This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203236363131.roa
File:                     3139302e3132362e302e302f31352d3234203d3e203236363131.roa (raw, json)
Hash identifier:          hWm0l/1eVDyly7SMEEtFyIolDiQ8XwqL6KslD4OuXAc=
Subject key identifier:   08:1D:96:2B:DD:F7:48:08:BD:90:0A:6E:33:A8:83:2D:3C:DD:F4:35
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       7E936C5CA179E37D48FFB0C9B0211613802C934D
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:03:13 +0000
ROA not before:           Tue 06 Jan 2026 18:58:13 +0000
ROA not after:            Tue 05 Jan 2027 19:03:13 +0000
asID:                     26611
IP address blocks:        190.126.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:6c:5c:a1:79:e3:7d:48:ff:b0:c9:b0:21:16:13:80:2c:93:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:13 2026 GMT
            Not After : Jan  5 19:03:13 2027 GMT
        Subject: CN=081D962BDDF74808BD900A6E33A8832D3CDDF435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:53:29:46:a0:a8:89:b8:f8:4b:0c:67:96:
                    a4:04:cd:3b:ab:9c:04:d1:e0:67:fb:ae:20:da:0b:
                    25:cf:43:31:75:4f:62:ff:ca:6c:c1:64:59:23:d8:
                    68:30:5a:89:dd:c9:bd:d4:e6:bb:d6:97:46:1f:00:
                    b4:63:55:35:5d:48:5b:03:c4:74:42:b9:37:84:c7:
                    86:7d:a7:31:90:eb:ad:25:05:7b:59:82:27:0d:ae:
                    9d:ba:9f:ff:b9:88:dc:0f:7b:65:f2:71:16:15:04:
                    ba:a4:5c:24:5e:5a:a6:01:ef:ee:84:99:ea:e2:ec:
                    8f:3e:ed:8b:db:48:f5:80:a0:87:8c:6b:e1:06:d5:
                    0d:2f:b9:74:9c:ae:3a:7b:06:7b:73:39:52:3a:25:
                    e9:a5:45:f9:ce:54:7e:a5:c8:ce:51:6d:1f:37:66:
                    b2:64:35:ce:af:7e:8e:2f:f0:9b:fb:4c:fa:c6:39:
                    4b:a0:d7:b9:69:ac:c2:43:f2:17:73:c6:14:18:9d:
                    e5:78:92:90:7e:ed:5c:ac:72:88:f2:e0:56:e6:0b:
                    1e:a8:df:99:83:89:35:61:34:69:95:47:90:aa:02:
                    59:81:d3:90:c6:5c:8f:42:d6:cc:cc:73:b6:7b:1a:
                    3e:76:0e:31:20:40:2f:b8:62:e5:cc:e7:a9:59:f5:
                    1e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1D:96:2B:DD:F7:48:08:BD:90:0A:6E:33:A8:83:2D:3C:DD:F4:35
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.126.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         72:93:e4:af:fb:b2:fa:b8:5a:96:12:70:45:d3:ef:05:0c:4e:
         63:4e:47:f4:1e:ae:ad:ee:da:60:a3:74:e2:a1:b6:1c:dc:5b:
         4f:63:78:1f:14:f5:23:23:51:a8:bb:16:ca:f1:57:61:2a:02:
         e8:b8:03:ba:4e:1a:d1:7c:e1:d0:86:47:ab:16:2c:e7:91:89:
         44:5e:5f:e3:75:38:03:5a:38:14:8b:90:a2:f8:b3:10:75:ed:
         4e:82:62:9a:21:17:3f:a6:a0:95:41:b9:66:67:50:84:0b:05:
         3c:13:0c:5b:95:87:88:94:7d:e0:a2:12:94:6f:a1:21:3a:86:
         d9:8e:31:de:f7:a3:f2:70:26:0e:2c:00:a4:6c:6c:ba:13:9b:
         85:f1:ca:74:b4:4a:3e:f4:70:3d:3d:8b:fb:c8:1c:36:8e:20:
         06:a3:6c:f7:76:28:09:1c:e8:f3:79:9a:ee:32:13:54:ac:22:
         82:69:2b:0a:22:2c:21:e7:b7:56:cb:b6:f6:d9:84:2b:57:a8:
         9a:78:eb:54:b7:a3:f3:fe:d4:29:60:f9:3f:ab:0f:cf:1e:0d:
         73:37:23:4d:13:d4:1e:33:74:84:5f:2a:2c:de:c7:5d:3b:ca:
         06:7f:d6:2a:51:30:4c:b1:5c:61:43:ea:b4:82:01:7e:e6:8b:
         44:6a:60:7d
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUfpNsXKF5431I/7DJsCEWE4Ask00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNjAxMDYxODU4MTNaFw0yNzAxMDUxOTAzMTNaMDMxMTAvBgNV
BAMTKDA4MUQ5NjJCRERGNzQ4MDhCRDkwMEE2RTMzQTg4MzJEM0NEREY0MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4XlMpRqCoibj4SwxnlqQEzTur
nATR4Gf7riDaCyXPQzF1T2L/ymzBZFkj2GgwWondyb3U5rvWl0YfALRjVTVdSFsD
xHRCuTeEx4Z9pzGQ660lBXtZgicNrp26n/+5iNwPe2XycRYVBLqkXCReWqYB7+6E
meri7I8+7YvbSPWAoIeMa+EG1Q0vuXScrjp7BntzOVI6JemlRfnOVH6lyM5RbR83
ZrJkNc6vfo4v8Jv7TPrGOUug17lprMJD8hdzxhQYneV4kpB+7Vyscojy4FbmCx6o
35mDiTVhNGmVR5CqAlmB05DGXI9C1szMc7Z7Gj52DjEgQC+4YuXM56lZ9R49AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUCB2WK933SAi9kApuM6iDLTzd9DUwHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMDJlMzEzMjM2MmUzMDJlMzAy
ZjMxMzUyZDMyMzQyMDNkM2UyMDMyMzYzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwG+fjANBgkq
hkiG9w0BAQsFAAOCAQEAcpPkr/uy+rhalhJwRdPvBQxOY05H9B6ure7aYKN04qG2
HNxbT2N4HxT1IyNRqLsWyvFXYSoC6LgDuk4a0Xzh0IZHqxYs55GJRF5f43U4A1o4
FIuQovizEHXtToJimiEXP6aglUG5ZmdQhAsFPBMMW5WHiJR94KISlG+hITqG2Y4x
3vej8nAmDiwApGxsuhObhfHKdLRKPvRwPT2L+8gcNo4gBqNs93YoCRzo83ma7jIT
VKwigmkrCiIsIee3Vsu29tmEK1eomnjrVLej8/7UKWD5P6sPzx4NczcjTRPUHjN0
hF8qLN7HXTvKBn/WKlEwTLFcYUPqtIIBfuaLRGpgfQ==
-----END CERTIFICATE-----
Generated at Wed Jan 21 16:10:12 2026 by rpki-client