dc:40:5d:7e:7f:39:3e:ac:bf:60:64:6b:e3:
         ad:80:64:c4:d2:4b:a8:7f:b8:e8:5f:ff:e0:52:c1:8c:23:f0:
         de:eb:4b:5c:d0:dc:01:93:7b:af:b6:62:53:17:81:bf:01:57:
         ad:64:0e:11:6b:76:1d:5f:7d:a0:6a:15:5a:d6:d7:03:bb:07:
         6e:bc:72:60:18:12:3a:67:fb:05:7f:bb:c8:95:c9:5d:32:db:
         05:53:50:0c:c9:03:d7:d5:f7:b8:5b:7c:54:a9:60:bd:a7:41:
         d6:49:9a:64:0f:76:02:f1:0c:fa:0f:30:03:63:0c:f6:eb:0f:
         ac:98:d4:c7:d8:54:b6:16:5a:22:32:d7:77:f9:1e:70:ca:01:
         f7:9a:1b:c3:fe:1c:19:09:49:a2:7f:11:22:3c:85:9c:f1:ed:
         37:0f:28:8c:5e:81:28:2c:fa:ee:44:5d:32:49:56:73:27:94:
         11:51:29:7b:7b:c3:78:4c:19:cf:24:73:c3:f8:a0:82:1b:9c:
         0c:a9:1a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 00:08:52 2026 by rpki-client