This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa
File:                     3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa (raw, json)
Hash identifier:          51fcNyLUR1Gvtg7MCXcmoV7Cq45HEsmW7/UimFDbbek=
Subject key identifier:   A3:82:5B:42:92:CA:FA:DF:57:49:35:D3:E1:57:42:CD:E4:10:EB:A1
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       68CB9C2E2F903CAB6ED00FBD953D2E92DE78EAA6
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa
Signing time:             Mon 17 Nov 2025 19:52:57 +0000
ROA not before:           Mon 17 Nov 2025 19:47:57 +0000
ROA not after:            Mon 16 Nov 2026 19:52:57 +0000
asID:                     27695
IP address blocks:        191.103.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:cb:9c:2e:2f:90:3c:ab:6e:d0:0f:bd:95:3d:2e:92:de:78:ea:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Nov 17 19:47:57 2025 GMT
            Not After : Nov 16 19:52:57 2026 GMT
        Subject: CN=A3825B4292CAFADF574935D3E15742CDE410EBA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:c8:0a:bd:c0:f9:8d:32:ab:97:35:dd:66:
                    7f:ae:14:5a:c2:62:63:a6:e9:30:7c:ca:a9:65:ce:
                    d5:57:5d:1d:39:df:d7:99:2c:21:5f:44:bc:54:ac:
                    11:76:a0:25:39:ca:a4:11:a1:b8:9b:a1:29:70:05:
                    a6:41:84:05:4b:53:b4:b9:f0:a4:07:6e:9c:3a:36:
                    fd:46:82:b9:6c:b1:49:01:77:31:90:b7:81:54:e1:
                    94:0a:e8:f8:c9:7b:93:6d:fe:99:b5:0f:c2:fa:f5:
                    12:65:c7:f0:92:1a:a1:ef:74:e1:43:92:6f:92:e2:
                    8e:42:82:b9:8d:aa:fb:fd:77:a5:12:17:8b:eb:d0:
                    41:14:77:12:0a:d6:4c:78:e7:71:f5:68:12:a3:4c:
                    20:d3:c6:8e:da:d4:e6:67:6f:36:6a:fd:b8:97:18:
                    da:df:4d:3a:ed:c4:de:00:5e:81:cd:ca:8e:5b:03:
                    85:2b:76:4b:69:bf:f3:37:45:f2:15:c3:2b:8e:94:
                    c6:f0:d9:dc:b0:e4:32:bb:ca:19:c7:71:35:29:19:
                    8b:cd:08:0d:23:56:f1:a7:a5:20:17:e6:76:05:0c:
                    00:ad:3d:74:99:f4:d2:3e:68:6b:24:c1:ee:74:fc:
                    c7:26:2e:ef:19:5b:07:62:93:b5:a0:e4:83:b9:b2:
                    e8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:82:5B:42:92:CA:FA:DF:57:49:35:D3:E1:57:42:CD:E4:10:EB:A1
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         99:27:e2:53:e7:d7:53:86:40:ff:ad:99:0c:ff:9f:fc:95:1e:
         60:05:02:d7:d9:f7:4d:94:50:5a:90:76:2a:40:48:61:84:a8:
         54:f9:f3:c4:1f:3b:54:74:a2:ee:ee:14:26:1b:3e:26:8f:c2:
         eb:5b:6a:e7:52:4a:fc:c6:fb:de:c4:5c:51:ae:f1:5b:8a:c0:
         35:ee:46:3f:7f:0a:6a:b1:ed:b9:30:17:34:0c:a6:9f:c9:2b:
         d4:7e:18:23:e4:73:19:f8:42:00:ef:78:06:aa:d8:e4:38:2e:
         d3:e2:e5:11:e9:8a:88:65:73:d9:ac:5c:2d:07:c8:b2:00:5b:
         79:75:bc:a4:35:8c:0d:ab:9c:6f:09:6c:06:d4:72:2b:c1:13:
         39:09:94:0b:27:38:b4:6c:4e:c5:58:9b:7f:93:a1:7d:72:c7:
         72:4d:d1:f1:32:52:f9:ba:ba:d4:52:68:8b:26:98:0f:31:61:
         b0:a3:e5:dc:56:03:16:96:4e:68:88:21:d3:fc:1a:da:15:07:
         56:c3:b2:bb:bb:e8:df:ec:9c:6a:48:e1:3d:94:1b:d7:cf:45:
         34:86:e9:6e:d6:cc:14:14:63:b2:c6:0b:b0:3f:8a:f4:c8:32:
         97:ba:2c:38:c2:29:d6:7d:a5:37:e9:82:2c:47:d3:49:27:6c:
         9a:26:64:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:10:40 2025 by rpki-client