This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e35382e302f32342d3234203d3e203233333833.roa
File:                     3139302e342e35382e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          AzBLxKORUfw1sw+lQfjDxlYWzWIghxCyc1mdY3W+Paw=
Subject key identifier:   A1:E1:54:6F:83:53:43:A9:32:2F:19:AF:12:88:5D:D6:71:B1:BF:B3
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       3ABCF3907ABA62DFE37F96735B58B7C11CD863FA
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e35382e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 06 Jan 2026 19:11:56 +0000
ROA not before:           Tue 06 Jan 2026 19:06:56 +0000
ROA not after:            Tue 05 Jan 2027 19:11:56 +0000
asID:                     23383
IP address blocks:        190.4.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bc:f3:90:7a:ba:62:df:e3:7f:96:73:5b:58:b7:c1:1c:d8:63:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Jan  6 19:06:56 2026 GMT
            Not After : Jan  5 19:11:56 2027 GMT
        Subject: CN=A1E1546F835343A9322F19AF12885DD671B1BFB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:7e:a6:ca:38:b6:0d:19:8c:c1:cf:c9:c3:
                    05:b7:61:3d:19:3e:b6:cc:6a:34:8c:a8:e2:2c:53:
                    94:ca:db:a9:d9:cc:b3:2e:9f:66:ed:92:77:3d:5c:
                    9d:57:77:36:4d:c6:cb:e1:b5:7d:93:a3:23:6e:59:
                    39:5a:a9:e8:fe:a0:2d:fd:ac:50:46:a1:c0:84:0e:
                    e7:32:67:bf:57:48:50:a4:4c:59:6f:b8:98:10:9c:
                    0b:5d:f1:6b:48:11:91:bc:4a:03:05:bb:af:a7:54:
                    4f:41:93:c9:cf:a3:5f:84:fa:a9:48:26:36:a6:56:
                    46:33:45:9b:33:2d:14:11:ff:6b:3d:a7:cb:cf:61:
                    0b:0e:2a:6d:96:88:c4:df:3b:45:57:13:84:95:b2:
                    38:d9:d6:02:4e:c7:0b:b5:04:44:98:cb:75:22:99:
                    26:19:5e:a3:71:a6:c6:3f:be:c9:68:f3:89:e8:46:
                    e8:99:44:cc:3e:7c:be:0e:d2:7b:79:c4:65:d3:9a:
                    9a:3c:a3:a2:92:ca:56:36:54:fc:6e:c3:36:e2:b8:
                    cb:c8:df:0d:bd:02:42:ab:93:12:0c:4b:4d:94:28:
                    cb:99:ce:7b:f5:b6:c2:e9:5a:35:72:4c:19:6e:58:
                    51:55:1c:ad:80:78:af:14:3f:2f:ae:c3:bc:ea:7a:
                    2b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E1:54:6F:83:53:43:A9:32:2F:19:AF:12:88:5D:D6:71:B1:BF:B3
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e35382e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:59:79:9b:d0:f7:e3:6b:24:eb:8c:15:fe:49:21:16:ae:cc:
         4c:f9:b0:2b:a6:c7:ee:ba:d9:c4:1a:b5:19:72:b6:c5:0e:c0:
         45:28:cd:e0:0b:c0:b0:7d:62:be:a1:6e:5b:71:31:8b:fe:c2:
         74:7c:ba:fc:dd:68:f2:6b:c6:a4:e8:06:d8:ec:5c:47:28:3d:
         22:14:b5:99:0b:f1:e7:09:72:fb:d4:1e:8c:9f:2f:68:63:74:
         1b:48:3d:af:1d:9f:47:f3:1a:c3:b5:c0:80:11:0a:01:93:bb:
         e7:71:fb:43:be:e6:69:45:83:a3:70:f5:f5:de:89:fc:b1:fe:
         1f:8f:e7:10:d4:d1:dc:b1:10:77:1b:dc:55:33:46:26:4c:a1:
         45:72:a9:e4:b8:4d:bb:a2:c7:e1:65:a8:26:da:66:cd:17:5d:
         4e:de:81:af:e3:a2:9e:0b:be:fa:cd:71:d7:83:a5:49:cf:bd:
         45:fd:56:b5:4d:1d:41:a1:0c:3f:33:48:c9:d0:a5:ee:af:5c:
         4e:1f:c8:9e:41:5c:3f:94:f5:2e:de:06:e1:8d:b2:6c:ed:44:
         4f:32:ed:76:49:7a:08:a3:81:a5:09:e8:e7:83:30:28:a8:c8:
         2c:3d:fd:7f:f9:90:f7:f2:94:c8:05:89:18:3e:a2:3c:e8:8a:
         4d:05:4e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:52:44 2026 by rpki-client