This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e36342e302f32302d3234203d3e203236363131.roa
File:                     3139312e3135362e36342e302f32302d3234203d3e203236363131.roa (raw, json)
Hash identifier:          poPErA4RIYQXk9iObNIxBP0JuohJnt4R9tvP/hepxnc=
Subject key identifier:   BD:A0:2F:49:09:F7:A2:3E:7B:ED:6B:AF:2D:E0:E5:36:0A:25:AE:93
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       34798B91A17E3491E1C4EB1F05A5573FDB71345E
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e36342e302f32302d3234203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:02:58 +0000
ROA not before:           Tue 06 Jan 2026 18:57:58 +0000
ROA not after:            Tue 05 Jan 2027 19:02:58 +0000
asID:                     26611
IP address blocks:        191.156.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:79:8b:91:a1:7e:34:91:e1:c4:eb:1f:05:a5:57:3f:db:71:34:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:57:58 2026 GMT
            Not After : Jan  5 19:02:58 2027 GMT
        Subject: CN=BDA02F4909F7A23E7BED6BAF2DE0E5360A25AE93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:32:fd:ea:6f:ff:c3:ff:a2:28:60:89:b3:8c:
                    d1:94:a8:4e:a9:1d:6b:c6:b8:b7:74:d0:a1:ca:88:
                    b6:27:b1:df:98:c4:dc:5c:b2:69:9f:b9:ef:cb:b6:
                    6f:fe:46:e0:83:7f:d9:17:7f:03:31:9a:fc:1b:f9:
                    c2:7e:e9:44:54:69:93:36:a0:6b:ed:aa:0b:25:a7:
                    30:98:ef:48:36:90:1e:7b:bc:7c:36:09:54:97:86:
                    0c:ac:20:0d:7c:c5:67:dc:ad:b9:68:62:72:29:7f:
                    0b:a1:29:7f:0a:b7:bd:48:68:ed:c4:19:2f:ad:40:
                    34:05:26:20:fd:2f:be:53:37:61:c5:0a:c6:d0:1a:
                    cc:48:2f:b2:e4:02:59:4e:b9:65:04:af:fa:ac:5b:
                    b0:eb:3d:f8:be:8f:e6:5b:28:4d:6b:a2:ce:8f:06:
                    4d:0f:34:cc:8b:af:15:6f:ab:52:81:c2:20:a0:5d:
                    56:9c:1c:7c:9a:24:14:4d:a0:98:8b:a5:bc:76:7b:
                    64:b0:10:d0:91:31:c3:1e:01:cf:52:ef:8e:7c:35:
                    1b:01:99:bd:43:71:85:5c:6b:ee:05:e9:1e:12:6c:
                    fc:d1:b2:fd:f5:74:27:8f:57:c8:6a:05:a6:ed:8f:
                    3d:e6:e7:45:4c:55:d5:52:5e:f1:d2:e0:09:82:a3:
                    63:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A0:2F:49:09:F7:A2:3E:7B:ED:6B:AF:2D:E0:E5:36:0A:25:AE:93
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e36342e302f32302d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:3d:cc:75:11:c4:8c:07:2f:f5:62:5e:01:4c:bc:22:07:3f:
         ae:96:b4:e0:3c:ed:82:d2:8b:38:bd:02:b5:bb:2c:88:a2:85:
         e0:33:b7:70:b2:44:cb:5f:e3:6c:00:95:49:57:fe:06:5b:d6:
         fe:9c:3a:5f:0c:bc:cd:5e:b7:91:a3:10:49:dc:01:4f:3f:60:
         a3:f4:da:7f:8a:31:1e:21:eb:b0:f3:71:22:15:79:ab:d8:81:
         87:be:04:b0:71:87:97:b1:76:3f:eb:25:92:0e:3b:9b:11:5e:
         05:52:03:66:9d:54:e9:5c:d7:d4:35:66:7c:a5:58:dd:90:46:
         de:94:cd:c4:71:fd:df:67:1c:ef:0f:ba:46:96:fd:ee:03:fe:
         72:d2:7c:6b:b5:c2:16:98:94:40:27:bf:3f:b0:26:3f:04:66:
         6f:d5:b7:70:da:5a:4f:0b:0f:89:61:af:40:42:95:c6:8b:b4:
         c8:34:5c:64:e4:2c:95:67:82:fe:26:36:c1:55:02:1a:48:c0:
         2e:b7:3d:d3:0c:67:d8:5d:2b:04:74:ec:d7:34:bf:df:4a:d1:
         cc:92:c2:6c:09:68:3c:30:8c:9d:15:23:5f:61:82:5c:06:3a:
         4a:e7:72:86:ea:57:63:5b:ff:51:da:79:33:f9:e5:a1:da:fd:
         35:b5:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:10 2026 by rpki-client