This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132352e302e302f31362d3234203d3e203236363131.roa
File:                     3139302e3132352e302e302f31362d3234203d3e203236363131.roa (raw, json)
Hash identifier:          V40fBsYhKwyHTeU73MLnjrCvO1P/WdGMyjGLYgEkpPc=
Subject key identifier:   41:EC:DA:7D:FB:6C:47:C2:63:94:F0:C3:50:FB:BE:4F:F1:6C:3E:FE
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       623E8C4EC436A617DF3860C89FE857AF862F423F
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132352e302e302f31362d3234203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:03:08 +0000
ROA not before:           Tue 06 Jan 2026 18:58:08 +0000
ROA not after:            Tue 05 Jan 2027 19:03:08 +0000
asID:                     26611
IP address blocks:        190.125.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Feb 2026 21:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3e:8c:4e:c4:36:a6:17:df:38:60:c8:9f:e8:57:af:86:2f:42:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:08 2026 GMT
            Not After : Jan  5 19:03:08 2027 GMT
        Subject: CN=41ECDA7DFB6C47C26394F0C350FBBE4FF16C3EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:b7:7d:d1:0f:d4:aa:13:01:99:52:60:8e:
                    c1:a5:8a:80:17:53:ae:e0:3e:b4:7a:ef:90:50:4e:
                    9c:91:56:6f:fd:de:82:bd:80:cf:98:9f:98:ad:47:
                    21:0c:a5:19:b1:52:6f:4b:c4:37:7a:7c:89:e1:df:
                    31:2a:b9:6c:e4:d7:5c:bb:f4:a7:77:af:2e:01:92:
                    c8:bc:98:e4:4a:08:7f:30:fc:e0:34:b7:4c:53:1b:
                    06:2d:d1:21:b2:e0:7a:d0:c7:89:93:80:dd:94:e6:
                    f2:0e:a9:99:f3:2a:57:f4:90:eb:a3:aa:35:dd:f2:
                    1a:13:52:ca:d0:99:be:c9:9c:20:8b:24:bc:37:42:
                    e4:d2:fa:11:37:92:cc:fe:c0:02:73:a0:3b:46:24:
                    0b:20:b8:5b:4e:db:1e:f5:29:37:89:b4:72:d6:53:
                    3f:9e:c2:0f:4b:86:a5:78:c6:28:5a:d5:8a:6e:76:
                    5d:5a:79:fa:5c:ba:36:0f:27:ef:e2:67:b7:77:1e:
                    8d:98:89:5a:31:2c:8f:ca:9c:7f:19:96:91:d4:0c:
                    b7:d0:a1:62:04:71:b3:e1:6a:fa:dc:85:05:ed:73:
                    4e:82:d9:3a:7e:c3:bb:0f:7c:0d:6e:87:76:f0:44:
                    01:77:48:68:da:22:93:3a:f7:f4:9b:80:a5:1c:15:
                    b2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EC:DA:7D:FB:6C:47:C2:63:94:F0:C3:50:FB:BE:4F:F1:6C:3E:FE
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132352e302e302f31362d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.125.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:06:5a:ae:24:50:d0:8a:f3:ff:9a:21:23:ab:5d:27:8d:fb:
         c6:23:f7:0b:4d:81:4d:88:d8:ec:d7:bb:fc:01:ee:33:94:a3:
         74:95:a7:d8:c1:bc:73:d3:bd:63:e9:be:f2:75:73:f1:75:83:
         8b:c2:1a:84:7d:db:de:4f:d9:64:5c:8e:28:95:9b:40:e8:00:
         67:21:6f:7d:c4:b6:8d:aa:d1:99:e6:4e:bf:0a:d2:c4:9c:44:
         ec:0b:0e:3c:04:06:a6:4a:32:0f:f9:a9:06:24:7d:90:d9:18:
         b6:2b:c2:ff:d6:21:2f:06:0d:75:e4:a1:b7:46:84:e5:20:bf:
         2e:fe:91:b7:b2:9e:9c:c5:f3:39:29:66:9e:a0:25:91:55:18:
         35:97:47:cb:d7:c9:8f:5c:45:64:a5:de:63:48:f5:81:f1:09:
         b1:4e:b8:00:1a:38:83:0d:7c:3e:f5:ce:f7:af:1a:dc:8a:f7:
         7a:d9:52:53:07:0f:0b:06:83:7b:0a:03:a0:e6:37:56:49:b1:
         5b:8a:3e:6b:54:a0:83:30:08:b3:eb:89:1c:31:e3:53:1a:31:
         0c:e5:68:39:85:fc:96:aa:28:41:15:24:5c:b0:0b:c3:3c:ed:
         f3:36:17:43:75:6c:94:88:28:82:e3:39:5c:8e:89:77:cd:9e:
         1f:08:c7:59
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUYj6MTsQ2phffOGDIn+hXr4YvQj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNjAxMDYxODU4MDhaFw0yNzAxMDUxOTAzMDhaMDMxMTAvBgNV
BAMTKDQxRUNEQTdERkI2QzQ3QzI2Mzk0RjBDMzUwRkJCRTRGRjE2QzNFRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOB7d90Q/UqhMBmVJgjsGlioAX
U67gPrR675BQTpyRVm/93oK9gM+Yn5itRyEMpRmxUm9LxDd6fInh3zEquWzk11y7
9Kd3ry4Bksi8mORKCH8w/OA0t0xTGwYt0SGy4HrQx4mTgN2U5vIOqZnzKlf0kOuj
qjXd8hoTUsrQmb7JnCCLJLw3QuTS+hE3ksz+wAJzoDtGJAsguFtO2x71KTeJtHLW
Uz+ewg9LhqV4xiha1Ypudl1aefpcujYPJ+/iZ7d3Ho2YiVoxLI/KnH8ZlpHUDLfQ
oWIEcbPhavrchQXtc06C2Tp+w7sPfA1uh3bwRAF3SGjaIpM69/SbgKUcFbJLAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUQezafftsR8JjlPDDUPu+T/FsPv4wHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMDJlMzEzMjM1MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzYzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC+fTANBgkq
hkiG9w0BAQsFAAOCAQEAcwZariRQ0Irz/5ohI6tdJ437xiP3C02BTYjY7Ne7/AHu
M5SjdJWn2MG8c9O9Y+m+8nVz8XWDi8IahH3b3k/ZZFyOKJWbQOgAZyFvfcS2jarR
meZOvwrSxJxE7AsOPAQGpkoyD/mpBiR9kNkYtivC/9YhLwYNdeSht0aE5SC/Lv6R
t7KenMXzOSlmnqAlkVUYNZdHy9fJj1xFZKXeY0j1gfEJsU64ABo4gw18PvXO968a
3Ir3etlSUwcPCwaDewoDoOY3VkmxW4o+a1SggzAIs+uJHDHjUxoxDOVoOYX8lqoo
QRUkXLALwzzt8zYXQ3VslIgoguM5XI6Jd82eHwjHWQ==
-----END CERTIFICATE-----
Generated at Thu Feb 12 01:27:45 2026 by rpki-client