This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e36342e302f31382d3234203d3e203236363131.roa
File:                     3139302e3133302e36342e302f31382d3234203d3e203236363131.roa (raw, json)
Hash identifier:          IDbio5AUbFSXTgnkx31fSOvbkeBOhSxN481z3tXJZyI=
Subject key identifier:   F1:FD:11:15:32:B7:89:C5:11:52:72:76:92:F9:AE:CA:E9:A6:70:E3
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       756AE8380F206BC8C468282070E6C3EADCE5FB8D
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e36342e302f31382d3234203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:03:11 +0000
ROA not before:           Tue 06 Jan 2026 18:58:11 +0000
ROA not after:            Tue 05 Jan 2027 19:03:11 +0000
asID:                     26611
IP address blocks:        190.130.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6a:e8:38:0f:20:6b:c8:c4:68:28:20:70:e6:c3:ea:dc:e5:fb:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:11 2026 GMT
            Not After : Jan  5 19:03:11 2027 GMT
        Subject: CN=F1FD111532B789C51152727692F9AECAE9A670E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:b1:7f:3b:b5:fd:dc:c1:2c:e8:ab:70:b9:
                    ff:6b:a3:70:be:81:dd:24:dd:4c:ca:77:a2:15:14:
                    1d:f9:45:a5:bf:6c:57:a8:f0:58:9f:b3:8b:01:71:
                    bf:c1:f2:c4:a5:bb:61:90:1c:31:1e:67:85:84:28:
                    34:b4:ce:00:8e:94:3a:92:f7:9e:e0:ca:67:5e:46:
                    fe:e4:fb:a0:92:2a:77:6e:f8:6c:16:88:42:ba:7f:
                    d1:c0:3d:f3:61:da:a4:3a:54:09:90:f5:81:eb:8e:
                    8d:f7:56:77:e5:d8:72:a6:78:8c:71:a3:f2:43:47:
                    43:26:b2:31:df:2b:f2:cb:9b:9c:22:ef:5e:df:af:
                    9d:47:ea:5d:b6:a8:4d:bb:f1:f0:ff:58:7e:95:66:
                    84:69:cf:80:7f:72:db:35:84:77:a7:02:48:f7:42:
                    7b:bf:ec:ad:77:08:0d:36:be:5c:73:53:16:bb:be:
                    2c:a6:94:dd:0d:21:af:e2:c1:64:ee:c7:11:86:2c:
                    c5:68:53:80:db:b1:80:da:4b:bc:57:6b:c0:2d:60:
                    4b:74:2d:46:9a:aa:6b:2c:70:06:22:bd:99:c4:d3:
                    68:ec:2b:8d:8b:f4:0e:55:e6:4d:72:41:41:9b:e3:
                    dc:2f:28:68:ab:6c:c0:3e:47:2b:09:69:1b:b9:4f:
                    2e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FD:11:15:32:B7:89:C5:11:52:72:76:92:F9:AE:CA:E9:A6:70:E3
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e36342e302f31382d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.130.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         99:0e:c7:64:09:b7:a4:dc:a9:a6:b4:54:62:dc:99:29:b0:df:
         af:ea:6a:c1:71:de:2d:b4:98:a0:5f:62:40:1a:46:28:51:e0:
         73:b0:2e:da:2a:e2:04:88:dc:29:f5:52:28:a8:c4:01:73:21:
         b9:8c:d6:7a:3d:71:b3:2d:6b:c5:36:9c:b4:31:6c:f7:b6:43:
         6e:89:8c:09:0c:c9:c7:db:15:65:fc:1f:3e:82:d8:dc:08:45:
         be:94:e8:81:b0:68:8f:69:ef:4c:48:0a:94:ff:c2:aa:0a:80:
         c5:9f:22:0e:1d:ef:1d:db:97:24:56:19:ec:f2:67:08:9c:76:
         6e:e4:7d:22:48:40:f5:88:82:e2:27:f9:a0:24:3b:5f:c4:31:
         51:04:32:c4:73:a1:72:24:a5:c9:41:70:e5:ef:4e:ae:f0:7e:
         29:6c:37:89:5f:17:40:4d:9b:43:ff:90:b6:e3:3e:7b:e7:ee:
         df:15:4a:29:8f:f4:9b:aa:09:40:35:3d:06:0f:05:a8:60:45:
         ba:f8:de:e7:5b:b8:54:7c:ba:d3:75:2e:05:e7:cb:41:a1:7c:
         5d:03:05:fe:61:12:0f:73:a5:d9:9a:18:cf:a4:c0:b5:fb:a6:
         0c:a5:c5:b3:8c:49:9a:e7:49:a2:fe:4e:df:49:d9:fd:fc:39:
         1a:3f:ff:6b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdWroOA8ga8jEaCggcObD6tzl+40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNjAxMDYxODU4MTFaFw0yNzAxMDUxOTAzMTFaMDMxMTAvBgNV
BAMTKEYxRkQxMTE1MzJCNzg5QzUxMTUyNzI3NjkyRjlBRUNBRTlBNjcwRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgbF/O7X93MEs6Ktwuf9ro3C+
gd0k3UzKd6IVFB35RaW/bFeo8Fifs4sBcb/B8sSlu2GQHDEeZ4WEKDS0zgCOlDqS
957gymdeRv7k+6CSKndu+GwWiEK6f9HAPfNh2qQ6VAmQ9YHrjo33Vnfl2HKmeIxx
o/JDR0MmsjHfK/LLm5wi717fr51H6l22qE278fD/WH6VZoRpz4B/cts1hHenAkj3
Qnu/7K13CA02vlxzUxa7viymlN0NIa/iwWTuxxGGLMVoU4DbsYDaS7xXa8AtYEt0
LUaaqmsscAYivZnE02jsK42L9A5V5k1yQUGb49wvKGirbMA+RysJaRu5Ty4/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU8f0RFTK3icURUnJ2kvmuyummcOMwHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMDJlMzEzMzMwMmUzNjM0MmUz
MDJmMzEzODJkMzIzNDIwM2QzZTIwMzIzNjM2MzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBr6CQDAN
BgkqhkiG9w0BAQsFAAOCAQEAmQ7HZAm3pNypprRUYtyZKbDfr+pqwXHeLbSYoF9i
QBpGKFHgc7Au2iriBIjcKfVSKKjEAXMhuYzWej1xsy1rxTactDFs97ZDbomMCQzJ
x9sVZfwfPoLY3AhFvpTogbBoj2nvTEgKlP/CqgqAxZ8iDh3vHduXJFYZ7PJnCJx2
buR9IkhA9YiC4if5oCQ7X8QxUQQyxHOhciSlyUFw5e9OrvB+KWw3iV8XQE2bQ/+Q
tuM+e+fu3xVKKY/0m6oJQDU9Bg8FqGBFuvje51u4VHy603UuBefLQaF8XQMF/mES
D3Ol2ZoYz6TAtfumDKXFs4xJmudJov5O30nZ/fw5Gj//aw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:43 2026 by rpki-client