This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3136203d3e203236363131.roa
File:                     3139302e3234332e302e302f31362d3136203d3e203236363131.roa (raw, json)
Hash identifier:          +3Fom00m8ahX7kErKV+AjENTMEST6+yPWy+k6VV54u8=
Subject key identifier:   D9:1E:C0:C2:D6:01:D0:9D:8D:37:4E:25:93:48:72:25:2F:5A:A6:73
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       68C135929E20B3EF4BE851944AA8CD1A72861DE4
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3136203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:03:12 +0000
ROA not before:           Tue 06 Jan 2026 18:58:12 +0000
ROA not after:            Tue 05 Jan 2027 19:03:12 +0000
asID:                     26611
IP address blocks:        190.243.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c1:35:92:9e:20:b3:ef:4b:e8:51:94:4a:a8:cd:1a:72:86:1d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:12 2026 GMT
            Not After : Jan  5 19:03:12 2027 GMT
        Subject: CN=D91EC0C2D601D09D8D374E25934872252F5AA673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:17:7e:b4:3b:b2:da:5c:3a:70:76:5b:a4:
                    a8:be:0d:25:3a:00:53:02:22:17:5f:07:e1:f3:20:
                    1b:9b:c6:13:a0:b4:b7:5b:2b:09:99:e5:97:48:bc:
                    0f:f9:22:1a:8b:a3:fe:20:af:38:9d:2a:e2:b4:c5:
                    f6:45:e6:1b:58:73:9d:1c:ce:b8:e7:b6:a3:30:73:
                    d6:9b:a4:11:09:03:b8:4e:02:ca:31:6f:fa:ea:43:
                    15:3e:ce:0a:23:de:88:b6:6d:f1:19:f8:70:d9:0d:
                    71:7e:7a:be:60:9a:5e:df:b2:14:06:f6:b1:5e:ee:
                    79:22:4c:32:88:e8:9f:91:36:56:32:47:f7:e1:dd:
                    1f:10:3f:31:af:d4:76:46:da:fb:59:11:5a:d8:a2:
                    0f:9c:3a:31:e9:da:5d:12:9c:b3:2d:b7:c1:1d:93:
                    ed:c4:6e:29:30:7b:37:c4:d0:7b:67:ab:9b:4a:20:
                    84:2d:3f:eb:10:52:7e:f5:1a:16:a1:da:a5:9d:7a:
                    fb:63:3b:fc:07:bd:9f:4f:fc:69:83:17:34:13:fa:
                    15:3b:7c:e0:99:1d:a5:8e:fb:53:0a:70:42:ad:5f:
                    09:e5:f6:7d:58:be:19:65:b9:e6:e2:f6:fe:66:01:
                    e2:9c:30:1a:44:bd:a0:11:a5:38:94:8b:7c:72:27:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1E:C0:C2:D6:01:D0:9D:8D:37:4E:25:93:48:72:25:2F:5A:A6:73
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3136203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:af:37:a3:6e:e1:40:19:92:aa:b4:4d:19:47:6f:d1:01:fe:
         4c:70:76:15:a4:3d:7a:89:f3:83:93:c4:a9:66:96:23:40:46:
         ed:eb:42:05:8d:ad:fa:82:4b:f0:1d:dd:57:26:a1:cb:21:4c:
         4a:60:55:43:a1:20:90:6d:58:22:bd:cc:5e:1d:97:10:f0:5f:
         60:40:f1:83:7c:97:d5:b7:ac:f4:c5:d6:0c:e3:2a:0d:cd:68:
         88:d2:ba:2c:3a:27:dd:24:5b:74:ec:84:8a:f5:c2:2d:d9:6c:
         86:0d:27:7a:2a:d3:b4:51:ca:8f:0c:d7:9b:fe:27:7c:d6:ad:
         50:d1:7b:6d:e5:7b:56:1a:dd:33:aa:fa:2a:94:a4:7b:c3:7c:
         9a:d8:c8:73:b0:62:49:66:eb:6f:dd:e6:f0:ee:69:81:55:38:
         b4:7b:83:9a:37:c9:82:fc:fe:97:72:d3:8d:c1:e5:59:89:5e:
         11:86:69:92:6b:11:76:e9:74:82:31:fe:8f:c4:20:3e:a7:88:
         0f:e8:49:c9:ee:9f:b8:28:c3:62:ea:ff:86:17:1a:34:17:37:
         ec:e9:c8:9c:5b:27:53:b2:64:d1:fd:db:3d:00:c1:04:e5:f1:
         c6:fc:86:ab:a8:30:7e:66:04:39:83:cf:a9:fe:8a:95:9c:b0:
         f9:2a:b3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:09 2026 by rpki-client