This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e372e3132382e302f31392d3139203d3e203133343839.roa
File:                     3139302e372e3132382e302f31392d3139203d3e203133343839.roa (raw, json)
Hash identifier:          PeZYfCl1GACu8bIYk/2lVsHIyHk2K/My54PB+78OoWs=
Subject key identifier:   7B:7B:DB:C8:88:52:80:D2:EC:4A:E9:E8:98:9C:B7:68:1F:70:94:56
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       4EB616EAB9436EB74DBF936166FFE82831AB9704
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e372e3132382e302f31392d3139203d3e203133343839.roa
Signing time:             Tue 06 Jan 2026 19:27:48 +0000
ROA not before:           Tue 06 Jan 2026 19:22:48 +0000
ROA not after:            Tue 05 Jan 2027 19:27:48 +0000
asID:                     13489
IP address blocks:        190.7.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b6:16:ea:b9:43:6e:b7:4d:bf:93:61:66:ff:e8:28:31:ab:97:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Jan  6 19:22:48 2026 GMT
            Not After : Jan  5 19:27:48 2027 GMT
        Subject: CN=7B7BDBC8885280D2EC4AE9E8989CB7681F709456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:78:24:b8:95:be:f6:95:88:57:69:12:50:38:
                    eb:b5:9a:55:b5:56:b9:5b:67:92:17:3d:3c:b6:a5:
                    d5:10:25:8e:6f:1b:19:fb:47:c7:6a:e9:07:06:46:
                    80:9f:72:7d:d1:c8:b9:c8:d3:15:38:4d:20:14:a0:
                    4c:d9:00:e8:68:90:76:19:90:3b:76:e7:a4:3b:97:
                    03:89:7d:15:b6:9b:71:db:47:e4:dc:37:ce:7e:26:
                    0f:55:72:c7:43:49:81:09:2a:16:59:02:19:b5:d5:
                    f2:c8:c7:a7:68:83:fb:95:f6:f2:bc:24:72:53:bf:
                    b1:89:ac:7c:fb:4a:c1:3e:ac:f5:06:5d:0c:b0:d0:
                    17:ff:f2:ba:fe:42:18:71:88:ca:27:50:cd:60:eb:
                    fa:50:59:e9:e6:40:79:fd:d8:ca:91:c3:18:df:c3:
                    1e:b7:f5:52:ae:61:df:cd:c1:75:59:be:39:55:69:
                    69:4e:e1:37:97:e7:ba:e4:07:17:d3:77:41:5e:74:
                    5a:20:a7:e7:75:2f:76:e3:9b:90:b3:fa:2d:af:ad:
                    8f:03:a4:6e:4c:a8:a8:0b:62:0b:10:ec:6d:bc:4d:
                    a8:0a:44:ab:5d:b0:d1:55:17:26:a9:0f:47:24:cf:
                    e0:d3:d4:d0:d2:4d:e1:6c:42:fd:d3:54:6f:aa:60:
                    0d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7B:DB:C8:88:52:80:D2:EC:4A:E9:E8:98:9C:B7:68:1F:70:94:56
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e372e3132382e302f31392d3139203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:d4:c6:0d:2b:61:80:3e:91:1d:8a:b0:65:de:95:cb:9c:25:
         58:31:c1:d9:27:99:f1:ab:75:c5:b6:4b:10:94:b9:01:b4:e0:
         d0:0f:71:db:de:5f:54:02:e1:e3:b2:aa:3c:19:9c:fa:6e:ee:
         ea:ac:31:2e:66:86:af:1b:fd:22:68:c4:2e:c3:79:ab:eb:f4:
         a5:8a:5f:5f:b4:6a:85:f7:ed:de:a7:11:21:df:ef:b9:9a:12:
         f9:58:00:92:21:35:ac:92:c2:20:30:45:44:d9:08:32:de:79:
         bd:bd:c7:6d:c9:d4:00:f6:95:17:95:dd:7b:1f:3d:46:17:a9:
         b2:c5:1e:38:20:da:2d:75:91:f0:ab:18:b6:3c:79:2a:fa:e3:
         eb:67:3e:99:a4:a1:73:bd:d9:61:e8:55:ab:33:0b:db:3e:61:
         59:3a:c7:2d:94:cc:f6:77:ed:d4:a8:d0:48:2c:e6:11:f1:5a:
         f2:b8:1c:78:f0:24:03:b1:0d:16:b1:03:a7:f6:72:e4:89:f1:
         21:ee:03:82:46:b7:1e:8d:ea:5f:69:0b:35:e6:de:5b:2c:85:
         12:bd:42:ad:7c:70:3d:f3:a0:aa:ed:58:19:ab:20:e7:14:8f:
         61:e5:2c:0b:7e:e5:dd:19:ad:a0:4b:e9:3f:00:8b:f3:04:bc:
         ca:e9:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:42:47 2026 by rpki-client