This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135372e302e302f31362d3234203d3e203236363131.roa
File:                     3139312e3135372e302e302f31362d3234203d3e203236363131.roa (raw, json)
Hash identifier:          7wCheSCFJveyvww1vXFiKvGlNqD0aJYFSVddM5UYvLo=
Subject key identifier:   7A:77:5F:C9:2D:CF:10:C8:07:B1:E1:D2:D0:F4:A0:E9:0C:BF:72:09
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       257CF31C3D373578998180E79A235A5632ABF1C4
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135372e302e302f31362d3234203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:03:00 +0000
ROA not before:           Tue 06 Jan 2026 18:58:00 +0000
ROA not after:            Tue 05 Jan 2027 19:03:00 +0000
asID:                     26611
IP address blocks:        191.157.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7c:f3:1c:3d:37:35:78:99:81:80:e7:9a:23:5a:56:32:ab:f1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:00 2026 GMT
            Not After : Jan  5 19:03:00 2027 GMT
        Subject: CN=7A775FC92DCF10C807B1E1D2D0F4A0E90CBF7209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:72:9d:a7:de:89:d7:32:88:d9:82:e7:fd:
                    2b:98:b6:50:c9:9b:02:a4:11:bb:9e:18:e4:5b:be:
                    94:11:7b:4b:f6:c6:81:84:41:db:8a:7c:df:a9:98:
                    a9:ca:54:93:a6:25:20:85:bc:b2:3c:ee:35:3f:e1:
                    f8:53:31:48:7c:2a:cf:7b:84:46:a9:37:9c:ec:8e:
                    27:56:9b:56:d3:98:8d:b8:35:8c:a8:51:bd:e6:8d:
                    f4:87:76:98:67:71:8e:7d:05:1a:a3:5b:91:5a:78:
                    6f:9f:8e:ef:17:0e:f4:ae:92:c3:17:1f:72:66:9a:
                    8e:f1:b7:40:f3:99:84:35:7f:d9:39:8c:33:ff:ce:
                    6b:3b:81:69:a0:7e:a8:0c:bc:be:06:cf:cf:01:58:
                    f2:03:16:79:82:a5:a3:a4:0a:98:70:85:69:83:b7:
                    ad:2c:d7:09:92:62:bc:a3:a5:58:41:e4:3a:95:31:
                    ac:05:2e:25:20:33:c1:cc:ed:dd:f6:40:30:8c:22:
                    be:c7:d4:d8:1c:22:d3:a7:d3:4c:9a:01:50:38:be:
                    df:48:70:c3:14:13:c8:a5:c3:5c:55:78:88:3b:6f:
                    1b:49:45:27:5b:82:8b:eb:2d:7a:4e:79:91:97:5c:
                    46:7c:e3:c0:b8:ce:bb:28:b9:64:25:79:bc:1f:27:
                    3f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:77:5F:C9:2D:CF:10:C8:07:B1:E1:D2:D0:F4:A0:E9:0C:BF:72:09
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135372e302e302f31362d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:80:38:09:62:cf:8d:78:ac:f0:49:a5:db:0c:57:01:58:c5:
         58:b6:14:58:e3:18:49:85:d9:22:87:40:56:83:9f:14:0a:c0:
         ae:da:81:59:c2:cd:74:f9:0b:ff:95:6c:d2:ab:39:cd:70:50:
         f5:8a:49:00:e9:24:25:96:c1:90:e9:8e:31:1b:f9:d6:de:87:
         37:d8:e4:eb:b4:25:68:a5:33:ae:41:fc:d8:fa:9b:cd:5e:b8:
         ad:61:29:ac:38:61:95:fc:e8:36:d7:aa:40:18:e3:39:bc:70:
         35:8b:ce:d8:4a:9c:69:1d:6b:b7:1d:a0:32:fa:aa:c6:60:a4:
         5b:4f:72:1d:0b:66:36:5e:0f:f1:60:82:0f:3e:25:25:c3:0d:
         92:a7:03:38:c6:30:e6:34:55:75:08:9f:71:d2:26:63:8a:13:
         48:65:30:c7:78:e1:08:08:ad:0d:e6:a2:ef:01:7c:2d:ec:b7:
         df:b6:be:94:cb:03:07:f1:45:bb:c1:52:e1:b4:19:17:63:ac:
         4e:db:e7:98:94:3e:cc:82:2c:93:3a:ae:f3:42:9b:62:b6:91:
         a9:56:00:2c:ad:29:1f:40:3d:8b:d9:77:36:a3:7d:39:74:77:
         b4:fb:bb:44:48:1c:af:10:43:49:9a:f5:9a:46:09:6e:9d:3e:
         0e:1f:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:10:13 2026 by rpki-client