This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e36342e302e302f31322d3234203d3e203236363131.roa
File:                     3139312e36342e302e302f31322d3234203d3e203236363131.roa (raw, json)
Hash identifier:          1Pe7E1NA9Qj4K7ZdzO6O/hAY0GxOawkWiBhVJUMahLg=
Subject key identifier:   68:2E:18:F1:71:3D:92:4F:3B:C6:19:DE:2B:47:E9:67:01:EC:57:82
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       5B818A8B3D2E6E8CE6DFC7AFB68E10DC4EE27011
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e36342e302e302f31322d3234203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:03:08 +0000
ROA not before:           Tue 06 Jan 2026 18:58:08 +0000
ROA not after:            Tue 05 Jan 2027 19:03:08 +0000
asID:                     26611
IP address blocks:        191.64.0.0/12 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:81:8a:8b:3d:2e:6e:8c:e6:df:c7:af:b6:8e:10:dc:4e:e2:70:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:08 2026 GMT
            Not After : Jan  5 19:03:08 2027 GMT
        Subject: CN=682E18F1713D924F3BC619DE2B47E96701EC5782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:22:30:fa:d6:4a:d9:33:a5:fd:10:53:99:2b:
                    13:82:88:d3:20:e5:38:0d:bb:05:9e:05:aa:21:27:
                    51:8d:85:d9:b9:f0:b7:48:4a:e6:5a:be:41:8b:11:
                    2f:65:05:8b:09:0c:e3:e9:15:24:3f:c5:fa:56:bf:
                    be:03:79:b2:1c:e9:71:e6:b2:5b:af:83:48:c0:06:
                    45:c9:e6:8f:97:1a:36:06:8c:9a:8b:78:20:8c:3a:
                    9c:05:f6:a5:df:2d:11:a5:db:a6:6f:99:ad:24:8c:
                    97:e5:e0:44:65:d2:69:f1:82:bc:3a:dc:cd:0a:c1:
                    7c:47:89:0d:17:55:f5:ae:cb:65:c5:da:cc:96:59:
                    71:b2:bb:03:7c:02:04:f0:5c:2c:ff:88:8a:22:84:
                    6d:f1:c4:08:d8:49:07:72:cf:6d:b7:a0:33:9b:c7:
                    47:ae:a7:a0:88:fd:63:d8:fb:c6:fa:bb:04:33:f0:
                    a1:23:23:a3:c0:72:01:b2:0d:0b:87:d5:9d:e8:a6:
                    6f:a6:05:07:53:2d:79:0a:80:fc:b3:16:30:e1:07:
                    72:eb:26:aa:de:fb:69:a6:96:d7:7a:4e:9b:70:38:
                    76:bf:3c:d6:c2:9e:7a:72:db:54:48:04:51:c7:c5:
                    d4:ee:d6:0f:16:4d:e2:60:a6:0b:86:7f:09:a7:30:
                    c7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2E:18:F1:71:3D:92:4F:3B:C6:19:DE:2B:47:E9:67:01:EC:57:82
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e36342e302e302f31322d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.64.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         41:a3:eb:b0:67:fc:d3:df:1d:13:1b:08:86:31:0b:28:77:e4:
         4b:8a:10:4c:a8:58:bc:cf:93:d9:5f:f9:98:42:02:d8:01:aa:
         cb:6e:7b:73:6f:64:03:a1:ac:88:65:c8:88:a0:fd:cc:18:aa:
         97:ea:8a:fc:62:70:18:4a:ad:44:25:07:33:00:b0:19:18:8a:
         41:fd:60:ee:e9:f7:36:86:86:d7:46:50:c6:2c:4f:48:dd:3f:
         21:90:90:d6:79:1e:b4:73:de:58:c4:04:10:07:94:f0:a3:0a:
         3b:0a:4c:de:fe:b1:25:f1:77:7b:9c:4b:4e:21:90:10:fe:a6:
         4b:91:d8:0b:23:84:f6:e7:74:a1:e0:4c:fc:ac:5d:98:af:66:
         41:0c:f0:36:34:05:8a:73:71:0f:d3:79:e0:13:94:85:b4:fa:
         2c:f5:ff:39:08:49:b3:d7:b0:a2:a3:aa:ec:fd:09:ff:40:06:
         00:43:af:c3:62:81:2c:c7:6d:ad:ff:2c:15:94:5f:16:0e:f0:
         b0:f7:74:a3:34:ec:92:7d:89:3e:1d:76:20:7f:75:90:a9:9a:
         7d:2e:d2:4b:20:37:d2:47:e4:8d:c0:16:cc:92:5a:c9:b6:19:
         19:70:1c:3c:7a:e9:33:80:bd:b7:d7:f9:ac:57:23:0b:f6:70:
         03:15:f5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:10:07 2026 by rpki-client