This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e32342e302f32312d3234203d3e203236363131.roa
File:                     3139312e3135362e32342e302f32312d3234203d3e203236363131.roa (raw, json)
Hash identifier:          Q+8166+xl+4XZ+psekqCqApmqIi2jdzivRrHmsRRcR0=
Subject key identifier:   50:9E:E9:1C:C4:57:D8:A3:33:89:D5:6B:62:BA:2B:9D:CB:83:0B:D4
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       5C7BCE6849412DE2B181585254DAB0FC94BF0535
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e32342e302f32312d3234203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:03:07 +0000
ROA not before:           Tue 06 Jan 2026 18:58:07 +0000
ROA not after:            Tue 05 Jan 2027 19:03:07 +0000
asID:                     26611
IP address blocks:        191.156.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 10:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7b:ce:68:49:41:2d:e2:b1:81:58:52:54:da:b0:fc:94:bf:05:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:07 2026 GMT
            Not After : Jan  5 19:03:07 2027 GMT
        Subject: CN=509EE91CC457D8A33389D56B62BA2B9DCB830BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4c:6e:ac:bd:45:2c:f1:52:a0:9c:89:95:c0:
                    bd:a9:a1:0e:34:ff:d9:f9:e1:1e:b4:e3:a0:ba:54:
                    65:45:c1:37:e5:ab:55:c5:4e:ad:08:26:5a:9b:fe:
                    3a:d0:2e:33:6d:f7:d1:c8:fe:cb:3c:5c:46:4a:e2:
                    07:c9:ce:62:03:c1:5c:45:0a:4c:ef:6d:cc:4c:10:
                    73:df:66:c6:46:86:22:fd:4d:3f:18:95:27:a0:2f:
                    8c:69:e2:9b:55:46:15:0c:39:7f:0c:3a:c0:c3:f2:
                    b9:67:16:b9:d1:1b:a2:d9:ed:ca:46:8e:14:6e:86:
                    df:ee:96:35:c5:5f:1c:a4:42:d2:7e:37:c9:0e:2f:
                    f6:b2:48:b0:e0:38:4f:dd:32:a3:f1:10:32:c8:36:
                    b8:d9:14:16:ed:9d:7f:73:48:8d:42:db:b5:0c:7e:
                    6a:e2:3f:b6:f3:bb:43:0d:72:e5:07:a3:26:4d:2d:
                    9e:2b:90:e6:53:2f:4a:7b:d6:93:33:38:54:5c:aa:
                    90:18:ac:3f:fa:3f:c1:60:69:fc:71:1a:12:bb:53:
                    8b:00:35:9c:2c:82:7d:19:18:29:a0:ab:5f:13:05:
                    5c:2f:66:4b:43:74:79:40:50:99:ad:e7:16:70:94:
                    5e:ff:9c:7d:b4:e4:b2:38:03:73:7a:d5:45:2e:31:
                    c6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9E:E9:1C:C4:57:D8:A3:33:89:D5:6B:62:BA:2B:9D:CB:83:0B:D4
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e32342e302f32312d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:9b:dc:77:58:a6:06:f4:e6:da:05:f8:5f:bf:27:67:78:d6:
         2f:1e:d9:a3:4d:0e:a1:ac:93:32:e5:79:e6:b4:14:e4:46:2d:
         a4:a0:60:50:8c:c4:7c:69:f1:e9:6f:36:8a:43:d0:19:14:49:
         e1:84:8d:02:0e:e9:82:9e:23:2e:ad:12:97:02:c2:e4:4c:ee:
         48:5b:da:a7:43:c5:ce:28:3a:2b:31:1a:49:1f:13:63:99:6a:
         23:30:96:e3:2b:b9:fa:8c:40:5d:12:20:73:52:1c:e1:45:7f:
         38:1b:d6:98:10:96:dc:7b:30:bc:91:30:54:07:bb:6d:74:a2:
         cb:74:bf:1b:fd:b4:36:49:42:4c:fe:6a:3c:b4:2f:e9:8a:57:
         22:44:f8:66:7a:f3:85:4c:50:b4:a4:65:7d:c2:26:ad:75:62:
         d3:fa:25:49:78:55:3a:bb:40:15:f6:33:f3:ec:07:0d:5e:32:
         a5:2a:e1:dc:29:2f:b7:65:d3:57:96:8e:ed:4e:c1:f0:91:e4:
         7d:53:36:e6:90:b2:8e:5d:a3:9d:1a:fc:dc:ef:b3:0b:c9:c3:
         e8:f2:a1:6d:44:ef:54:69:db:37:6c:f1:17:59:fa:5e:2e:52:
         66:15:1b:22:70:8d:81:17:93:d7:73:a9:f8:b1:78:56:35:dd:
         19:3a:4c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 14 01:01:25 2026 by rpki-client