This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323632313931.roa
File:                     3139302e37312e38352e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          RAi2/2Bw3s7D5a6SHlbvuFx8tIk/rhLcGPzcQVhvz6k=
Subject key identifier:   85:2D:95:D4:75:6D:09:91:FE:B8:DE:7B:37:5C:11:22:6E:25:77:58
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       07BBF0FF84D7C4A3E2E54FBF267103D7AB47573D
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 19:27:54 +0000
ROA not before:           Tue 06 Jan 2026 19:22:54 +0000
ROA not after:            Tue 05 Jan 2027 19:27:54 +0000
asID:                     262191
IP address blocks:        190.71.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bb:f0:ff:84:d7:c4:a3:e2:e5:4f:bf:26:71:03:d7:ab:47:57:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Jan  6 19:22:54 2026 GMT
            Not After : Jan  5 19:27:54 2027 GMT
        Subject: CN=852D95D4756D0991FEB8DE7B375C11226E257758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:df:b3:6f:8d:0d:c2:92:e9:85:2a:71:82:04:
                    2a:a7:dc:d8:fb:42:fe:a5:e6:6a:a7:6f:cd:4b:44:
                    86:19:86:43:cc:55:9b:ac:c5:69:33:88:cd:c0:f9:
                    1b:73:5b:04:e4:11:db:2f:b0:72:91:aa:14:1f:c7:
                    9f:46:b7:63:ae:d5:98:1c:6d:8e:c2:3f:38:24:16:
                    97:72:47:84:b1:1e:61:de:1e:61:e9:90:bd:86:0b:
                    02:37:f6:7a:96:94:11:2d:70:35:c8:17:34:8e:5d:
                    5b:00:b6:44:f3:c3:f8:98:e5:88:29:f6:10:58:68:
                    ae:17:78:a4:8e:25:c0:0a:40:51:95:cd:0c:be:52:
                    42:60:dc:bb:c8:de:43:27:f7:ea:19:4d:61:9b:c9:
                    8d:db:d6:22:7b:b8:1c:c3:46:69:33:d3:4a:34:74:
                    82:a5:2c:74:fa:56:a9:4b:a0:97:4c:fe:6e:57:42:
                    74:b9:1d:9b:f8:b4:6f:ea:b4:a1:fc:bb:ca:ed:78:
                    69:fa:1f:6f:cb:98:4e:98:a4:88:59:8c:df:7c:dd:
                    ab:86:57:13:e7:5a:63:ef:d8:68:68:ac:a5:2d:bb:
                    79:ec:31:c0:8f:e2:34:26:b8:1d:c3:98:2d:44:e0:
                    89:84:e8:0e:f1:90:c1:7f:ca:b8:0f:e0:33:9a:37:
                    7b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2D:95:D4:75:6D:09:91:FE:B8:DE:7B:37:5C:11:22:6E:25:77:58
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e37312e38352e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.71.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:be:7d:1b:8d:4a:f9:8a:39:ea:a8:ff:fe:3d:73:ab:1a:82:
         f3:8d:1c:8e:cc:49:ff:dd:f2:11:ec:85:5d:7a:be:eb:32:c6:
         53:78:8c:6e:24:c5:7d:c1:8e:1e:2b:3d:b5:d8:c8:c6:69:28:
         3c:af:20:db:4b:17:d5:7e:c9:00:3c:79:9e:3d:b0:78:e5:a5:
         39:22:f4:a5:96:fc:94:5f:73:d6:34:5e:c1:46:72:3e:58:1c:
         24:88:d1:0c:37:9a:1a:19:e1:24:53:4d:bb:19:3b:5f:53:f8:
         21:d3:83:b6:15:f9:c1:8a:6a:db:ce:70:35:df:ea:d6:36:7f:
         e0:c6:59:67:81:b6:4d:74:38:16:26:c4:0a:96:43:5f:87:4c:
         a4:8c:4d:17:fb:d9:59:85:cf:90:18:66:98:df:ca:98:65:8a:
         61:79:ca:e7:b2:26:81:68:dd:92:c7:3d:c0:c2:25:b8:04:c8:
         cf:1d:42:0a:67:98:c6:ba:e9:b0:eb:2b:74:af:0b:17:9c:65:
         2d:46:42:13:8c:f1:c9:a5:27:f4:92:a0:2a:6e:92:8e:cf:1b:
         6e:45:8b:1c:95:9c:54:7e:6d:ae:72:39:7c:47:bc:88:93:87:
         29:06:2f:20:d3:df:56:87:f6:a1:3b:09:8a:06:94:d0:17:84:
         f8:c5:bc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:38:54 2026 by rpki-client