This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3134392e302f32342d3234203d3e20323632353839.roa
File:                     3139302e3132312e3134392e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          WELHAqB+IAJ/FVGFqgByAiAVe4EFohCydxp0F9mTtaw=
Subject key identifier:   EE:1F:EC:24:CD:71:25:14:7C:3E:53:32:DD:B0:3B:C3:0E:40:10:0F
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       7964BCB938B85A5075EDC1B815EDD25FAE180A93
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3134392e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 06 Jan 2026 20:48:38 +0000
ROA not before:           Tue 06 Jan 2026 20:43:38 +0000
ROA not after:            Tue 05 Jan 2027 20:48:38 +0000
asID:                     262589
IP address blocks:        190.121.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:64:bc:b9:38:b8:5a:50:75:ed:c1:b8:15:ed:d2:5f:ae:18:0a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Jan  6 20:43:38 2026 GMT
            Not After : Jan  5 20:48:38 2027 GMT
        Subject: CN=EE1FEC24CD7125147C3E5332DDB03BC30E40100F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a2:69:56:71:cd:d2:dd:1b:93:c2:ce:69:d1:
                    d6:e7:f5:a6:22:f1:02:9e:ad:2e:6a:d8:64:46:ad:
                    22:24:14:ca:fd:37:88:2b:19:1e:2f:d5:86:fe:7e:
                    7f:96:ea:58:f1:db:d0:b4:e2:95:ec:9a:69:1a:55:
                    08:52:55:58:88:1b:07:c7:94:82:4a:1a:17:af:c4:
                    ba:c1:10:e6:18:a4:be:00:d6:72:3b:05:66:34:21:
                    33:eb:dc:f8:65:f7:b0:ad:9f:c0:f9:77:16:c5:f7:
                    d5:da:48:77:dc:f1:01:bf:8b:cd:29:48:31:f2:01:
                    8a:62:83:5d:bf:b7:f5:9c:c6:f1:85:8a:90:16:3f:
                    6d:b3:56:24:2b:b7:0b:36:08:b8:db:4e:6a:f6:ed:
                    ad:3c:6a:d9:07:8d:08:5f:95:78:0c:2a:84:65:26:
                    04:e3:ef:13:fd:35:76:57:c6:54:c5:ec:73:eb:9d:
                    6b:fd:92:19:51:44:ab:c9:2f:7f:1a:24:51:48:a4:
                    fb:8c:33:87:19:a9:1a:64:46:1c:d8:47:fe:ec:e0:
                    e3:88:3b:be:3d:a7:c4:7d:2a:1c:21:47:e6:f9:b3:
                    4a:0a:43:1a:01:a7:b7:51:2d:7d:c7:ed:1f:47:de:
                    9c:27:02:81:71:7d:91:c1:53:1d:b8:91:13:00:a2:
                    c1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1F:EC:24:CD:71:25:14:7C:3E:53:32:DD:B0:3B:C3:0E:40:10:0F
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3134392e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:ea:a2:7e:51:ff:10:31:ae:f0:10:c6:54:5d:6b:d8:64:ab:
         94:1d:70:56:50:c3:5c:f8:86:fd:1a:e9:81:22:af:80:57:9f:
         06:df:b7:ab:4f:e7:13:92:d2:b3:16:f5:be:51:d5:82:93:75:
         c6:95:f9:25:3b:2f:3c:6a:60:e6:ed:9d:21:8e:5f:69:8d:c0:
         6b:75:48:24:a0:4e:73:e4:ed:19:33:71:e2:a8:f6:86:dd:56:
         51:d3:9e:c8:5f:83:80:54:d9:c5:48:11:ac:3f:99:8d:c6:f9:
         0f:8f:a5:3e:c0:d0:2b:60:c2:75:fb:d1:df:4d:d6:6a:2b:11:
         d5:9a:b4:d6:a4:09:1f:ae:ea:e6:a4:7a:3c:c5:70:a6:a8:d8:
         f9:34:fb:d6:7a:79:0f:ec:ee:2f:64:b1:58:8d:35:c7:4d:33:
         91:32:6c:ab:2b:e5:5d:6c:38:f1:ef:85:4a:a4:62:74:a6:14:
         11:2d:56:4a:a5:e0:aa:ec:26:67:e1:e9:4e:0a:aa:fc:d4:a0:
         8e:d2:5d:79:a0:9e:5b:77:73:a1:a4:24:68:52:fb:a8:91:05:
         18:ea:b1:b2:4d:7f:9e:9c:47:75:13:d6:5c:23:79:74:d1:31:
         5f:0e:57:8d:78:f6:b9:c4:e4:70:ab:58:1f:20:b4:7b:a4:82:
         83:9e:7c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:26 2026 by rpki-client