This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131322e302f32322d3234203d3e20323632313832.roa
File:                     3139302e35322e3131322e302f32322d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          Bb/IzTJCRF8fkMY8VDMhaHTBd14P/wQrXL3HGluxqOM=
Subject key identifier:   58:4A:0E:F2:34:5E:5F:B2:74:13:B2:26:28:25:F3:0B:BA:13:90:83
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       0DB20E60DE3EE7EDD64F402F1496096116F858EE
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131322e302f32322d3234203d3e20323632313832.roa
Signing time:             Mon 12 Jan 2026 21:00:05 +0000
ROA not before:           Mon 12 Jan 2026 20:55:05 +0000
ROA not after:            Mon 11 Jan 2027 21:00:05 +0000
asID:                     262182
IP address blocks:        190.52.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b2:0e:60:de:3e:e7:ed:d6:4f:40:2f:14:96:09:61:16:f8:58:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Jan 12 20:55:05 2026 GMT
            Not After : Jan 11 21:00:05 2027 GMT
        Subject: CN=584A0EF2345E5FB27413B2262825F30BBA139083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e8:43:f5:fb:5b:8b:e0:f5:ea:5f:35:64:e6:
                    cb:b2:61:cc:98:47:36:77:ed:64:39:5a:7c:b8:ea:
                    0b:63:d6:c7:b5:de:b8:5b:2b:c1:cb:b2:6a:86:01:
                    e0:4c:0b:5a:9f:88:75:f4:2f:34:13:be:5f:84:45:
                    d3:0f:35:12:57:0f:84:32:ee:7a:94:7d:1b:17:8a:
                    bb:17:2a:2a:a7:19:ed:5c:41:a3:d8:4e:b0:e7:95:
                    86:a9:cd:e8:bb:97:94:03:ec:a4:62:30:31:7f:08:
                    32:56:7f:3b:16:9a:50:75:80:67:58:e2:53:d2:ee:
                    51:3d:5b:20:f9:95:03:a1:a3:9f:04:f2:ae:af:f9:
                    c0:bb:2e:eb:de:38:ff:36:f4:a8:5c:47:a6:ab:fd:
                    ee:80:7b:d4:76:fe:14:81:4b:b9:95:11:94:04:b0:
                    4c:8a:bd:fb:04:2e:e9:99:96:81:6d:b0:34:f6:7b:
                    49:fe:5c:5c:51:5c:08:eb:fb:5f:f2:6f:cb:da:cd:
                    03:2f:2d:41:61:d6:97:f7:4d:ea:bd:f5:95:f9:d2:
                    ca:46:19:2f:df:50:98:68:52:a7:19:be:d3:d6:ba:
                    f9:eb:7b:02:34:a8:58:89:ad:23:9e:66:e9:97:ac:
                    cd:eb:36:51:be:38:9d:57:09:27:3d:51:1b:db:76:
                    0e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4A:0E:F2:34:5E:5F:B2:74:13:B2:26:28:25:F3:0B:BA:13:90:83
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131322e302f32322d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:d6:6f:86:d5:d9:11:9a:ef:6e:93:a9:16:33:0b:61:57:60:
         93:3e:94:23:d9:dc:97:e6:94:4d:2c:09:54:20:87:5d:03:36:
         ec:9e:88:ce:d1:3f:96:0e:c3:ac:4c:22:69:42:6f:05:96:8b:
         6f:bc:58:8d:71:ab:f6:29:82:58:2b:34:ff:56:76:1e:1b:97:
         fd:59:f0:87:34:aa:c2:ed:5d:df:95:89:05:c2:12:d0:1c:55:
         53:22:02:73:70:d1:aa:90:f7:d5:b0:b7:c6:f5:9b:08:b8:48:
         a2:22:9d:6c:45:5b:ea:d9:db:80:51:ad:02:11:a5:e9:c3:30:
         4d:82:db:b3:2c:83:2e:4a:a7:6d:6b:8e:35:51:36:71:fc:12:
         1c:63:01:51:a8:ef:95:77:dd:dd:67:71:10:30:be:1a:0c:46:
         72:62:43:74:7e:83:88:7a:46:e1:d5:ee:45:09:fd:90:25:e5:
         e8:83:4a:78:5c:80:63:cb:d0:02:35:38:c0:16:bb:f7:90:65:
         86:0f:d7:06:e9:02:59:b4:25:8c:b0:36:42:7a:b4:c2:4f:17:
         8a:29:13:a1:a4:98:7c:dd:31:02:13:28:53:5d:93:a9:46:34:
         5f:70:6e:04:88:89:0e:30:12:7c:0e:5d:35:92:77:e3:84:fc:
         72:24:1f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:34 2026 by rpki-client