This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3139302e35322e3232342e302f32302d3234203d3e203238303533.roa
File:                     3139302e35322e3232342e302f32302d3234203d3e203238303533.roa (raw, json)
Hash identifier:          y8M4rfH+NhdBu9U+6eeZfrRlqHN7XtUjtuv6MoX8PqM=
Subject key identifier:   06:47:43:50:99:09:DD:C1:E0:BF:76:13:13:0A:2D:10:9B:B9:38:93
Certificate issuer:       /CN=0775F451BF69A7F4553954A7FE9AC42D41BFF9F2
Certificate serial:       625257E06BC50A1F57108A32986FB64342D9D846
Authority key identifier: 07:75:F4:51:BF:69:A7:F4:55:39:54:A7:FE:9A:C4:2D:41:BF:F9:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3139302e35322e3232342e302f32302d3234203d3e203238303533.roa
Signing time:             Tue 06 Jan 2026 19:18:48 +0000
ROA not before:           Tue 06 Jan 2026 19:13:48 +0000
ROA not after:            Tue 05 Jan 2027 19:18:48 +0000
asID:                     28053
IP address blocks:        190.52.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 18:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:52:57:e0:6b:c5:0a:1f:57:10:8a:32:98:6f:b6:43:42:d9:d8:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0775F451BF69A7F4553954A7FE9AC42D41BFF9F2
        Validity
            Not Before: Jan  6 19:13:48 2026 GMT
            Not After : Jan  5 19:18:48 2027 GMT
        Subject: CN=064743509909DDC1E0BF7613130A2D109BB93893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7c:8a:b0:bf:73:38:23:64:e7:36:91:fd:dc:
                    36:70:f9:54:66:b4:da:57:d3:a7:08:38:ba:57:40:
                    97:8c:c3:a6:82:54:7e:91:b3:a4:fc:15:cb:2f:df:
                    6b:0e:86:dc:f8:81:6c:63:0d:ae:3f:95:f8:f0:c1:
                    4c:cb:46:16:4d:43:15:4f:2f:9a:0b:75:f5:8f:32:
                    0a:30:96:a7:42:ff:53:f7:0a:99:1a:ad:0f:64:5e:
                    70:15:40:a6:6e:04:2b:8a:a2:39:48:80:85:0a:12:
                    6f:b6:8c:0e:97:d6:10:68:86:67:4e:98:86:c6:3a:
                    2d:5c:ad:93:97:e1:02:7c:6f:b4:34:70:85:80:91:
                    da:31:99:a4:85:30:45:54:77:7d:6b:30:16:9e:ad:
                    6d:ab:79:ec:19:03:04:b5:c8:08:80:b2:e3:ef:de:
                    b0:7a:14:a1:11:82:d9:13:4c:34:50:cf:02:6f:bd:
                    03:4a:bd:6b:9a:31:29:e6:bb:d9:db:80:b8:95:df:
                    a6:ea:f3:1f:0a:69:ba:48:17:6e:0e:dc:7f:5d:cd:
                    d1:f0:82:97:7e:49:22:47:83:3d:d5:be:1e:d0:25:
                    d9:43:10:b9:86:bf:d8:33:d7:54:71:e6:d5:66:aa:
                    86:38:79:e1:c9:22:10:4c:b9:86:a2:63:14:4a:a5:
                    5a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:47:43:50:99:09:DD:C1:E0:BF:76:13:13:0A:2D:10:9B:B9:38:93
            X509v3 Authority Key Identifier:
                keyid:07:75:F4:51:BF:69:A7:F4:55:39:54:A7:FE:9A:C4:2D:41:BF:F9:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3139302e35322e3232342e302f32302d3234203d3e203238303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:a4:7c:e9:42:4d:a6:32:f0:53:6b:c3:ab:3b:af:5e:37:ae:
         84:94:02:f0:64:80:5c:8e:4b:71:db:d7:ff:db:d4:ec:b6:50:
         da:bd:b9:c9:d1:15:dd:c2:ef:b7:23:21:1b:97:0f:f9:d0:8f:
         ee:1f:e6:1e:18:c6:9d:e9:81:c0:45:9c:66:c8:41:10:11:51:
         43:d1:26:16:85:7c:67:10:c6:05:26:58:48:58:d4:b7:7e:97:
         5b:6f:28:7a:8d:9d:74:80:ca:4c:9b:3c:dd:a6:64:49:3d:be:
         2c:bf:4f:01:c4:be:d0:d0:c7:f8:ba:88:98:fe:b1:dd:59:ea:
         21:3c:5b:6b:ba:76:21:3b:97:5f:58:37:93:12:be:cb:69:9c:
         ca:c6:0e:d4:ad:61:d6:9b:af:c5:1e:a8:65:2a:67:30:c3:80:
         51:de:d2:54:df:8e:6e:26:f1:d2:af:c6:1b:9c:76:80:35:4f:
         6d:2b:66:ff:4f:96:4e:e0:2e:0d:4f:a4:0a:f3:6c:df:3b:ea:
         c3:71:9d:ce:4e:ce:72:86:14:6c:3e:50:39:a0:2f:24:42:47:
         05:b9:08:ab:00:79:b8:84:7c:d4:c2:04:1b:25:d0:32:c2:ee:
         53:e2:54:d0:94:6e:e7:65:82:3d:2b:82:91:d1:6c:fd:79:d4:
         ed:9c:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:38:59 2026 by rpki-client