This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e322e302f32332d3234203d3e203233323433.roa
File:                     3139302e31342e322e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          w/wj0GvSpA6UEtsJQdSRSmGxu2U2csc07xuJDabJ7xg=
Subject key identifier:   9C:1B:D0:A3:F9:47:0B:F5:07:31:EC:A0:BA:EA:B1:0D:CF:D2:46:F2
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       7A85E79843E07B8FA465892DE017FEF1CEDAEC11
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e322e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 06 Jan 2026 19:12:12 +0000
ROA not before:           Tue 06 Jan 2026 19:07:12 +0000
ROA not after:            Tue 05 Jan 2027 19:12:12 +0000
asID:                     23243
IP address blocks:        190.14.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:85:e7:98:43:e0:7b:8f:a4:65:89:2d:e0:17:fe:f1:ce:da:ec:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Jan  6 19:07:12 2026 GMT
            Not After : Jan  5 19:12:12 2027 GMT
        Subject: CN=9C1BD0A3F9470BF50731ECA0BAEAB10DCFD246F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e5:cf:29:04:6c:73:26:b6:94:32:bb:bf:9c:
                    b9:b4:82:71:e2:1e:fa:9a:cf:a1:5e:f0:49:ee:2a:
                    b1:04:a5:f8:52:c0:44:ca:5b:26:ee:0d:76:02:6e:
                    f7:08:ef:57:41:1a:14:1e:b3:13:82:bb:33:62:ab:
                    2d:73:fa:3d:0a:e7:bc:77:c5:3a:26:42:26:2b:21:
                    b7:ab:73:d4:bf:c8:1e:77:6a:e9:24:b4:ca:70:5a:
                    35:51:95:c9:85:13:39:09:33:49:2e:4a:34:8a:51:
                    07:3c:d4:57:0a:3c:02:cc:f7:14:3f:15:0e:17:7d:
                    78:41:14:17:d5:34:e2:aa:60:77:7a:79:d6:a6:ff:
                    7f:64:e6:e9:34:2c:ff:98:26:11:30:93:bb:67:7f:
                    00:1a:56:f2:09:60:df:3a:3c:0b:82:38:2d:52:2b:
                    1e:c7:e9:4f:ed:e6:8d:d6:0d:f7:f8:80:1a:b4:65:
                    6a:b5:c0:d3:0a:29:42:de:9d:2d:37:da:fe:ad:68:
                    3c:e6:35:31:ab:fd:ac:43:d4:04:a4:b0:00:01:93:
                    99:d3:fe:33:87:7c:5c:98:ca:9b:a6:a0:be:d5:9f:
                    9f:6c:9c:5c:4b:57:cf:0b:de:17:41:88:98:35:15:
                    f6:70:fa:e9:b5:57:0d:f4:46:4f:ac:22:bb:10:cb:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1B:D0:A3:F9:47:0B:F5:07:31:EC:A0:BA:EA:B1:0D:CF:D2:46:F2
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e322e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:75:e7:a6:d1:63:4a:f2:bd:d2:ba:0d:7e:25:c0:c7:22:ec:
         9c:e5:e5:bc:1d:a9:08:dd:99:43:64:49:d2:95:80:91:34:5e:
         43:ac:8a:ce:a6:c8:cc:d9:8f:dc:8a:ef:26:b6:14:b7:48:96:
         52:d1:14:66:77:d1:a7:90:64:bc:cf:ab:58:9c:53:3b:ad:25:
         38:32:0c:bb:91:88:c3:99:5f:be:49:ce:91:82:37:18:25:1c:
         23:c5:00:c2:45:2e:c7:f0:f7:88:f9:0e:39:7a:b1:4b:79:9c:
         03:5e:bc:ee:ac:c6:e6:06:98:5a:f3:74:c3:13:a2:74:6a:77:
         d2:bc:7e:fa:41:bb:f7:dc:85:18:73:7e:07:3b:07:2f:85:c4:
         48:d4:c9:f7:e5:c8:bb:68:0a:69:ca:5a:7b:60:a1:29:44:53:
         7f:2f:65:3c:79:8d:f9:47:0e:16:cf:19:17:6e:87:55:4a:a8:
         49:18:d7:7c:d3:34:d1:2c:9b:22:30:9e:e2:76:2d:56:b4:4c:
         bc:2d:5f:75:dd:5a:1a:c6:03:f4:c0:b1:b9:ac:d9:80:0a:39:
         ed:a6:03:cf:9f:20:dd:95:d7:f4:0c:14:ba:7c:a1:fc:92:82:
         61:a1:8f:db:a5:cf:8a:58:2a:fe:3f:86:e2:51:7c:8f:bd:1f:
         e4:3c:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 16:25:31 2026 by rpki-client