This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e352e302f32342d3234203d3e203236363137.roa
File:                     3139302e31342e352e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          rfaboeMtGAKL+0/zFJCFj6UfAk2Qc0ZGfELxWyFKr5s=
Subject key identifier:   6C:36:DA:0E:90:DC:4C:C8:51:CF:34:DE:E2:83:29:BB:66:66:7E:8E
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       7022DB095210904CABA31D3D833F031DB3660869
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e352e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 06 Jan 2026 19:12:14 +0000
ROA not before:           Tue 06 Jan 2026 19:07:14 +0000
ROA not after:            Tue 05 Jan 2027 19:12:14 +0000
asID:                     26617
IP address blocks:        190.14.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:22:db:09:52:10:90:4c:ab:a3:1d:3d:83:3f:03:1d:b3:66:08:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Jan  6 19:07:14 2026 GMT
            Not After : Jan  5 19:12:14 2027 GMT
        Subject: CN=6C36DA0E90DC4CC851CF34DEE28329BB66667E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:51:4d:cb:61:23:f8:7f:59:47:bf:e2:8f:
                    cd:75:45:9e:3f:00:bc:c1:c0:19:6a:5b:53:24:91:
                    b0:96:67:cb:9e:16:65:14:b2:14:21:16:3a:c1:62:
                    df:d4:7b:74:3e:24:37:01:a2:db:35:a0:07:b8:56:
                    7f:24:d3:2c:b6:63:fd:ef:93:a1:df:3e:95:ce:f3:
                    bb:40:4f:23:95:21:20:28:d6:0c:59:18:f4:88:18:
                    4a:75:83:6d:fa:a6:89:71:02:7d:97:b1:0c:9e:0d:
                    20:17:37:0e:ed:51:11:4d:61:83:a3:72:63:70:34:
                    25:d2:98:9e:d2:75:ac:00:af:49:6c:90:20:e4:a6:
                    53:19:7b:3f:ad:cc:28:af:8e:a8:e3:d8:d5:21:5a:
                    50:ee:91:0e:87:af:08:0a:13:bb:5c:bc:a0:a3:fd:
                    98:9e:c0:f9:d5:e5:f4:29:fa:88:e8:ce:fd:48:00:
                    ef:e0:e7:4c:5c:f8:55:e5:d3:16:cd:9b:ba:c3:2c:
                    9f:39:14:8b:e8:f2:28:fc:fa:ab:de:3c:ce:85:e8:
                    87:0c:99:50:0e:f4:89:76:bd:e6:77:28:a1:97:b9:
                    e6:47:ba:f0:18:81:71:e2:cc:95:8b:e4:a0:9e:b4:
                    a5:69:3f:28:6b:cd:da:e2:87:36:38:e6:91:2a:2c:
                    14:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:36:DA:0E:90:DC:4C:C8:51:CF:34:DE:E2:83:29:BB:66:66:7E:8E
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e352e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:54:8d:06:17:ff:aa:02:0a:e7:83:5c:93:73:82:b8:e2:50:
         cf:35:e0:10:2f:c2:be:04:c6:8e:00:a9:f1:19:aa:c7:34:20:
         16:e8:38:2c:28:a8:01:ec:9a:bc:6f:23:97:b9:26:c5:51:3b:
         e5:77:5e:65:b7:8d:99:79:8f:70:f5:5e:5c:7a:66:1f:46:26:
         9f:40:f3:e8:96:f3:10:27:0b:c1:41:8d:a5:0a:f4:25:9f:fc:
         48:21:1d:76:e6:24:8a:cb:39:ae:38:2a:08:00:7c:f5:9a:b3:
         e8:2b:22:bd:d1:83:17:42:78:c5:18:bf:b0:be:9f:7b:ee:cd:
         23:fa:a0:1f:85:0b:09:94:88:18:ce:83:f8:44:a9:a6:04:37:
         a6:08:04:82:57:e4:c4:d8:0b:8b:fb:20:a5:de:a7:af:52:d8:
         ed:f7:2f:77:e6:59:8b:84:fd:88:7e:06:ca:f4:b9:a9:a8:f0:
         bc:b9:3a:56:44:b8:a5:23:75:17:1e:fc:e0:a1:d7:c7:ac:b2:
         c3:cc:b9:70:0d:ef:f7:ca:b3:33:3b:a4:3f:2c:39:c1:75:07:
         b6:89:b0:1b:bf:61:90:fc:aa:92:04:a0:86:4a:4e:89:89:1b:
         98:df:4b:d2:32:02:6c:67:b6:5b:8c:f0:a7:d9:21:06:9f:fc:
         78:33:a1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 16:25:31 2026 by rpki-client