This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3235312e302f32342d3234203d3e203138363738.roa
File:                     3139302e31342e3235312e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          W+tdXttBOwdGRS2824fuS67Z8DrWJRmjG8UtTr0NWhI=
Subject key identifier:   DF:07:B2:4B:C4:4E:9A:77:3B:89:20:F7:C3:3B:31:67:61:86:44:32
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       70A56C2DB2E4193959C901BCA068936DA5F25AAF
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3235312e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 06 Jan 2026 20:48:40 +0000
ROA not before:           Tue 06 Jan 2026 20:43:40 +0000
ROA not after:            Tue 05 Jan 2027 20:48:40 +0000
asID:                     18678
IP address blocks:        190.14.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Feb 2026 16:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a5:6c:2d:b2:e4:19:39:59:c9:01:bc:a0:68:93:6d:a5:f2:5a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Jan  6 20:43:40 2026 GMT
            Not After : Jan  5 20:48:40 2027 GMT
        Subject: CN=DF07B24BC44E9A773B8920F7C33B316761864432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:25:a7:f4:22:31:11:96:83:15:35:27:8c:
                    21:85:28:b5:3b:61:f7:c8:97:ce:cb:1a:bb:24:fe:
                    fb:31:f7:4b:3d:64:45:1f:75:dd:5b:c1:ed:91:85:
                    91:84:7f:93:5b:ce:a5:e0:02:5e:7a:e6:26:b5:0e:
                    95:26:f1:f1:ba:0c:9a:eb:51:bb:72:8c:a9:e6:cf:
                    be:ae:3f:92:f6:8e:b2:07:a5:05:e6:1c:84:aa:41:
                    29:02:f3:7f:9d:90:b6:3e:26:40:e6:5a:1d:8e:7a:
                    c7:fe:0f:21:88:de:20:eb:8e:43:da:14:35:04:a3:
                    6f:8d:66:f8:d9:04:1d:21:66:ae:90:62:20:d5:10:
                    7f:f3:f8:36:11:0b:27:79:dd:a0:a8:e7:a4:8a:00:
                    ba:5e:59:65:7e:2e:87:26:e4:22:76:8a:b5:a0:64:
                    52:79:19:69:85:a8:80:84:d7:64:25:15:cd:32:3f:
                    aa:2b:dc:96:8f:3e:04:64:98:d4:dd:cd:b1:af:b7:
                    ed:3f:78:d0:01:42:2c:19:8e:c2:ac:95:82:93:f9:
                    35:1f:c8:2a:e2:e6:5c:2f:30:66:1b:52:4b:81:68:
                    f2:34:17:5a:39:7e:81:e7:8c:2d:97:f9:99:73:e6:
                    4c:2f:b6:56:4f:ee:c3:45:75:7e:77:09:61:90:49:
                    b6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:07:B2:4B:C4:4E:9A:77:3B:89:20:F7:C3:3B:31:67:61:86:44:32
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3235312e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:65:b6:89:10:cb:16:a4:24:60:07:83:e4:48:ee:81:4a:3a:
         c4:98:71:c2:f9:1b:24:09:dc:2b:36:4f:3f:07:70:0d:7d:eb:
         99:7c:00:dc:de:d4:e6:1b:aa:62:cb:08:73:6b:84:5e:74:5b:
         c3:96:d6:1e:e5:52:00:b1:6a:ac:c7:1a:1f:55:7f:cc:a0:ad:
         d2:25:94:d8:a2:53:e1:0d:26:6b:0c:f8:56:55:da:92:67:1b:
         de:a6:32:f3:8c:64:02:d8:f7:05:95:b8:83:70:34:0d:be:19:
         81:3b:19:0d:94:2d:f1:0f:fa:69:d8:eb:ea:55:26:0e:14:f2:
         89:4b:92:80:70:46:de:68:dd:49:e5:a9:64:31:76:1b:c4:d0:
         94:e6:35:5e:d8:05:7d:13:ac:78:cb:f2:07:fa:4b:8f:fd:13:
         ab:94:87:21:d2:dd:41:ca:56:9a:78:b7:57:42:c0:3a:b4:0f:
         df:b6:0a:94:b6:de:14:65:6a:6d:fa:22:46:7f:27:de:66:c7:
         ec:87:33:24:e5:24:9a:cf:92:b4:b2:b4:1e:8a:36:8a:65:10:
         2c:3c:5d:e4:b3:f9:f6:65:e1:a1:62:4b:4b:c6:a4:d1:a6:31:
         86:d1:7c:e1:47:06:a9:a0:a8:b7:3d:d8:d1:16:69:6c:cb:75:
         58:d9:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 02:10:41 2026 by rpki-client