This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32362e302f32332d3234203d3e203236363137.roa
File:                     3139302e3131312e32362e302f32332d3234203d3e203236363137.roa (raw, json)
Hash identifier:          i0aEuy3W192y/r+Zo4KcvpwVxpHC6XLncRXSzPVOt/M=
Subject key identifier:   C0:BB:BB:C6:31:5D:3D:A4:99:F3:63:9D:4A:0F:98:CC:0B:99:78:DF
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       3D04CE53B0B6BFC6DF99E7AC087CA4239FF40A66
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32362e302f32332d3234203d3e203236363137.roa
Signing time:             Tue 06 Jan 2026 19:12:10 +0000
ROA not before:           Tue 06 Jan 2026 19:07:10 +0000
ROA not after:            Tue 05 Jan 2027 19:12:10 +0000
asID:                     26617
IP address blocks:        190.111.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:04:ce:53:b0:b6:bf:c6:df:99:e7:ac:08:7c:a4:23:9f:f4:0a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Jan  6 19:07:10 2026 GMT
            Not After : Jan  5 19:12:10 2027 GMT
        Subject: CN=C0BBBBC6315D3DA499F3639D4A0F98CC0B9978DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:42:95:d8:b6:65:15:6a:df:07:3e:26:c4:48:
                    02:bc:aa:de:45:33:8e:40:ba:de:36:8e:76:c7:b1:
                    38:29:ab:44:31:db:42:87:76:f1:ae:e1:ec:be:c5:
                    bd:d1:3a:a4:02:48:0e:08:2f:bc:6e:f5:d8:a8:e2:
                    94:b1:31:a9:e4:14:ea:5f:e5:c7:e8:5c:f7:c5:f2:
                    f7:6d:a5:af:fc:eb:de:07:86:a3:fb:8c:60:66:6c:
                    be:b1:0b:cc:5d:dd:05:de:22:bd:ed:61:39:55:b3:
                    d2:94:5b:b4:5b:41:f8:c9:fd:71:08:25:b9:fa:88:
                    60:3b:a3:a7:66:96:46:fc:b6:a9:73:5e:ff:4f:0a:
                    57:ac:67:10:69:da:03:7b:7e:a4:47:44:e5:33:71:
                    70:88:3a:36:da:e3:e1:e2:12:e9:c5:da:91:6b:df:
                    41:ef:9b:fd:a3:2e:14:31:be:bd:ec:ed:c3:3a:d7:
                    57:35:e0:63:df:47:63:ba:ff:7e:da:74:78:58:df:
                    57:8c:98:c7:67:58:52:3c:a3:ff:5e:71:54:93:88:
                    b3:89:6a:12:2d:cb:60:e9:3b:cd:50:4d:72:9c:9b:
                    45:87:ab:dd:9f:55:98:1f:13:25:e8:76:50:ea:c7:
                    d3:43:7b:82:02:8c:29:9a:cc:8e:66:20:4f:8a:17:
                    19:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BB:BB:C6:31:5D:3D:A4:99:F3:63:9D:4A:0F:98:CC:0B:99:78:DF
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32362e302f32332d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:e9:92:ff:f4:b7:5f:40:96:10:d9:cb:b8:ab:b4:7e:13:d7:
         b4:d3:a6:4f:93:c0:f7:06:18:32:f6:e9:91:28:2a:9c:7a:17:
         4e:da:bc:95:45:ea:96:a9:51:f4:d8:54:78:f2:06:c2:cc:5f:
         3c:31:71:10:43:3b:8b:c2:cd:00:ab:17:1c:a8:9f:9e:5d:6e:
         34:02:cb:27:47:23:bf:5b:94:d0:08:bb:de:21:3d:e4:f7:22:
         db:6a:16:c8:4f:c0:d4:e6:dc:a2:7b:ae:44:d3:42:2b:1d:49:
         2c:98:fe:5b:ab:e8:b4:1b:95:e4:ea:fb:de:24:42:f8:21:01:
         1b:24:38:79:31:26:7e:93:52:f7:42:b7:f0:ba:76:a9:56:7f:
         2e:41:54:c0:52:e4:d2:6b:fb:a2:31:9c:81:4c:2d:bb:d3:eb:
         ea:c0:a1:91:64:9a:7f:03:45:60:72:a2:bd:24:ca:f3:6c:51:
         f8:2a:80:38:31:3c:15:5c:d9:52:f3:b8:68:ba:e7:a7:3e:65:
         9e:44:91:d5:c3:6e:d7:a9:9d:06:2f:58:d3:c6:ef:c9:35:93:
         31:08:33:dc:5f:83:09:fd:cb:65:7e:dd:21:3b:5c:b3:b9:8f:
         28:d4:5f:1e:6c:81:09:94:a6:73:41:04:8d:0b:73:60:27:6c:
         23:18:42:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 16:26:47 2026 by rpki-client