This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e31362e302f32342d3234203d3e203236363131.roa
File:                     3139312e3135362e31362e302f32342d3234203d3e203236363131.roa (raw, json)
Hash identifier:          X4zSsw0Xz8yga73bJ/gjO9lLjCNjBOm0pVkTUUSRgxk=
Subject key identifier:   16:21:74:82:52:53:C2:88:77:E9:DC:4C:10:13:E4:BD:71:6E:27:B8
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       264E80FC501AFDA997FD9DD5CC9BFE63D06C7F3C
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e31362e302f32342d3234203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:03:06 +0000
ROA not before:           Tue 06 Jan 2026 18:58:06 +0000
ROA not after:            Tue 05 Jan 2027 19:03:06 +0000
asID:                     26611
IP address blocks:        191.156.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4e:80:fc:50:1a:fd:a9:97:fd:9d:d5:cc:9b:fe:63:d0:6c:7f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:06 2026 GMT
            Not After : Jan  5 19:03:06 2027 GMT
        Subject: CN=162174825253C28877E9DC4C1013E4BD716E27B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6b:df:e7:87:23:f2:37:cf:fc:93:12:b7:85:
                    8d:d9:28:0b:29:89:c3:9f:fd:bf:94:ab:fa:34:db:
                    62:f8:29:7e:52:95:67:f8:21:04:d8:d3:1b:eb:42:
                    46:5e:26:e2:6b:6b:d7:49:9d:be:3a:ac:61:65:74:
                    f4:92:6f:ac:3f:f6:d4:61:9a:10:8d:e2:c7:ae:f8:
                    b6:91:b9:27:b5:6d:86:ab:7a:b1:67:89:cb:b8:9c:
                    1e:07:9d:17:45:61:20:4f:16:6a:cf:3f:64:9f:55:
                    94:88:69:50:15:98:92:8b:fa:61:81:82:a7:7b:60:
                    f3:5a:cc:87:d6:ec:01:8d:8a:7c:f7:93:55:af:84:
                    e6:7d:0d:fd:3b:72:08:2a:d2:87:13:67:bc:84:66:
                    94:94:a1:35:7c:6d:93:04:78:92:5a:aa:09:6f:95:
                    cc:e7:9b:01:c1:1b:59:2e:23:dc:ab:5f:01:fa:a3:
                    1b:ae:6c:87:d9:7f:d3:79:d1:05:90:7f:8a:4c:a7:
                    ca:0d:61:3b:f7:b2:80:3f:14:b8:cb:44:37:39:f9:
                    62:34:b7:74:47:91:8a:c0:a6:9c:7a:61:9e:50:ac:
                    d3:14:3e:fe:84:68:02:2e:94:5a:7f:f7:3e:02:36:
                    0d:13:12:1f:e8:7f:7a:e7:48:e4:a8:c4:84:0c:6b:
                    45:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:21:74:82:52:53:C2:88:77:E9:DC:4C:10:13:E4:BD:71:6E:27:B8
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e31362e302f32342d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:73:86:b4:63:d1:3b:b4:34:b8:d3:05:74:2f:6a:7a:be:10:
         eb:fd:9e:8c:02:3c:4e:8c:b7:20:87:53:e6:d0:26:b3:ba:13:
         da:46:7d:ce:2a:24:73:7c:30:df:59:e3:ff:30:7a:3c:1f:fe:
         c0:e1:03:10:c6:ee:aa:a6:76:5c:89:39:79:ca:8b:35:0f:75:
         6e:ab:0a:68:d5:42:29:c5:b4:09:5e:e6:ef:69:72:a6:67:1e:
         04:4d:2c:ce:5e:d9:04:2b:36:c2:9d:d6:7e:1c:2b:f6:29:7f:
         de:c1:96:54:d3:d8:81:37:49:2f:b4:09:6c:db:9b:b8:8b:b5:
         c7:85:2a:8b:ff:ac:6b:8e:27:a8:1d:7e:df:48:f7:79:d4:5c:
         10:3e:38:0a:15:07:6a:3a:77:a7:53:e6:47:50:b1:0c:d9:03:
         4e:6d:49:1a:8a:ac:2b:fb:20:4c:77:c6:5d:71:b1:92:26:f4:
         85:5b:3c:9f:c1:22:f4:2b:c0:88:77:a4:c2:3e:e3:48:1b:d8:
         0c:4a:ad:a3:cb:22:bd:25:da:ec:0a:d1:f2:7c:e9:40:6e:2f:
         53:bf:d1:69:1c:21:d8:ba:56:56:03:76:b2:ad:f6:88:34:59:
         41:6f:53:b6:fe:68:63:7c:bc:8b:6d:8d:f4:d2:86:42:19:94:
         77:ba:2a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:28 2026 by rpki-client