This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e37322e302f32312d3234203d3e203236363131.roa
File:                     3139302e3133302e37322e302f32312d3234203d3e203236363131.roa (raw, json)
Hash identifier:          4gFSBMi5adaLPoyr1b9Vn4bmly5krh/hRBIiS++fXlA=
Subject key identifier:   12:6E:DE:68:0B:9D:F4:46:12:FE:97:8D:02:DC:BA:13:BD:12:8A:58
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       7FA1B476F6B2D4E7B4336C55CE7845C8FB5BE122
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e37322e302f32312d3234203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:03:12 +0000
ROA not before:           Tue 06 Jan 2026 18:58:12 +0000
ROA not after:            Tue 05 Jan 2027 19:03:12 +0000
asID:                     26611
IP address blocks:        190.130.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a1:b4:76:f6:b2:d4:e7:b4:33:6c:55:ce:78:45:c8:fb:5b:e1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:12 2026 GMT
            Not After : Jan  5 19:03:12 2027 GMT
        Subject: CN=126EDE680B9DF44612FE978D02DCBA13BD128A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:22:f4:8c:ae:44:8e:f1:08:15:44:de:73:
                    d6:47:ef:26:6c:94:3f:be:4f:50:45:7c:9e:05:f0:
                    ff:c2:c1:bb:1b:8b:cb:ba:6f:7f:38:08:36:e3:49:
                    80:57:64:d1:2c:e7:bc:1d:3f:73:13:13:d1:62:fe:
                    6d:21:db:00:43:4b:46:a5:74:fd:3c:bc:1f:ff:be:
                    76:e2:a8:78:9e:26:ba:fa:f0:c5:a9:9a:fb:87:12:
                    fc:35:55:81:9a:5b:45:22:e9:d7:d0:57:ac:25:aa:
                    35:3d:79:6f:c7:c6:6c:64:28:1b:a3:c5:3f:d8:be:
                    24:81:9b:83:a3:09:37:b4:07:f0:e7:fd:e4:d2:91:
                    f8:7e:38:05:91:65:f1:1f:a8:e2:ec:e7:4f:e0:e2:
                    f5:56:55:88:01:31:64:00:57:11:d0:2f:40:bf:4c:
                    c6:d6:56:ed:b3:db:2f:dc:02:94:ac:62:58:ab:7d:
                    ed:12:54:8f:d9:73:74:85:e3:de:d3:8e:a9:41:cf:
                    e2:c6:29:28:63:80:67:a2:4c:27:53:2e:14:68:21:
                    f9:82:7d:aa:3a:16:28:cf:c4:99:bd:1f:71:07:1b:
                    4c:2f:38:82:4f:72:3b:50:42:9a:e0:9f:ca:e5:ac:
                    7f:0a:2b:16:90:b9:11:b1:f2:79:39:c0:ee:53:59:
                    dd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6E:DE:68:0B:9D:F4:46:12:FE:97:8D:02:DC:BA:13:BD:12:8A:58
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e37322e302f32312d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.130.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b3:79:ce:de:6c:80:d0:f7:ab:03:b1:6e:1f:2a:3b:b6:2c:ad:
         95:b9:28:44:e4:97:5d:36:22:0f:f0:c0:f8:1f:66:6d:3c:d7:
         10:7c:ae:8f:73:4a:61:db:af:e7:00:27:a8:b3:4b:00:06:f1:
         16:a3:cb:b2:8b:42:d6:19:a1:ef:37:c1:2e:e0:cc:6d:43:4a:
         f4:80:14:14:f8:58:08:1d:11:0d:10:c2:bf:e8:72:71:98:88:
         ad:d5:4e:ee:ea:58:ad:42:27:a5:ff:83:e5:1b:28:81:1b:60:
         06:06:d1:39:35:27:7e:1f:2f:7a:83:4b:98:06:a1:4e:d4:11:
         38:dd:0a:17:4f:78:94:3e:23:ce:21:45:b2:94:09:68:b7:ea:
         3a:b1:1a:c4:20:6d:0c:92:a6:03:40:43:a6:bf:16:12:f6:0b:
         c0:34:36:4c:6f:29:d8:3c:d0:4e:02:2c:3f:11:ee:7d:81:c7:
         1f:11:52:6b:4a:07:74:06:d1:30:ca:4e:85:bf:be:d8:98:b5:
         8a:2d:98:96:38:f1:c7:4e:15:4f:fb:6d:a3:0d:fb:2b:59:0b:
         98:5b:ce:02:c5:d3:7b:42:02:6e:d7:14:a8:5b:b9:bd:8a:2f:
         f2:6b:5a:0c:16:9d:4b:23:04:f5:0c:b6:00:7a:81:f2:99:8a:
         73:9c:f4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:10:59 2026 by rpki-client