This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e302e302f32332d3234203d3e203236363137.roa
File:                     3139302e31342e302e302f32332d3234203d3e203236363137.roa (raw, json)
Hash identifier:          ymaD3V37N8LUJI/q2DRd0ZcUZtrZFtzgvUqJ8G78TEY=
Subject key identifier:   82:3C:B8:51:92:9F:AD:F5:40:2A:25:82:26:A8:92:C4:D4:B3:17:BA
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       4C0529156D66675B93EF36368D2D89A3AE706609
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e302e302f32332d3234203d3e203236363137.roa
Signing time:             Tue 06 Jan 2026 19:12:13 +0000
ROA not before:           Tue 06 Jan 2026 19:07:13 +0000
ROA not after:            Tue 05 Jan 2027 19:12:13 +0000
asID:                     26617
IP address blocks:        190.14.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:05:29:15:6d:66:67:5b:93:ef:36:36:8d:2d:89:a3:ae:70:66:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Jan  6 19:07:13 2026 GMT
            Not After : Jan  5 19:12:13 2027 GMT
        Subject: CN=823CB851929FADF5402A258226A892C4D4B317BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:b2:27:44:fc:9b:d7:6f:ef:a6:d3:64:4c:
                    ee:69:77:55:cf:e8:52:c1:58:de:4e:a5:f9:a9:b8:
                    5f:02:46:25:5b:bf:9c:57:26:83:c6:95:b7:2b:6e:
                    83:78:4f:ad:ea:e1:ff:4d:3a:f2:a9:09:a6:26:57:
                    35:c4:e6:5a:ee:62:4d:8d:18:82:7e:90:c0:e4:72:
                    0f:13:b7:10:3c:4b:2d:f9:35:45:58:a2:ad:3e:40:
                    a7:80:e4:b4:17:79:3f:43:d3:49:7c:19:0f:f0:44:
                    06:8e:1a:61:fe:39:8c:3a:1f:18:a7:6d:d0:ca:16:
                    b7:09:87:80:b1:cc:83:2a:d4:dd:8a:7e:84:bf:a5:
                    07:da:e6:7f:12:a4:04:ed:9e:1e:af:70:4f:88:47:
                    5e:19:5a:22:41:85:33:d6:67:a3:eb:5e:00:e6:ea:
                    f6:93:ec:82:69:03:4b:a6:3d:f2:95:e5:8f:ed:81:
                    ae:05:b0:2e:8e:9f:1f:e7:8d:07:ff:52:b9:44:8a:
                    21:f0:8e:d7:07:81:96:b3:07:9d:d0:12:f3:c6:bb:
                    c1:fe:65:01:98:bf:e2:53:d5:e5:26:57:fa:bc:3e:
                    1a:b2:db:a2:93:d2:59:6f:04:06:73:21:35:93:99:
                    a5:b5:d7:96:fa:ef:a0:38:67:b0:ef:25:5b:1c:44:
                    24:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3C:B8:51:92:9F:AD:F5:40:2A:25:82:26:A8:92:C4:D4:B3:17:BA
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e302e302f32332d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:f8:e6:04:bc:82:61:56:ed:48:78:d6:2c:f7:ee:b9:c8:e5:
         aa:cc:68:30:2c:07:f3:d7:c6:e9:9f:aa:c0:4f:12:fc:30:b4:
         93:b7:06:b6:a7:4b:a9:d0:91:a2:08:90:e3:c8:cc:94:56:10:
         d7:d6:3b:92:c6:a7:55:93:f4:a3:51:9b:aa:f7:6f:fc:48:d0:
         48:95:7e:73:7d:b6:2e:bb:20:a8:d9:80:03:51:1a:c4:b3:63:
         7f:95:cc:38:26:29:5f:e0:34:cf:26:5b:16:aa:8b:8c:ff:c6:
         15:16:d2:71:9f:7a:34:5d:bd:94:8d:71:cb:89:de:ea:c9:ef:
         e3:ce:98:db:ba:6b:db:ef:c5:b2:87:e4:90:4a:b8:c9:2e:7a:
         ec:f8:92:8c:34:0f:8c:76:a0:dd:ed:a1:d0:23:c7:66:a1:9d:
         f0:a4:1e:f4:de:46:ab:ee:61:a8:87:69:82:cf:f6:4a:e4:ec:
         59:2d:55:98:88:24:9c:ee:6f:c4:c0:ca:9c:2d:3d:2f:df:7a:
         89:8a:f0:49:e0:05:92:f7:40:4b:ca:ac:3b:d0:36:c9:e5:b9:
         0c:2e:d5:da:29:69:fd:95:54:60:f5:d1:b6:c6:45:8c:5f:e4:
         33:9a:ff:da:b0:36:48:31:73:ef:41:dc:df:dd:1e:38:87:b3:
         35:97:35:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 16:28:17 2026 by rpki-client