This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3133352e302f32342d3234203d3e203134373534.roa
File:                     3139302e3134392e3133352e302f32342d3234203d3e203134373534.roa (raw, json)
Hash identifier:          fQXusBsgYPA11KUI5erQLLSKTOv1kJ2+wKzXl9kn1KY=
Subject key identifier:   52:7A:C3:E0:1D:59:CB:CB:8D:EE:95:39:E5:82:DF:33:3C:5E:3D:68
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       600088580152A7F94ACF35929F57398FCE9FD6C2
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3133352e302f32342d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:47:19 +0000
ROA not before:           Tue 06 Jan 2026 19:42:19 +0000
ROA not after:            Tue 05 Jan 2027 19:47:19 +0000
asID:                     14754
IP address blocks:        190.149.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 12:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:00:88:58:01:52:a7:f9:4a:cf:35:92:9f:57:39:8f:ce:9f:d6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:19 2026 GMT
            Not After : Jan  5 19:47:19 2027 GMT
        Subject: CN=527AC3E01D59CBCB8DEE9539E582DF333C5E3D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:48:d4:7e:67:f4:d2:26:20:89:68:38:3e:3b:
                    ad:f5:76:cc:c0:1e:b9:f0:16:c8:86:39:05:b2:f7:
                    d0:37:73:a6:16:f1:87:f0:ec:b7:74:60:8f:bf:5b:
                    be:67:e9:e3:4a:99:03:cd:72:5a:f0:b2:74:f6:a8:
                    51:24:48:88:36:ac:71:0a:75:7d:40:65:3a:e2:6d:
                    45:0f:49:93:e4:b7:63:86:99:4b:fd:0c:11:91:6a:
                    80:94:76:7a:96:7c:04:9e:59:25:24:cb:3f:ff:27:
                    dc:4b:57:ac:c4:6a:84:93:97:91:9f:2d:e0:96:5c:
                    8e:78:fb:af:a3:67:a3:35:ae:0b:0b:45:0d:b3:2c:
                    37:f1:0b:3b:70:ba:f1:b9:6a:1b:08:fb:a0:3e:89:
                    9c:fa:72:82:dc:ca:c0:8f:89:6f:bc:35:98:d3:81:
                    b9:c7:b6:ca:1a:42:cc:ec:bb:62:c5:d7:7d:3b:72:
                    61:78:6d:10:c6:19:12:02:bb:ed:7c:2f:55:c9:1d:
                    9d:64:10:9b:48:79:94:c6:02:94:9c:5b:9f:aa:09:
                    d5:ec:9a:0d:06:2e:9f:40:b0:d8:ae:56:68:da:cb:
                    91:9f:82:dd:28:b0:c6:dc:0c:e4:61:1c:27:83:66:
                    67:1c:68:7d:c5:29:dd:05:bb:c7:e1:1c:85:8b:09:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7A:C3:E0:1D:59:CB:CB:8D:EE:95:39:E5:82:DF:33:3C:5E:3D:68
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3133352e302f32342d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:9c:41:f3:e7:5a:0e:3b:5f:03:c5:c2:22:d7:9e:25:b2:fc:
         94:79:7c:2a:44:62:17:f7:07:50:ea:10:38:76:24:60:c1:ec:
         42:89:41:7c:aa:a4:4b:9d:d7:20:2d:31:53:98:3b:e7:39:c2:
         88:d2:96:f4:71:d7:f1:30:f4:a1:1a:50:24:36:24:42:d8:86:
         47:02:9d:64:ea:14:c2:82:69:21:02:2c:86:8d:ae:75:1d:be:
         3a:9a:e3:00:90:d3:a5:d0:f3:7e:e6:30:0b:22:0e:5c:ae:c5:
         c6:b0:99:83:50:d6:68:c5:75:4e:cc:e8:ca:fb:4c:d2:c1:e9:
         5f:10:a0:32:73:ae:41:22:34:2e:db:82:fe:d9:eb:c1:f3:a3:
         c0:aa:71:7b:40:0e:c9:92:87:7c:2d:22:98:fe:6d:12:f7:6e:
         99:6f:bd:85:1d:d3:ce:14:ca:9f:80:7a:d2:16:de:05:1e:72:
         b1:ba:fc:28:62:b1:eb:58:ea:5f:47:e4:d9:1c:d4:a0:1e:29:
         21:f1:b5:9d:bb:26:3a:5d:41:85:ee:d5:d9:53:76:96:5a:3d:
         cd:c0:17:01:fe:d3:15:02:a0:f2:88:08:60:d2:e5:81:cd:cc:
         35:88:aa:e9:a1:dd:2e:da:ad:30:22:28:80:8a:ae:88:61:84:
         81:9d:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 23:28:49 2026 by rpki-client