This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132352e302e302f31362d3137203d3e203236363131.roa
File:                     3139302e3132352e302e302f31362d3137203d3e203236363131.roa (raw, json)
Hash identifier:          YqSf5fu4xGAELm7OnCNCsTFZUEoWmIc2MpUuEu/wPug=
Subject key identifier:   2F:50:B9:AF:7F:E8:52:5A:5A:CC:66:80:63:45:9C:57:19:40:26:20
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       54F970A2E00E770FBDA79EE384DF85B8A2DCF876
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132352e302e302f31362d3137203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:03:04 +0000
ROA not before:           Tue 06 Jan 2026 18:58:04 +0000
ROA not after:            Tue 05 Jan 2027 19:03:04 +0000
asID:                     26611
IP address blocks:        190.125.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f9:70:a2:e0:0e:77:0f:bd:a7:9e:e3:84:df:85:b8:a2:dc:f8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:04 2026 GMT
            Not After : Jan  5 19:03:04 2027 GMT
        Subject: CN=2F50B9AF7FE8525A5ACC668063459C5719402620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:ec:d2:ec:9e:e0:31:7b:ec:00:4d:a0:61:
                    e9:dd:96:0f:e7:a2:a3:10:83:e6:8b:24:02:0b:1e:
                    0e:53:a0:8f:0e:93:be:5e:81:ad:73:77:09:67:da:
                    32:e3:70:a3:3a:f1:c7:55:4b:d1:ca:08:da:db:ff:
                    b8:6d:45:5a:1a:4b:7f:0b:d7:24:34:38:99:81:26:
                    1b:91:1f:74:41:9d:dc:a7:05:81:36:c2:a8:0b:df:
                    5b:86:a9:b0:df:f6:a1:16:d0:ce:b6:b7:d4:71:0b:
                    3d:f5:88:a6:4e:73:89:60:68:79:6b:6c:df:88:5a:
                    95:35:c1:f0:c9:3a:12:df:9e:e1:c0:17:56:63:2b:
                    c7:d7:11:bd:7b:b9:c1:2f:e2:31:80:b9:c4:94:24:
                    db:79:c6:77:8e:93:bd:6d:d0:d2:b0:7f:02:3e:a3:
                    dc:3c:28:48:20:60:51:4b:79:e0:55:a3:d2:22:86:
                    fe:86:d4:3f:10:a9:ca:0b:9e:45:17:ca:aa:a3:4e:
                    86:a5:a4:83:51:ef:f8:71:00:32:95:c6:4f:40:f8:
                    d5:68:79:14:be:4e:e8:94:f3:30:26:31:3d:3d:1e:
                    6b:76:fa:3c:f1:10:dd:93:fb:0f:00:b0:a8:1f:16:
                    d3:45:61:c2:ad:e3:90:40:8f:63:e3:67:fb:b9:bf:
                    4f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:50:B9:AF:7F:E8:52:5A:5A:CC:66:80:63:45:9C:57:19:40:26:20
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132352e302e302f31362d3137203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.125.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:b8:ed:16:b1:d3:90:68:6f:0d:56:0e:aa:8b:3b:d7:1c:ef:
         46:12:ca:20:b2:f2:e2:bb:c3:c1:b9:f7:f8:3c:48:cf:98:2f:
         be:01:7a:d0:6f:4d:c3:7a:c2:b4:25:63:bc:98:37:e8:0b:cf:
         58:42:51:da:36:09:e8:97:d6:14:5f:0e:76:57:33:2f:21:71:
         90:16:6e:59:d9:0e:21:55:5d:7a:62:70:d6:88:fe:70:83:03:
         5b:b7:e5:78:1d:e0:be:45:a0:b6:2f:f3:44:35:5d:8d:3a:3f:
         27:4e:c4:90:58:70:b4:42:2b:76:82:f0:dd:4a:6a:af:b6:02:
         07:63:e0:b9:c2:26:27:12:be:e8:8e:0e:df:67:c2:e1:ef:49:
         c4:79:e0:27:82:aa:5f:4c:c1:a4:8f:3d:af:7a:e9:14:cd:99:
         43:d6:00:9b:88:e4:2e:80:bc:f8:cb:1c:f2:b7:e1:ce:45:73:
         43:17:12:e1:e9:ca:02:f0:9b:af:2a:17:cc:29:08:aa:a1:47:
         2a:16:fe:1c:80:a2:58:55:2b:50:25:e4:29:24:0a:f0:55:1c:
         ec:c5:fc:39:b0:67:75:b5:42:6b:26:00:da:e8:a3:9a:4a:da:
         e9:69:05:b9:83:05:53:c2:a0:97:c8:eb:71:43:49:f5:97:e2:
         1a:5b:4b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:10:25 2026 by rpki-client