This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e37312e3132382e302f31372d3234203d3e203134303830.roa
File:                     3139312e37312e3132382e302f31372d3234203d3e203134303830.roa (raw, json)
Hash identifier:          ldoy5Bq2nO8YFmZUCJdSvndc9ZVm4jUrAaP7CfTg5Yc=
Subject key identifier:   50:34:7D:EF:E5:5B:E4:F8:31:32:DD:91:8F:2B:43:37:5D:67:47:42
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       79E1B1FA3DDC728DB778C5A2BAC56B3B78C1A0C1
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e37312e3132382e302f31372d3234203d3e203134303830.roa
Signing time:             Tue 06 Jan 2026 19:03:11 +0000
ROA not before:           Tue 06 Jan 2026 18:58:11 +0000
ROA not after:            Tue 05 Jan 2027 19:03:11 +0000
asID:                     14080
IP address blocks:        191.71.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e1:b1:fa:3d:dc:72:8d:b7:78:c5:a2:ba:c5:6b:3b:78:c1:a0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:11 2026 GMT
            Not After : Jan  5 19:03:11 2027 GMT
        Subject: CN=50347DEFE55BE4F83132DD918F2B43375D674742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:0f:fc:e7:83:b5:24:72:20:65:8a:93:10:
                    9f:46:01:b0:1d:c0:a8:db:68:c9:f8:d8:8c:af:db:
                    cc:46:23:26:09:96:8f:c1:99:52:78:28:c0:d1:4d:
                    47:50:78:25:a4:98:c2:b7:2a:ae:d9:6c:41:f9:97:
                    cd:a5:48:30:d0:f7:e2:a8:47:e3:78:e5:c7:6a:80:
                    20:8c:ff:b9:4d:4c:6a:21:a9:0f:64:42:20:c4:da:
                    bc:99:ea:60:be:79:cd:70:31:d6:a2:8e:3b:81:c9:
                    e7:a5:2f:bc:f2:f0:e7:21:38:c1:2a:1f:8f:19:32:
                    18:b8:c4:45:d5:85:69:20:37:c9:5c:f3:0f:6b:1a:
                    0a:37:f7:41:b3:d6:e3:72:07:7d:74:7e:a4:6d:93:
                    28:f1:03:6e:c6:b9:ae:60:2f:1b:ce:2b:3e:24:59:
                    86:60:ee:b9:e9:02:07:0d:2a:05:58:66:52:af:e7:
                    9f:67:ec:9c:03:c1:63:4f:cd:a4:bd:af:de:79:67:
                    c0:d8:72:e6:c8:70:31:60:91:91:76:25:2b:35:5d:
                    f5:67:f9:fd:96:94:7a:23:fb:d9:40:45:27:69:e9:
                    86:7f:83:90:1d:34:5a:2c:70:29:ce:0e:64:92:dc:
                    c3:79:b8:1c:ee:ca:b3:3e:d8:40:47:b3:40:51:8f:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:34:7D:EF:E5:5B:E4:F8:31:32:DD:91:8F:2B:43:37:5D:67:47:42
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e37312e3132382e302f31372d3234203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.71.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2e:72:fb:c2:85:68:b6:f0:d3:b4:20:74:bf:6f:e3:95:d4:44:
         54:e6:9b:4d:7d:89:c1:77:a8:e6:33:32:cb:79:93:1a:4b:b3:
         fa:8c:ea:94:9c:3e:a1:f9:2e:51:4a:db:6c:76:76:7b:9e:43:
         74:42:9d:d7:39:eb:a2:3b:d9:84:c8:d6:0e:8c:41:cd:38:01:
         52:3e:d6:34:c7:47:5a:16:a4:b8:a2:19:36:35:bc:51:5f:fc:
         3b:d2:3f:9d:3a:2f:a0:93:3e:c0:0b:86:25:98:9a:7a:e9:fd:
         54:4c:aa:cc:56:f2:13:1a:57:26:10:f0:c1:3d:c3:38:0c:5b:
         83:7d:80:52:32:32:27:34:90:82:e4:e3:23:26:c8:16:c7:fd:
         8e:e7:33:08:4b:9a:b4:e3:9c:8f:77:f9:97:fd:24:33:d4:c9:
         ba:ce:ea:08:42:c8:90:c2:3d:7e:4f:74:3c:21:cd:cd:c9:de:
         cc:c8:50:d3:39:61:75:28:4e:a7:ea:c9:86:2a:cc:a0:42:2e:
         bb:d0:d3:b8:8a:d5:2a:a3:ef:49:8c:64:6a:d3:4a:2c:7b:62:
         ec:c9:3b:7d:e7:4e:eb:d6:72:ea:47:b6:43:84:ee:ac:9d:f4:
         14:d0:4b:61:7d:3b:cc:5a:34:de:94:52:49:61:4b:34:3c:bf:
         a7:f8:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 22:15:07 2026 by rpki-client