This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3234312e302f32342d3234203d3e203236363131.roa
File:                     3139302e3132372e3234312e302f32342d3234203d3e203236363131.roa (raw, json)
Hash identifier:          BDVNcexe4eQH5bpAgUCccEdDKh7+0ezD1x9KGDtzbSI=
Subject key identifier:   17:37:47:6D:B8:66:0B:27:70:F7:EE:83:42:DE:A4:9D:3E:29:90:E1
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       0E8454C10F9A45621688CFB15FFC8217FEDBC32A
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3234312e302f32342d3234203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:02:55 +0000
ROA not before:           Tue 06 Jan 2026 18:57:55 +0000
ROA not after:            Tue 05 Jan 2027 19:02:55 +0000
asID:                     26611
IP address blocks:        190.127.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:84:54:c1:0f:9a:45:62:16:88:cf:b1:5f:fc:82:17:fe:db:c3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:57:55 2026 GMT
            Not After : Jan  5 19:02:55 2027 GMT
        Subject: CN=1737476DB8660B2770F7EE8342DEA49D3E2990E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:72:b9:9b:13:bd:f7:e4:34:2a:43:14:1f:5f:
                    4c:d1:02:9b:b6:7f:82:f9:de:52:d4:d5:17:48:21:
                    38:f7:4d:0a:5a:12:58:d2:6f:5a:13:15:23:8a:2f:
                    9a:c6:8e:40:69:74:06:77:bc:73:e1:b7:1f:ef:8f:
                    aa:7e:6b:f4:62:d4:cd:ab:67:84:a2:c7:80:35:32:
                    c9:ef:af:e9:ff:5d:29:f4:ff:5a:a7:ea:df:95:99:
                    37:e5:db:cf:6b:ca:4f:67:ff:80:37:5d:9e:9d:63:
                    34:bf:ca:6c:cf:c7:84:57:d8:cb:45:c7:e5:40:9f:
                    97:4c:b7:82:08:82:20:bf:7b:59:8f:93:97:04:6c:
                    3a:f9:ff:e5:9b:d8:70:56:8e:06:21:67:44:35:1a:
                    1e:35:72:2a:aa:b4:1b:4e:1f:9c:48:3e:6e:87:4a:
                    d4:43:5c:19:09:bb:dd:0f:fd:c3:a0:41:82:d1:59:
                    e5:16:43:55:1b:ea:e3:3a:95:5f:77:99:89:bf:4d:
                    e7:9a:1c:5a:8c:18:bc:3b:b2:af:e8:c3:9b:77:84:
                    41:36:b4:df:da:e9:61:fb:2b:e2:2d:07:24:06:dc:
                    0a:2f:17:76:3e:d4:6e:eb:9b:b0:7c:ab:cc:a3:bc:
                    0c:47:e4:00:b1:32:ed:bd:be:8e:90:3c:93:d9:0c:
                    47:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:37:47:6D:B8:66:0B:27:70:F7:EE:83:42:DE:A4:9D:3E:29:90:E1
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3234312e302f32342d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:a6:d1:d9:d4:d7:fe:15:bc:fa:72:86:ce:82:43:74:f9:ee:
         31:04:4f:80:dc:25:69:af:fb:02:00:09:2b:30:d4:11:c8:d1:
         44:22:fb:7f:eb:e0:47:2e:d7:18:aa:a9:0c:8d:53:81:74:d9:
         ec:3a:5f:30:87:26:45:df:18:16:f9:6e:18:70:84:67:e5:84:
         7a:02:f3:76:92:fc:97:21:c5:7c:e5:f8:56:eb:28:8d:99:1e:
         45:16:6c:3e:5e:e3:e9:f0:81:9b:bc:db:ea:8c:57:e7:dd:44:
         ed:3d:03:8d:11:6b:d6:8d:4f:48:f8:ad:4c:67:fa:9e:3e:0a:
         f2:50:d2:c4:ce:90:82:48:b0:d8:4e:d0:44:71:94:e3:a5:a1:
         38:8b:5d:95:5f:6b:e9:9d:e5:ff:97:20:b2:ca:3d:2a:bc:d4:
         99:cb:ba:7b:8b:19:5e:a9:42:08:7a:53:12:be:f6:88:30:d6:
         93:47:17:11:36:a8:21:1f:66:aa:a2:d3:19:9c:d3:44:a6:a3:
         b0:b2:33:66:82:e0:c8:dd:f5:56:d4:fd:e2:52:75:7b:f3:11:
         f7:54:c5:9e:a6:e6:83:cb:ca:4c:02:30:a4:f4:4c:1b:d6:41:
         3a:59:d8:47:16:cb:de:02:d9:d7:0f:40:67:71:3d:46:95:ea:
         30:b5:d0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:10:54 2026 by rpki-client