This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e302e302f31372d3234203d3e203134373534.roa
File:                     3139302e3134392e302e302f31372d3234203d3e203134373534.roa (raw, json)
Hash identifier:          dUUiGnvH0n6dKCiaWIz+8P+sDHmZzQVq9DwLN0V0FSY=
Subject key identifier:   DD:39:C2:3A:D6:29:FF:F2:97:6A:12:8D:30:61:14:6B:55:14:45:55
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       52B2B21B8003036765998C2161D81565A35B8A8F
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e302e302f31372d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:47:17 +0000
ROA not before:           Tue 06 Jan 2026 19:42:17 +0000
ROA not after:            Tue 05 Jan 2027 19:47:17 +0000
asID:                     14754
IP address blocks:        190.149.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Feb 2026 02:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b2:b2:1b:80:03:03:67:65:99:8c:21:61:d8:15:65:a3:5b:8a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:17 2026 GMT
            Not After : Jan  5 19:47:17 2027 GMT
        Subject: CN=DD39C23AD629FFF2976A128D3061146B55144555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:fc:57:5b:c1:e2:24:fb:0c:3e:5b:87:0d:
                    03:32:7d:d4:13:02:90:8d:39:83:7a:64:52:36:e8:
                    10:1d:d5:4a:90:51:30:3d:a7:47:1a:da:51:65:66:
                    7b:29:84:11:a2:cd:aa:71:e3:ed:1e:d8:4f:f7:cb:
                    99:fb:1f:67:c3:4e:d8:56:61:0b:7e:b1:da:2f:e8:
                    0d:1a:2c:20:2e:be:33:59:6d:53:42:d1:27:e8:4b:
                    f7:0c:77:06:1d:60:69:52:3c:df:aa:10:33:13:99:
                    19:3e:0e:bd:c8:55:31:f0:3f:a1:9f:6a:5e:33:b1:
                    be:db:ac:7b:3c:09:31:98:10:c5:94:85:c5:aa:c2:
                    e9:75:f3:71:6b:57:4c:46:8e:a0:13:a7:6e:35:2c:
                    f9:b3:84:77:14:c8:9f:6d:00:60:d8:c8:f2:df:45:
                    a8:fd:bf:71:08:ce:78:76:e4:2e:56:39:29:df:57:
                    57:e7:d0:15:e1:dc:d8:b9:80:67:c6:4d:b2:bf:7e:
                    05:aa:d1:67:03:ef:b6:42:e7:9c:05:00:37:14:98:
                    cb:e7:1d:1c:c6:33:dc:3b:e0:47:10:3c:f6:7e:a1:
                    0a:68:c8:fb:dc:b1:a6:39:3d:e5:6a:e7:72:c1:01:
                    b2:04:05:f7:35:de:18:df:19:7a:3c:56:6a:95:a4:
                    30:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:39:C2:3A:D6:29:FF:F2:97:6A:12:8D:30:61:14:6B:55:14:45:55
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e302e302f31372d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5a:f2:a9:54:ca:fb:db:a0:87:a6:cb:39:12:23:d1:82:7f:8a:
         27:52:16:4c:1a:93:9a:49:f9:71:59:74:80:c8:ed:0b:d2:62:
         1e:31:70:3c:e5:4b:0f:d9:c5:fa:ce:02:ca:d0:ae:a5:e6:fe:
         61:d6:13:0b:a1:70:a0:7b:df:06:81:f3:c6:0a:d4:14:d7:d2:
         3e:6c:f4:9c:35:51:a0:01:af:ca:5d:2f:23:05:36:47:23:93:
         a8:ac:44:8e:5e:b8:b7:8f:b3:f7:14:8c:2c:18:5c:1c:2d:63:
         ef:db:b0:ae:38:76:39:07:77:51:1d:1c:d1:39:25:b1:bb:b0:
         65:d3:0b:14:9a:51:c3:65:31:00:e9:e7:4b:b7:f1:2f:9e:b8:
         d5:07:1f:4c:fb:4b:02:53:eb:01:7b:db:ea:09:b8:a9:4d:cb:
         98:04:95:53:17:b3:53:db:69:c8:4b:32:6d:47:5f:11:b5:ac:
         85:de:66:59:3b:a2:2b:eb:ee:fd:0f:f2:bb:1b:2c:ba:ca:64:
         40:88:2b:20:ca:7e:4a:8e:eb:17:ea:c7:ab:41:94:52:4f:ad:
         5b:66:df:c7:57:ad:51:24:1c:59:21:c8:8d:48:14:e9:0c:14:
         32:11:db:83:e6:a3:9d:2e:ec:63:24:cc:02:5c:3c:50:32:77:
         0a:e3:88:ea
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUrKyG4ADA2dlmYwhYdgVZaNbio8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNjAxMDYxOTQyMTdaFw0yNzAxMDUxOTQ3MTdaMDMxMTAvBgNV
BAMTKEREMzlDMjNBRDYyOUZGRjI5NzZBMTI4RDMwNjExNDZCNTUxNDQ1NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKLfxXW8HiJPsMPluHDQMyfdQT
ApCNOYN6ZFI26BAd1UqQUTA9p0ca2lFlZnsphBGizapx4+0e2E/3y5n7H2fDTthW
YQt+sdov6A0aLCAuvjNZbVNC0SfoS/cMdwYdYGlSPN+qEDMTmRk+Dr3IVTHwP6Gf
al4zsb7brHs8CTGYEMWUhcWqwul183FrV0xGjqATp241LPmzhHcUyJ9tAGDYyPLf
Raj9v3EIznh25C5WOSnfV1fn0BXh3Ni5gGfGTbK/fgWq0WcD77ZC55wFADcUmMvn
HRzGM9w74EcQPPZ+oQpoyPvcsaY5PeVq53LBAbIEBfc13hjfGXo8VmqVpDDbAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU3TnCOtYp//KXahKNMGEUa1UURVUwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMxMzkzMDJlMzEzNDM5MmUzMDJlMzAy
ZjMxMzcyZDMyMzQyMDNkM2UyMDMxMzQzNzM1MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAe+lQAwDQYJ
KoZIhvcNAQELBQADggEBAFryqVTK+9ugh6bLORIj0YJ/iidSFkwak5pJ+XFZdIDI
7QvSYh4xcDzlSw/ZxfrOAsrQrqXm/mHWEwuhcKB73waB88YK1BTX0j5s9Jw1UaAB
r8pdLyMFNkcjk6isRI5euLePs/cUjCwYXBwtY+/bsK44djkHd1EdHNE5JbG7sGXT
CxSaUcNlMQDp50u38S+euNUHH0z7SwJT6wF72+oJuKlNy5gElVMXs1PbachLMm1H
XxG1rIXeZlk7oivr7v0P8rsbLLrKZECIKyDKfkqO6xfqx6tBlFJPrVtm38dXrVEk
HFkhyI1IFOkMFDIR24Pmo50u7GMkzAJcPFAydwrjiOo=
-----END CERTIFICATE-----
Generated at Sun Feb 8 00:07:28 2026 by rpki-client