This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3234392e302f32342d3234203d3e203236363131.roa
File:                     3139302e3132372e3234392e302f32342d3234203d3e203236363131.roa (raw, json)
Hash identifier:          aqFcE9c4r/0VqDsnuNgVaA//eRTjqmj9FSZlvhaUomc=
Subject key identifier:   B3:B4:F5:A6:A8:98:8C:97:28:2E:29:88:4B:AE:28:D3:8F:97:9E:0F
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       0A6EF0066E4C41962740DE3A188D61E3BC295B84
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3234392e302f32342d3234203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:03:06 +0000
ROA not before:           Tue 06 Jan 2026 18:58:06 +0000
ROA not after:            Tue 05 Jan 2027 19:03:06 +0000
asID:                     26611
IP address blocks:        190.127.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6e:f0:06:6e:4c:41:96:27:40:de:3a:18:8d:61:e3:bc:29:5b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:06 2026 GMT
            Not After : Jan  5 19:03:06 2027 GMT
        Subject: CN=B3B4F5A6A8988C97282E29884BAE28D38F979E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8f:de:3e:b0:3b:5e:3b:e0:86:e2:c7:df:fe:
                    06:b1:99:f0:fe:f5:ff:12:e1:5a:d6:47:5f:1e:84:
                    db:7a:17:3c:fd:fb:fe:b1:f9:03:34:c3:ae:d8:db:
                    23:98:7c:70:67:7d:48:97:1d:00:34:c5:d9:54:e6:
                    45:07:e1:f9:00:86:f6:f1:0a:c6:e4:53:82:5b:1f:
                    c5:a8:33:73:31:a4:3e:66:19:fa:77:b5:11:7a:95:
                    7e:4a:17:20:1c:56:d3:54:91:91:f7:ef:e6:04:98:
                    ac:91:99:c5:64:57:15:a1:88:8a:fc:f5:50:3b:32:
                    b2:b8:7f:95:84:be:3b:52:08:6b:8d:fa:1d:0d:fb:
                    0b:39:8c:5f:52:38:4c:2e:4a:f8:29:e4:7b:35:66:
                    be:39:8c:51:3d:dd:39:a3:0e:09:4b:0e:54:46:8e:
                    32:fb:55:ec:e4:a6:42:a7:0a:a5:8c:48:6c:98:c0:
                    16:9d:1b:ea:cc:fb:83:e3:7a:f3:41:b0:5f:7c:6d:
                    ee:5a:06:a2:de:60:24:ff:9b:67:cb:4c:bb:3e:76:
                    e4:dd:02:36:e3:c8:e3:86:0b:f9:da:88:2f:36:9a:
                    80:b0:e9:47:82:64:5d:75:88:dc:72:54:fc:ca:0e:
                    ed:fc:03:bc:a2:04:cb:5e:40:3e:03:59:f6:76:98:
                    af:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B4:F5:A6:A8:98:8C:97:28:2E:29:88:4B:AE:28:D3:8F:97:9E:0F
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3234392e302f32342d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:d2:88:b9:2a:71:4f:d8:b8:c4:52:5c:27:ee:f3:5d:49:db:
         c6:1e:0d:8c:d4:fc:60:bb:ef:bd:e0:15:8a:0a:f1:e7:75:da:
         84:51:b1:17:d8:06:8d:02:28:f8:68:8e:89:22:a5:ff:ec:59:
         64:69:c2:f7:52:c1:fa:34:9f:b8:08:3c:53:58:cb:8b:df:d9:
         68:74:3d:39:f4:a4:7e:36:6e:6a:46:5d:e0:91:48:b4:aa:93:
         90:db:27:ab:f4:27:c6:5a:5e:9c:65:36:6b:44:3f:7e:e1:76:
         d7:30:bc:94:37:7f:88:a2:53:0a:da:d1:94:32:11:a1:a5:81:
         9f:34:30:4f:81:1f:70:da:9e:3f:8b:69:c1:3d:4a:0c:e1:09:
         0e:2c:0b:23:70:5e:33:61:7c:88:a1:c0:29:dc:6e:f9:fc:3a:
         aa:0c:e8:47:9a:7e:87:f4:18:41:3b:2b:a1:f0:8a:5b:c7:fc:
         01:57:bc:0e:02:2f:ba:d0:57:5e:fa:2e:ac:3f:02:92:67:7b:
         b5:c5:1d:74:e5:7e:31:80:1e:e7:ab:47:05:11:6b:24:c9:9b:
         ba:52:89:5c:50:df:44:74:dd:93:dd:20:a5:4e:c2:19:e5:a1:
         b5:ea:9a:0e:98:03:8c:61:65:bd:8b:31:8c:58:1e:c1:38:0f:
         1f:1a:bf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:10:58 2026 by rpki-client