This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e37312e302e302f31372d3234203d3e203130363230.roa
File:                     3139312e37312e302e302f31372d3234203d3e203130363230.roa (raw, json)
Hash identifier:          ni5XwIm7WOEw9PXeUWRoV103wotIBWacS9dNRCSk4mE=
Subject key identifier:   A3:77:D4:C8:E3:6B:33:DB:70:40:1C:BF:14:D4:D4:A8:62:FD:4C:33
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       47924A05EB38A03C1AE941BC159586BE6F87A898
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e37312e302e302f31372d3234203d3e203130363230.roa
Signing time:             Tue 06 Jan 2026 19:03:07 +0000
ROA not before:           Tue 06 Jan 2026 18:58:07 +0000
ROA not after:            Tue 05 Jan 2027 19:03:07 +0000
asID:                     10620
IP address blocks:        191.71.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:92:4a:05:eb:38:a0:3c:1a:e9:41:bc:15:95:86:be:6f:87:a8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:07 2026 GMT
            Not After : Jan  5 19:03:07 2027 GMT
        Subject: CN=A377D4C8E36B33DB70401CBF14D4D4A862FD4C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:49:0e:22:e5:ab:5a:8b:18:60:16:c5:62:
                    44:b2:b0:6f:51:e7:31:b0:2f:04:9c:82:d3:d3:1c:
                    0a:33:ea:23:32:74:b8:8f:0d:26:9e:cf:fb:4b:c8:
                    f3:3d:cc:62:84:24:1c:1b:40:73:de:d9:b6:09:56:
                    e3:ef:35:31:59:74:75:c5:98:c9:13:51:5c:19:85:
                    52:2d:0f:81:2c:2f:17:32:fe:4b:48:96:ff:56:8c:
                    53:fd:2b:2c:d0:04:71:29:91:4c:e6:76:ee:b6:3d:
                    84:78:e4:d1:25:60:86:a7:98:f5:2f:b2:44:99:e7:
                    52:dc:3d:ca:a0:3f:77:8c:85:09:1b:02:d0:60:67:
                    10:8e:c7:50:fe:78:6a:fd:99:33:1e:b5:b3:52:4d:
                    cb:fd:67:a5:e5:1d:05:67:af:79:0f:68:c1:15:64:
                    4b:9c:8e:d7:51:8e:e4:de:d0:9b:88:97:db:f0:b9:
                    20:26:10:10:98:42:26:eb:1c:92:df:de:b0:50:48:
                    70:f0:77:22:e1:37:27:35:17:0c:b8:5e:1b:71:28:
                    a6:a5:64:5b:bb:01:41:e2:b1:10:e8:a4:b3:d4:a5:
                    27:3a:c3:ae:90:a2:b3:ff:06:66:9d:cd:61:7d:64:
                    2e:8f:cb:16:87:dc:e0:8a:82:ed:56:05:10:4b:84:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:77:D4:C8:E3:6B:33:DB:70:40:1C:BF:14:D4:D4:A8:62:FD:4C:33
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e37312e302e302f31372d3234203d3e203130363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.71.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         87:af:c4:18:b2:14:69:40:2f:cf:af:b9:b5:2a:6b:73:1d:38:
         a0:14:07:03:b6:7f:29:b3:9d:de:47:c1:2d:00:c5:dc:92:ef:
         46:3b:89:43:83:ec:5f:d3:1e:f5:35:88:06:f1:4f:e2:62:89:
         09:91:3f:92:99:7f:a1:f8:b8:b9:c2:e4:39:fb:f7:76:49:fa:
         40:6f:1a:20:c1:4e:5c:c8:d3:26:ff:0c:63:f7:8d:a4:55:99:
         bf:b5:59:d8:3b:f8:9f:d2:b4:11:45:a1:33:b8:13:69:e1:b6:
         4f:b3:1c:49:9b:79:56:b5:7b:72:8c:34:8e:11:35:16:21:2b:
         14:39:15:12:0e:97:b7:5b:c6:b9:8a:2a:a1:16:7e:aa:4f:81:
         d5:b1:79:06:45:63:35:bf:1a:d8:d7:ba:de:80:05:54:18:8f:
         31:e3:ac:98:73:6f:41:b0:d9:80:01:f5:b8:20:5d:38:4a:39:
         e4:13:64:9c:82:f8:83:2f:5f:ea:11:29:6c:c0:dc:96:e3:44:
         f4:d2:23:5c:64:23:07:70:25:3b:22:22:a6:ff:a2:e5:64:7e:
         d7:0f:d5:ee:2c:73:bc:11:77:ea:22:0e:3c:e8:24:16:f3:93:
         12:00:4f:4f:82:60:9e:5f:fd:f2:ab:dd:e2:3a:f6:a8:6a:12:
         7d:66:dc:5e
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUR5JKBes4oDwa6UG8FZWGvm+HqJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNjAxMDYxODU4MDdaFw0yNzAxMDUxOTAzMDdaMDMxMTAvBgNV
BAMTKEEzNzdENEM4RTM2QjMzREI3MDQwMUNCRjE0RDRENEE4NjJGRDRDMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0eUkOIuWrWosYYBbFYkSysG9R
5zGwLwScgtPTHAoz6iMydLiPDSaez/tLyPM9zGKEJBwbQHPe2bYJVuPvNTFZdHXF
mMkTUVwZhVItD4EsLxcy/ktIlv9WjFP9KyzQBHEpkUzmdu62PYR45NElYIanmPUv
skSZ51LcPcqgP3eMhQkbAtBgZxCOx1D+eGr9mTMetbNSTcv9Z6XlHQVnr3kPaMEV
ZEucjtdRjuTe0JuIl9vwuSAmEBCYQibrHJLf3rBQSHDwdyLhNyc1Fwy4XhtxKKal
ZFu7AUHisRDopLPUpSc6w66QorP/BmadzWF9ZC6PyxaH3OCKgu1WBRBLhNWLAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUo3fUyONrM9twQBy/FNTUqGL9TDMwHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMTJlMzczMTJlMzAyZTMwMmYz
MTM3MmQzMjM0MjAzZDNlMjAzMTMwMzYzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHv0cAMA0GCSqG
SIb3DQEBCwUAA4IBAQCHr8QYshRpQC/Pr7m1KmtzHTigFAcDtn8ps53eR8EtAMXc
ku9GO4lDg+xf0x71NYgG8U/iYokJkT+SmX+h+Li5wuQ5+/d2SfpAbxogwU5cyNMm
/wxj942kVZm/tVnYO/if0rQRRaEzuBNp4bZPsxxJm3lWtXtyjDSOETUWISsUORUS
Dpe3W8a5iiqhFn6qT4HVsXkGRWM1vxrY17regAVUGI8x46yYc29BsNmAAfW4IF04
SjnkE2ScgviDL1/qESlswNyW40T00iNcZCMHcCU7IiKm/6LlZH7XD9XuLHO8EXfq
Ig486CQW85MSAE9PgmCeX/3yq93iOvaoahJ9Ztxe
-----END CERTIFICATE-----
Generated at Tue Jan 13 23:17:57 2026 by rpki-client