This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e31382e302f32332d3234203d3e203236363137.roa
File:                     3139302e3131312e31382e302f32332d3234203d3e203236363137.roa (raw, json)
Hash identifier:          8BjyUdFjpQpEQw74Z2uAlOcPuOl1IAGKbY59pYn/9pg=
Subject key identifier:   81:07:AA:F8:E7:C1:63:E3:7D:51:9F:7D:CB:A5:E6:A3:05:DC:5B:5C
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       7DD5C1DC9D94BF8859438CB09DE65087084338CA
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e31382e302f32332d3234203d3e203236363137.roa
Signing time:             Tue 06 Jan 2026 19:12:00 +0000
ROA not before:           Tue 06 Jan 2026 19:07:00 +0000
ROA not after:            Tue 05 Jan 2027 19:12:00 +0000
asID:                     26617
IP address blocks:        190.111.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d5:c1:dc:9d:94:bf:88:59:43:8c:b0:9d:e6:50:87:08:43:38:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Jan  6 19:07:00 2026 GMT
            Not After : Jan  5 19:12:00 2027 GMT
        Subject: CN=8107AAF8E7C163E37D519F7DCBA5E6A305DC5B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:49:93:cb:a3:33:b9:a0:14:6a:43:f2:2b:
                    87:56:7c:bb:3b:70:cd:01:e8:03:7b:1a:aa:b8:a0:
                    02:54:ad:a7:96:71:e0:e6:83:6f:a2:70:65:8b:14:
                    75:b4:e4:ec:74:4b:7a:9d:2d:0e:8c:0d:dd:87:80:
                    62:18:bd:3a:0d:e7:9a:a1:0f:ff:19:07:66:bd:23:
                    8f:63:bb:8f:64:6e:22:7f:ec:37:5e:8d:d8:19:44:
                    4e:a4:fa:82:1c:78:eb:71:df:45:45:3b:cb:37:d5:
                    e0:69:56:91:b8:70:84:b1:c2:77:07:1e:70:61:8e:
                    45:9b:18:d8:2f:da:0b:ad:05:8e:35:42:17:88:c3:
                    13:e7:dd:42:d6:43:5c:d9:e5:ca:ff:3f:97:20:c7:
                    12:86:5f:33:f2:46:ca:cb:54:36:2b:19:9b:83:0a:
                    cd:ef:c6:d3:d3:cf:ef:d9:14:d8:11:78:9a:a7:94:
                    1f:5c:f5:c6:ab:7e:5c:b6:24:cd:1e:c5:ff:f5:af:
                    bc:72:01:c8:02:31:5e:cd:36:0d:84:05:b9:45:f6:
                    d5:86:bc:dc:9b:ad:e2:8f:c0:53:80:4b:ff:db:50:
                    92:63:e5:65:68:92:4c:e4:af:2c:75:36:8c:2b:ca:
                    cf:27:d4:fb:6f:a1:bd:b7:8d:82:2a:68:30:0e:12:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:07:AA:F8:E7:C1:63:E3:7D:51:9F:7D:CB:A5:E6:A3:05:DC:5B:5C
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e31382e302f32332d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:07:3c:af:48:54:24:6d:ac:41:65:66:c1:ff:db:d1:5d:71:
         0a:ea:2c:37:21:3e:76:a0:28:81:4c:9c:68:b6:b6:db:69:a8:
         4a:ae:da:55:55:6e:80:87:c1:0b:3a:b8:ed:44:83:e2:2c:da:
