This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3231203d3e203236363131.roa
File:                     3139302e3132372e3232342e302f32312d3231203d3e203236363131.roa (raw, json)
Hash identifier:          y9cjspJs8dgXKB8yAsjnir0re0xAaGAF2WYlmMiZcNI=
Subject key identifier:   B7:FA:8D:96:8B:3C:7F:8C:5D:32:FA:20:60:04:2E:0D:DC:02:65:49
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       3B1D2D44488A08217B700DF12FCC6892DF636982
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3231203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:03:13 +0000
ROA not before:           Tue 06 Jan 2026 18:58:13 +0000
ROA not after:            Tue 05 Jan 2027 19:03:13 +0000
asID:                     26611
IP address blocks:        190.127.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1d:2d:44:48:8a:08:21:7b:70:0d:f1:2f:cc:68:92:df:63:69:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:13 2026 GMT
            Not After : Jan  5 19:03:13 2027 GMT
        Subject: CN=B7FA8D968B3C7F8C5D32FA2060042E0DDC026549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:bf:4d:7b:de:5a:cd:92:0e:33:db:f3:89:
                    1d:b3:d8:1c:3d:00:b3:f7:b4:eb:92:fd:dc:5e:c5:
                    47:2b:e6:76:ca:63:77:f0:b3:19:bb:6e:f8:a4:a1:
                    e9:e4:c1:b9:36:80:d3:3a:68:dc:d0:b3:62:42:6b:
                    79:b6:11:c3:ed:67:18:e1:bb:4f:11:9e:00:86:1b:
                    4a:cf:c6:d8:52:2c:c1:d7:25:47:0a:03:d8:f1:63:
                    7a:1d:cf:5b:f4:e4:6a:89:0d:39:27:53:53:35:31:
                    c8:ca:02:c8:17:c2:64:92:1a:2a:69:46:19:d3:d0:
                    f9:2f:09:75:3d:cd:5a:ab:d6:7a:d4:d9:3c:c2:00:
                    52:0d:7e:09:18:56:b3:37:02:f5:22:34:03:3a:1b:
                    5f:55:53:ac:85:c0:3d:ae:93:5d:72:d6:3e:61:b2:
                    f0:16:6b:12:04:87:78:92:6b:ca:5e:22:71:31:12:
                    95:cf:ee:19:f1:c9:f1:b3:fd:d8:a8:ed:8e:06:a2:
                    37:a4:f0:0d:5c:ce:fe:57:72:52:71:c3:c3:f9:9d:
                    17:7b:e0:fe:63:0d:37:5c:71:20:0b:5e:01:4d:55:
                    0f:e7:d3:9d:f4:bc:05:20:aa:9c:b4:f3:d1:e7:26:
                    46:aa:f6:a2:c0:67:66:1f:f0:c1:3c:4b:a1:e4:fd:
                    c0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FA:8D:96:8B:3C:7F:8C:5D:32:FA:20:60:04:2E:0D:DC:02:65:49
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3231203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:6b:29:9c:84:41:c0:d8:8b:9e:83:b3:27:20:dd:61:d9:af:
         72:3d:8c:56:00:d0:e9:a0:3a:ef:4f:6e:a0:4a:c7:5c:b8:45:
         a6:52:02:7a:0d:26:82:a5:e8:1a:59:c7:9e:14:63:50:97:c2:
         64:1f:35:cf:77:72:3d:68:77:93:60:83:06:d0:5f:2b:40:96:
         75:c8:95:39:61:22:19:ae:3b:15:f8:29:4a:81:a8:6d:1e:64:
         57:b7:6a:de:90:82:2c:10:29:c9:16:f3:c3:a6:b5:4f:e4:50:
         b1:63:73:cd:3a:b8:46:61:2b:6f:a8:28:42:09:27:9a:47:e3:
         ed:12:31:f0:90:8a:97:b4:d3:78:b4:dd:af:ac:7f:62:01:a2:
         fc:54:da:95:fa:6e:48:90:a7:cc:8e:cc:8d:7e:b2:8d:80:9f:
         18:0f:c3:28:86:22:92:fc:dd:6e:3e:3d:21:c5:95:b1:08:9d:
         89:ee:b6:a9:31:bc:e5:36:81:9f:af:9e:b4:0f:62:d5:23:f6:
         4c:ae:9c:4e:60:4a:71:ca:04:23:41:ab:23:b4:b9:bc:3a:74:
         cd:a8:74:ec:46:1d:02:35:5f:ae:d8:52:89:fd:4a:98:d9:06:
         f6:36:a1:66:d5:95:01:9c:03:94:45:a1:34:a5:f4:6e:e2:ff:
         01:31:c4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:59 2026 by rpki-client