This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3139302e34302e302e302f31342d3234203d3e2036313437.roa
File:                     3139302e34302e302e302f31342d3234203d3e2036313437.roa (raw, json)
Hash identifier:          jjLoPhW7w1xdbLJGALW8CBgov96OGln7B1AHavzOMSM=
Subject key identifier:   5D:0D:78:3A:C1:C2:AB:AF:5F:16:4E:5A:81:79:3A:E7:73:73:CA:BB
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       14412CDE6FB2C52B230507614E7A933065C67544
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3139302e34302e302e302f31342d3234203d3e2036313437.roa
Signing time:             Tue 06 Jan 2026 20:56:02 +0000
ROA not before:           Tue 06 Jan 2026 20:51:02 +0000
ROA not after:            Tue 05 Jan 2027 20:56:02 +0000
asID:                     6147
IP address blocks:        190.40.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:41:2c:de:6f:b2:c5:2b:23:05:07:61:4e:7a:93:30:65:c6:75:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Jan  6 20:51:02 2026 GMT
            Not After : Jan  5 20:56:02 2027 GMT
        Subject: CN=5D0D783AC1C2ABAF5F164E5A81793AE77373CABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2e:79:9c:86:b1:ee:de:95:b8:bd:4e:30:78:
                    0a:1a:8c:46:21:90:ff:7e:08:42:1c:d9:8f:52:21:
                    40:ae:47:c3:9b:45:7a:83:63:36:b9:3d:ae:eb:10:
                    20:20:96:cd:9c:91:4d:15:a2:75:85:80:04:ce:84:
                    25:b3:9d:d8:e9:82:73:27:13:27:4e:9e:99:c4:36:
                    f6:a7:6b:be:e4:a5:6b:82:13:94:68:17:e8:e5:68:
                    9a:3e:eb:0b:78:83:68:02:86:39:0a:a6:87:ae:39:
                    1f:28:18:19:74:09:9b:ff:d4:bd:c3:d2:f4:73:f1:
                    bd:07:99:91:d6:4f:12:2f:6c:86:74:04:02:81:1a:
                    40:76:30:f6:35:33:8c:58:9a:83:cf:96:02:4a:5d:
                    ab:46:2f:cb:be:93:57:56:bb:c1:7e:87:0f:87:c5:
                    ff:4b:df:9a:6c:49:60:84:14:b6:b0:dc:a3:71:7c:
                    c2:bd:8b:1a:01:10:7c:f1:15:de:e9:68:0f:53:d7:
                    00:47:a8:24:dc:32:e8:b7:50:6a:4d:f3:75:85:88:
                    e6:86:38:63:d8:1d:42:8a:4d:eb:02:9f:8d:a5:5c:
                    4e:ab:91:bf:2c:a6:d9:2c:a9:d7:b9:2f:6d:43:b8:
                    3f:06:bb:32:85:c2:36:d5:e7:c5:11:2f:e0:f7:37:
                    e0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0D:78:3A:C1:C2:AB:AF:5F:16:4E:5A:81:79:3A:E7:73:73:CA:BB
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3139302e34302e302e302f31342d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.40.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         21:3f:49:df:ee:0b:70:b4:25:00:2f:df:de:84:fa:5e:61:8e:
         0d:45:1c:57:ce:26:a1:e0:db:0c:09:9d:43:73:44:9f:93:67:
         56:04:3c:bf:54:6c:63:db:73:c9:af:ba:2d:7b:6f:3a:69:44:
         a7:97:55:2c:fb:50:8e:62:a9:3b:ed:fb:79:ee:ae:78:8d:3c:
         62:8c:25:06:e6:97:05:2e:41:d2:36:74:e7:33:6b:c1:0f:e0:
         6f:5d:a6:c6:28:87:02:06:86:2c:28:d9:a8:b9:ef:14:dc:a1:
         74:32:46:30:3d:e5:c1:b0:a3:db:d7:ae:45:3a:eb:4d:12:06:
         ed:ed:a2:6b:d4:6b:9c:15:46:be:25:c5:29:3b:79:97:5f:a1:
         63:7b:45:d7:b8:a6:af:c9:22:58:79:7d:e2:0e:06:d4:45:67:
         7b:e8:4c:37:54:25:b3:3e:20:42:cf:a2:e2:1c:30:3f:7b:d5:
         9e:7c:a5:f3:1d:26:fe:5f:78:c4:b1:31:8c:7f:b4:42:49:29:
         93:ef:40:1b:0a:40:f3:2d:4c:66:5f:b0:5c:17:10:e4:22:c7:
         6d:ed:c2:91:12:ee:73:fd:b1:cc:d6:7d:0a:c4:9c:f2:0d:0a:
         75:1c:6a:12:75:b3:75:e2:1e:e2:e9:c6:72:8d:21:56:a6:c5:
         75:29:d5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:28 2026 by rpki-client