         b6:de:8f:bd:a6:12:00:07:0c:5e:49:ee:c2:9a:c4:2a:13:98:
         e7:63:a2:dd:1c:36:28:a7:78:fb:6a:61:d5:6f:14:32:6a:11:
         8d:3f:22:81:f7:83:42:8e:be:67:e3:63:f0:12:27:dc:1b:dd:
         89:79:f2:c2:dc:7e:4f:71:db:70:42:06:1c:36:23:55:57:6d:
         ca:aa:12:ab:b0:51:46:31:3a:5d:79:26:74:c0:df:68:8b:f9:
         e8:53:e7:74:85:d9:2f:c4:98:a7:a7:38:a1:67:0d:88:bf:21:
         30:1c:36:72:e0:c5:36:2f:88:ff:48:a0:31:c2:ac:48:d3:d3:
         78:44:ab:7a:01:b0:c1:bf:16:ac:c3:11:38:34:2b:f1:53:05:
         c5:39:ca:21:3f:42:9b:09:2b:a4:11:59:5e:b0:54:ec:bf:b3:
         5f:02:8d:1d:a0:77:06:b9:fc:b7:c6:05:ba:bd:2d:a0:b7:b7:
         12:be:d7:8d:25:fc:85:45:c8:f8:b8:ef:96:57:5d:64:b8:ef:
         7a:77:08:fe
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfdXB3J2Uv4hZQ4ywneZQhwhDOMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENDMTAwODdCMzJFRTY5QTQ4OEY1QUU4QUZBMkVFMkY1
MDYxQURFMDAeFw0yNjAxMDYxOTA3MDBaFw0yNzAxMDUxOTEyMDBaMDMxMTAvBgNV
BAMTKDgxMDdBQUY4RTdDMTYzRTM3RDUxOUY3RENCQTVFNkEzMDVEQzVCNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQVEmTy6MzuaAUakPyK4dWfLs7
cM0B6AN7Gqq4oAJUraeWceDmg2+icGWLFHW05Ox0S3qdLQ6MDd2HgGIYvToN55qh
D/8ZB2a9I49ju49kbiJ/7DdejdgZRE6k+oIceOtx30VFO8s31eBpVpG4cISxwncH
HnBhjkWbGNgv2gutBY41QheIwxPn3ULWQ1zZ5cr/P5cgxxKGXzPyRsrLVDYrGZuD
Cs3vxtPTz+/ZFNgReJqnlB9c9carfly2JM0exf/1r7xyAcgCMV7NNg2EBblF9tWG
vNybreKPwFOAS//bUJJj5WVokkzkryx1Nowrys8n1Ptvob23jYIqaDAOEuqpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgQeq+OfBY+N9UZ99y6XmowXcW1wwHwYDVR0j
BBgwFoAUTMEAh7Mu5ppIj1ror6LuL1BhreAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MDA3MkU1NzQzMTQzOTc1QzUxQjQ3RDlGM0E3MjhGMjk1
MkQyMjYwQURERDAwMUYwQ0E2MzA3ODc1QUQ0MUM4LzAvNENDMTAwODdCMzJFRTY5
QTQ4OEY1QUU4QUZBMkVFMkY1MDYxQURFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Q0MxMDA4N0IzMkVFNjlBNDg4
RjVBRThBRkEyRUUyRjUwNjFBREUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTAwNzJFNTc0MzE0Mzk3NUM1MUI0N0Q5RjNBNzI4RjI5NTJEMjI2MEFE
REQwMDFGMENBNjMwNzg3NUFENDFDOC8wLzMxMzkzMDJlMzEzMTMxMmUzMTM4MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM2MzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb5vEjAN
BgkqhkiG9w0BAQsFAAOCAQEAVQc8r0hUJG2sQWVmwf/b0V1xCuosNyE+dqAogUyc
aLa222moSq7aVVVugIfBCzq47USD4izatt6PvaYSAAcMXknuwprEKhOY52Oi3Rw2
KKd4+2ph1W8UMmoRjT8igfeDQo6+Z+Nj8BIn3BvdiXnywtx+T3HbcEIGHDYjVVdt
yqoSq7BRRjE6XXkmdMDfaIv56FPndIXZL8SYp6c4oWcNiL8hMBw2cuDFNi+I/0ig
McKsSNPTeESregGwwb8WrMMRODQr8VMFxTnKIT9CmwkrpBFZXrBU7L+zXwKNHaB3
Brn8t8YFur0toLe3Er7XjSX8hUXI+LjvllddZLjvencI/g==
-----END CERTIFICATE-----
Generated at Fri Jan 23 16:25:56 2026 by rpki-client