This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3139302e35322e33322e302f32312d3234203d3e203532333132.roa
File:                     3139302e35322e33322e302f32312d3234203d3e203532333132.roa (raw, json)
Hash identifier:          tSaYtkt9m4oNmf73a1PH+GKbzP8dirYxb8ibKdJw3tY=
Subject key identifier:   CA:95:0A:91:A5:1C:61:9A:FC:C3:DD:BD:38:2B:96:A9:76:CE:7D:93
Certificate issuer:       /CN=46B816F254BE102454BE2E382FEA14873A13755C
Certificate serial:       6063C7DD075DB5D482BEAEDDE7C4203763855BFA
Authority key identifier: 46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3139302e35322e33322e302f32312d3234203d3e203532333132.roa
Signing time:             Tue 06 Jan 2026 19:11:39 +0000
ROA not before:           Tue 06 Jan 2026 19:06:39 +0000
ROA not after:            Tue 05 Jan 2027 19:11:39 +0000
asID:                     52312
IP address blocks:        190.52.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:63:c7:dd:07:5d:b5:d4:82:be:ae:dd:e7:c4:20:37:63:85:5b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B816F254BE102454BE2E382FEA14873A13755C
        Validity
            Not Before: Jan  6 19:06:39 2026 GMT
            Not After : Jan  5 19:11:39 2027 GMT
        Subject: CN=CA950A91A51C619AFCC3DDBD382B96A976CE7D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:96:10:93:3a:40:6f:71:f6:a0:54:9b:08:
                    31:d7:df:18:75:cc:2f:33:f7:78:bd:c2:ba:23:21:
                    89:ba:8a:7c:48:70:fa:22:99:c4:4b:08:95:ec:c5:
                    a2:8b:91:e8:af:a3:34:42:b9:81:3a:15:0c:b0:6c:
                    c8:fa:e3:e7:0f:a8:d8:f1:b4:a1:3f:6f:9b:9e:fe:
                    c8:7c:c1:15:65:93:13:e8:e4:e5:a3:a0:40:40:c9:
                    aa:ed:bf:7c:49:a0:8d:eb:fa:f4:29:57:af:39:3b:
                    43:37:81:cf:39:5a:5a:92:cc:d7:6f:50:d9:ac:69:
                    db:f0:78:ce:3f:e7:ff:eb:bb:e3:05:52:ae:14:4d:
                    0f:e8:86:50:4f:ef:a5:10:8f:be:85:59:87:c1:a0:
                    a6:c7:28:32:ef:eb:90:00:00:ff:ce:6c:e3:9a:3d:
                    a9:4d:8e:88:7f:8c:89:95:df:e2:49:81:31:1f:88:
                    d3:e2:72:2e:e7:87:0a:2d:cb:2c:85:3d:69:63:8e:
                    c7:4e:c0:be:96:18:db:fe:0c:d1:db:53:ee:39:7e:
                    3a:66:da:94:3c:6d:d4:e6:ef:78:28:e9:b3:b5:38:
                    e8:d5:37:9f:9d:dd:b7:15:30:ab:7b:64:26:fa:73:
                    92:94:fc:87:7b:86:2b:f4:c3:5d:fa:f2:7c:20:72:
                    11:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:95:0A:91:A5:1C:61:9A:FC:C3:DD:BD:38:2B:96:A9:76:CE:7D:93
            X509v3 Authority Key Identifier:
                keyid:46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3139302e35322e33322e302f32312d3234203d3e203532333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:b2:54:83:bc:5f:63:e3:ab:ca:dc:b3:92:78:2d:01:89:31:
         39:b5:f3:40:63:68:ce:0e:bb:79:d4:01:d5:5f:62:8d:41:94:
         4e:71:68:41:13:6c:00:ec:8d:8a:9a:ed:26:e2:10:a3:90:ae:
         eb:a0:63:e0:a3:2b:00:72:d2:d9:29:b5:1c:8f:93:c5:f6:e0:
         a8:ff:36:1c:35:62:3c:16:95:72:dc:69:27:e4:52:45:c8:dd:
         51:18:fd:ff:aa:8f:c3:ce:c3:59:37:b7:fa:1a:b7:8e:c7:87:
         02:2d:2a:c2:89:a9:bf:ca:1f:9f:d8:71:30:a5:19:68:17:78:
         67:61:03:92:b0:bf:ef:e9:95:bb:e9:fc:f7:d1:26:be:b6:29:
         af:58:77:c8:c7:99:50:fc:5f:19:fc:1e:3c:22:35:73:9e:4f:
         fa:18:e8:58:dc:b7:5a:f6:35:ff:e0:de:43:ce:97:06:bf:3a:
         18:5a:dc:be:5d:04:95:1d:7c:52:15:ab:76:f1:be:28:b7:3e:
         41:81:86:0b:ca:54:f4:55:d7:3e:37:93:79:42:53:be:fe:14:
         f6:89:f3:12:b2:e4:83:14:c4:41:f3:c1:22:17:70:bb:bc:c4:
         27:d4:04:9b:57:4c:0e:b9:83:b4:51:54:d9:14:4a:0f:a4:ab:
         c9:eb:f2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:06:54 2026 by rpki-client