This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135322e302e302f31342d3234203d3e203236363131.roa
File:                     3139312e3135322e302e302f31342d3234203d3e203236363131.roa (raw, json)
Hash identifier:          /LMWwRfJHQOa7Qcg+8OnREl3lqMSqdo82oyHf7LRGjk=
Subject key identifier:   89:C3:EB:B7:17:6C:C9:F1:FE:A0:A5:F7:96:E3:86:F2:BF:06:14:30
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       69F85221C2555A9BF8AC0379D7BF1A7BE2D89718
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135322e302e302f31342d3234203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:03:02 +0000
ROA not before:           Tue 06 Jan 2026 18:58:02 +0000
ROA not after:            Tue 05 Jan 2027 19:03:02 +0000
asID:                     26611
IP address blocks:        191.152.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f8:52:21:c2:55:5a:9b:f8:ac:03:79:d7:bf:1a:7b:e2:d8:97:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:02 2026 GMT
            Not After : Jan  5 19:03:02 2027 GMT
        Subject: CN=89C3EBB7176CC9F1FEA0A5F796E386F2BF061430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:eb:51:06:e7:bc:05:6e:15:e8:7d:c2:40:e9:
                    e2:24:ed:00:3a:c0:8a:6f:c3:46:c8:ca:a7:47:ff:
                    72:4c:a5:35:85:74:b9:0d:08:51:ba:68:08:f5:9e:
                    21:32:70:29:8e:a2:4b:e2:1a:49:74:77:f0:e0:07:
                    ac:68:c3:5f:18:29:03:4a:96:30:d9:c5:3d:81:27:
                    34:1e:c1:0e:19:c7:c1:3c:42:65:28:a8:0c:48:0c:
                    2d:ba:37:06:04:c4:15:98:f1:29:35:68:19:cf:0d:
                    d6:33:3c:44:87:8e:f7:ec:c1:88:71:5f:38:62:11:
                    9a:8d:52:eb:79:e7:33:7e:6f:8b:d6:8b:b3:6c:60:
                    2d:e5:2d:99:d6:d1:5b:d8:4a:84:fa:60:ed:b0:e2:
                    15:93:58:f1:7a:30:da:ad:22:6d:fd:ec:d0:44:b1:
                    f2:25:af:ff:a7:4e:9a:62:03:15:d0:02:a2:2a:a2:
                    fb:cc:e0:c2:7d:b4:55:c4:1b:7b:4b:41:f4:ae:14:
                    13:e1:fa:b5:a1:61:f5:2d:1d:5c:7f:78:69:3a:1e:
                    11:38:15:49:2a:66:65:41:8b:04:6d:fb:2a:ce:7d:
                    d9:f4:f6:14:af:fa:52:f1:39:e7:77:04:bb:7a:a6:
                    f1:4a:71:fe:2e:07:72:0d:09:14:63:c6:02:2c:6f:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C3:EB:B7:17:6C:C9:F1:FE:A0:A5:F7:96:E3:86:F2:BF:06:14:30
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135322e302e302f31342d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.152.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         b3:b0:b1:3f:88:aa:00:50:00:2f:c5:60:da:4a:5d:0a:53:0b:
         99:af:d2:5d:2a:2f:cd:62:14:45:7f:81:19:dc:7a:88:80:df:
         a6:a6:7f:82:70:2a:e3:3a:ee:75:d0:61:6a:a3:f0:c1:4f:ce:
         e6:1c:86:6f:73:85:6e:d2:c0:49:3b:97:db:43:fc:47:2b:11:
         40:14:26:b5:2e:10:dc:36:75:f7:1e:e1:e5:f1:d8:b9:24:bc:
         ff:cc:c2:ae:0c:5e:ec:ce:5a:9c:fe:de:83:8f:5f:9c:de:b5:
         36:87:c9:42:7a:9a:88:05:de:35:d9:59:af:4a:eb:ea:ea:bb:
         83:89:d5:b4:2c:c2:25:9c:7d:44:64:20:0c:3c:11:5b:d4:2d:
         60:f5:8e:fe:66:7c:74:25:94:3e:6b:72:81:76:1f:15:43:56:
         ad:b1:0f:df:d6:33:c9:16:07:c9:f7:d9:d6:9b:a3:e9:5d:fc:
         f1:19:4b:12:f9:ef:4b:be:5a:00:e7:80:35:14:3d:0c:3b:c3:
         97:2d:bd:0a:d8:78:2e:75:c6:45:37:5d:88:da:27:75:e5:73:
         60:bd:82:9b:26:b4:fa:5b:1a:17:a9:b9:67:a6:c1:ce:cc:db:
         3e:df:b7:36:fa:3f:2b:c8:c7:65:45:a6:a5:ef:e1:32:8c:ca:
         a2:db:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:10:13 2026 by rpki-client