This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138382e302f32342d3234203d3e203230393430.roa
File:                     3139302e39342e3138382e302f32342d3234203d3e203230393430.roa (raw, json)
Hash identifier:          il0/XFrk0xgicOaOoJjyj/ZlwsMtcDcLpdPzoVAQiUc=
Subject key identifier:   4B:8C:06:7D:B4:2A:94:89:3E:A1:10:57:B8:09:13:04:D6:29:D3:98
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       327C54E30685D72D0243417E43BEB38E9736C4B5
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138382e302f32342d3234203d3e203230393430.roa
Signing time:             Tue 06 Jan 2026 19:29:42 +0000
ROA not before:           Tue 06 Jan 2026 19:24:42 +0000
ROA not after:            Tue 05 Jan 2027 19:29:42 +0000
asID:                     20940
IP address blocks:        190.94.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7c:54:e3:06:85:d7:2d:02:43:41:7e:43:be:b3:8e:97:36:c4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Jan  6 19:24:42 2026 GMT
            Not After : Jan  5 19:29:42 2027 GMT
        Subject: CN=4B8C067DB42A94893EA11057B8091304D629D398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:bc:56:7b:97:9f:45:bf:69:41:0b:5a:dd:
                    96:88:ba:c4:8c:0f:4d:5c:54:11:a8:71:8a:98:54:
                    6f:22:89:bd:c1:2b:21:10:de:e6:a5:58:60:40:0d:
                    33:6c:35:dd:ce:ad:84:81:d6:06:da:2c:e4:46:2d:
                    6d:96:7e:a2:c2:88:f6:c7:d4:36:fd:82:41:e0:01:
                    d4:67:64:8d:0e:de:3b:79:d5:e5:44:1e:77:ad:2e:
                    62:2c:e9:be:50:7f:2a:28:89:6e:07:8e:8a:a0:cd:
                    3e:46:48:56:31:23:29:1a:5a:dc:44:c7:e4:48:e9:
                    12:0a:ec:ed:ef:2b:8a:69:9d:b0:bf:15:3e:1d:2f:
                    e7:6d:13:18:44:0f:1d:87:57:e9:85:b4:0d:ca:04:
                    1e:66:98:3b:58:5e:e6:35:48:f0:33:68:98:26:7e:
                    81:b6:b2:b6:63:6d:61:a5:6c:f2:ec:e9:aa:43:5b:
                    4d:f7:fe:4c:f1:72:aa:32:1d:98:b1:0b:35:8b:8b:
                    52:47:ab:97:0d:c1:7e:54:82:65:36:f6:e8:49:c0:
                    b3:e6:df:57:45:e4:57:00:28:43:72:50:43:ee:54:
                    42:2b:e3:3e:a3:55:68:48:ed:d3:4d:ca:da:29:44:
                    d3:b0:5a:30:9f:43:9e:6e:73:72:40:7b:93:b5:17:
                    ee:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8C:06:7D:B4:2A:94:89:3E:A1:10:57:B8:09:13:04:D6:29:D3:98
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138382e302f32342d3234203d3e203230393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:2d:ce:da:c9:e5:81:0e:9e:86:da:ea:66:ff:44:14:2c:c8:
         c0:2c:85:08:ae:df:5f:b1:f9:dc:8a:92:c5:56:e6:fb:39:8a:
         c0:75:f8:c0:b6:f0:33:cd:be:01:6c:58:e5:bb:9e:1e:7d:a7:
         e0:20:77:54:53:b9:44:03:df:9e:77:af:0b:30:87:f7:1c:bc:
         5f:90:29:6f:44:bf:4c:b6:32:af:9b:a5:b2:0f:65:5d:f0:f2:
         61:1d:ec:71:1c:51:ef:74:92:49:b0:7d:c4:fb:48:03:7d:73:
         b2:08:34:67:6d:12:1e:68:91:c1:91:e3:f7:09:c3:b0:34:db:
         eb:b2:03:c9:cd:48:c0:97:0f:fe:d1:72:9e:ee:a8:61:1f:c0:
         99:d2:f4:86:ce:3f:94:6b:d3:e6:5f:83:40:c1:e7:c8:d0:aa:
         e9:61:1b:ea:11:08:69:bb:32:83:18:df:2c:bf:4b:d7:d7:6b:
         f6:c7:55:18:8a:e0:ab:8d:8b:ff:11:04:08:02:65:e1:ba:38:
         53:73:79:a6:a0:8f:c4:ca:b5:5f:cb:48:41:29:54:ae:8a:9d:
         f2:ac:40:93:68:2f:66:59:69:1c:0d:71:7e:20:be:5a:34:1b:
         df:db:14:d9:7f:01:a2:ba:54:02:ca:22:26:bb:4b:0f:57:fd:
         90:81:8b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:33:27 2026 by rpki-client