This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3135312e3139322e302f31382d3138203d3e203133343839.roa
File:                     3139302e3135312e3139322e302f31382d3138203d3e203133343839.roa (raw, json)
Hash identifier:          DsoKkKpIIlnk08Z1a55MGcxKbWFgWF7pUI1hAMB5l84=
Subject key identifier:   B4:0A:95:39:1A:89:B7:80:9C:EB:71:0B:38:43:EB:21:EC:20:5B:8A
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       47D0E7F966A3E1963CEF9AFCE30E2A6EE8A35129
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3135312e3139322e302f31382d3138203d3e203133343839.roa
Signing time:             Tue 06 Jan 2026 19:27:49 +0000
ROA not before:           Tue 06 Jan 2026 19:22:49 +0000
ROA not after:            Tue 05 Jan 2027 19:27:49 +0000
asID:                     13489
IP address blocks:        190.151.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 07:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d0:e7:f9:66:a3:e1:96:3c:ef:9a:fc:e3:0e:2a:6e:e8:a3:51:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Jan  6 19:22:49 2026 GMT
            Not After : Jan  5 19:27:49 2027 GMT
        Subject: CN=B40A95391A89B7809CEB710B3843EB21EC205B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:73:42:3c:a5:d8:f6:70:d4:f4:1d:02:f6:91:
                    2c:65:91:8e:be:24:92:fc:0b:02:63:8c:4c:48:67:
                    64:41:5b:c7:f0:fd:c0:8e:d9:82:13:af:fd:5e:52:
                    88:ae:6a:cd:de:ed:91:f9:80:d3:ba:b9:84:fa:50:
                    5e:3f:96:ba:2d:27:27:72:da:b5:0a:c9:30:55:a5:
                    61:d6:f9:25:b3:8d:9a:66:cf:86:45:02:3b:97:1f:
                    94:e9:06:50:9a:ab:66:12:84:95:f4:33:39:b3:53:
                    9c:3f:d5:42:e9:43:d0:fa:97:42:4f:d7:6d:7a:45:
                    56:76:03:7b:02:d3:71:9d:d0:92:b0:2e:d0:3d:de:
                    24:2f:64:79:01:1b:73:95:b6:5a:d8:73:e0:26:af:
                    76:73:43:39:ec:ce:78:8a:0a:12:2f:cf:99:73:0e:
                    c7:19:50:ba:c7:ab:af:4d:16:63:98:c1:85:d5:a0:
                    26:2c:a3:b6:1c:84:19:3a:45:6f:d3:9b:7e:9d:fe:
                    94:a2:cd:0c:54:fa:7b:77:25:61:b6:97:7c:5b:d0:
                    72:73:f2:0c:8a:5a:56:82:69:c6:a5:1d:41:28:22:
                    8a:d3:39:8a:60:e3:76:01:bd:44:3b:08:0a:08:e4:
                    61:df:05:8f:7f:74:f3:fc:f6:af:0c:fa:66:18:28:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0A:95:39:1A:89:B7:80:9C:EB:71:0B:38:43:EB:21:EC:20:5B:8A
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e3135312e3139322e302f31382d3138203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6b:f2:52:34:c5:af:8b:53:4b:8f:d3:f5:ef:1f:5b:d6:29:13:
         c7:25:ba:87:ad:c8:22:12:8e:d6:5e:ed:2a:53:0e:a5:18:88:
         28:3f:f6:6a:38:c4:31:b5:fd:ea:66:0e:48:64:33:5b:b0:25:
         bb:9e:f2:8d:60:9e:7b:e8:0d:3e:77:09:8c:4a:6f:de:88:f4:
         a3:77:96:96:15:ce:70:5c:34:53:47:f9:f3:16:c5:0f:e0:1d:
         39:c4:9d:99:32:43:a6:2f:94:1d:c4:e7:62:16:0e:cd:4b:b1:
         74:ee:88:01:f8:40:f5:d7:2b:97:6c:b0:8f:55:64:6e:34:17:
         34:91:67:f3:bf:05:c6:ec:0d:92:29:20:19:79:96:83:1b:ff:
         97:2e:aa:f9:4b:9d:44:54:3b:15:e4:92:19:77:b8:47:d9:d7:
         8e:90:50:8f:39:c4:38:24:4f:5d:94:b6:90:79:c5:6f:8f:8c:
         f2:a8:f4:10:cb:8a:52:df:29:5c:f3:d0:5a:17:85:e0:83:1a:
         0a:50:9d:a3:5f:29:e6:0d:01:2b:05:34:ab:28:4a:66:28:7e:
         18:cc:70:0a:7e:21:06:e0:ed:3a:0a:d4:ed:1c:ef:7e:a5:08:
         55:de:da:b4:84:3f:5f:64:4c:9e:30:5e:db:0a:78:f0:41:b1:
         26:06:37:10
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUR9Dn+Waj4ZY875r84w4qbuijUSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNjAxMDYxOTIyNDlaFw0yNzAxMDUxOTI3NDlaMDMxMTAvBgNV
BAMTKEI0MEE5NTM5MUE4OUI3ODA5Q0VCNzEwQjM4NDNFQjIxRUMyMDVCOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCac0I8pdj2cNT0HQL2kSxlkY6+
JJL8CwJjjExIZ2RBW8fw/cCO2YITr/1eUoiuas3e7ZH5gNO6uYT6UF4/lrotJydy
2rUKyTBVpWHW+SWzjZpmz4ZFAjuXH5TpBlCaq2YShJX0MzmzU5w/1ULpQ9D6l0JP
1216RVZ2A3sC03Gd0JKwLtA93iQvZHkBG3OVtlrYc+Amr3ZzQznszniKChIvz5lz
DscZULrHq69NFmOYwYXVoCYso7YchBk6RW/Tm36d/pSizQxU+nt3JWG2l3xb0HJz
8gyKWlaCacalHUEoIorTOYpg43YBvUQ7CAoI5GHfBY9/dPP89q8M+mYYKAqlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUtAqVORqJt4Cc63ELOEPrIewgW4owHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMxMzkzMDJlMzEzNTMxMmUzMTM5MzIy
ZTMwMmYzMTM4MmQzMTM4MjAzZDNlMjAzMTMzMzQzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGvpfA
MA0GCSqGSIb3DQEBCwUAA4IBAQBr8lI0xa+LU0uP0/XvH1vWKRPHJbqHrcgiEo7W
Xu0qUw6lGIgoP/ZqOMQxtf3qZg5IZDNbsCW7nvKNYJ576A0+dwmMSm/eiPSjd5aW
Fc5wXDRTR/nzFsUP4B05xJ2ZMkOmL5QdxOdiFg7NS7F07ogB+ED11yuXbLCPVWRu
NBc0kWfzvwXG7A2SKSAZeZaDG/+XLqr5S51EVDsV5JIZd7hH2deOkFCPOcQ4JE9d
lLaQecVvj4zyqPQQy4pS3ylc89BaF4XggxoKUJ2jXynmDQErBTSrKEpmKH4YzHAK
fiEG4O06CtTtHO9+pQhV3tq0hD9fZEyeMF7bCnjwQbEmBjcQ
-----END CERTIFICATE-----
Generated at Fri Jan 23 02:26:03 2026 by rpki-client