This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e34332e302e302f31372d3137203d3e203133343839.roa
File:                     3138362e34332e302e302f31372d3137203d3e203133343839.roa (raw, json)
Hash identifier:          yEMYZhajPZJbH0rDf+HgSOPqraLS/SH55d4BR4F5xKg=
Subject key identifier:   51:DA:CC:AD:D4:78:56:DD:7A:29:19:5E:E0:0D:5D:34:70:B4:DF:81
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       03DE9FFB126FADE5F50E944F7D45D7E870FCB852
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e34332e302e302f31372d3137203d3e203133343839.roa
Signing time:             Thu 11 Dec 2025 20:54:40 +0000
ROA not before:           Thu 11 Dec 2025 20:49:40 +0000
ROA not after:            Thu 10 Dec 2026 20:54:40 +0000
asID:                     13489
IP address blocks:        186.43.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:de:9f:fb:12:6f:ad:e5:f5:0e:94:4f:7d:45:d7:e8:70:fc:b8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Dec 11 20:49:40 2025 GMT
            Not After : Dec 10 20:54:40 2026 GMT
        Subject: CN=51DACCADD47856DD7A29195EE00D5D3470B4DF81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:14:de:59:43:b0:b9:f4:72:6a:ea:ff:9c:59:
                    68:c0:7d:b5:5d:4a:9a:60:89:d8:f7:93:2f:44:20:
                    59:cd:96:54:98:e6:2f:b9:ee:f5:45:9e:67:77:64:
                    78:54:e8:83:8d:a3:a1:de:6e:30:3a:64:df:ce:40:
                    78:aa:b1:ad:22:98:65:17:b1:84:b0:94:b6:6e:c4:
                    e1:e0:53:fc:8e:68:f1:f0:2e:b6:1d:f5:32:27:88:
                    92:7e:6e:73:07:c9:c8:bb:42:fd:01:70:37:5c:9c:
                    06:7c:4d:86:1f:e4:8a:f2:3b:65:50:14:74:bc:51:
                    6f:c0:ba:dc:07:41:13:90:ba:01:0f:06:eb:4d:78:
                    a2:16:ac:78:71:79:8f:8c:2d:31:c4:8e:68:8e:64:
                    78:96:e4:1e:7a:8b:30:34:90:01:76:c7:a4:01:81:
                    0a:44:d7:6c:45:56:0c:d0:77:bd:6f:5d:85:44:1e:
                    2d:bb:4c:0f:27:e2:d0:a6:06:84:0b:68:90:f6:7f:
                    12:a6:15:7f:fe:8c:12:8b:79:58:5d:d2:ed:10:83:
                    f7:b2:2c:24:30:c9:79:95:f5:f1:b8:a8:7d:b4:ea:
                    4d:24:b4:2f:ce:52:cb:0d:f4:3c:b6:71:1f:6a:c2:
                    fc:24:ab:09:81:8e:f2:75:eb:27:7f:99:5f:18:8b:
                    1b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DA:CC:AD:D4:78:56:DD:7A:29:19:5E:E0:0D:5D:34:70:B4:DF:81
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e34332e302e302f31372d3137203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.43.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         11:49:dd:cd:24:81:13:09:ac:83:16:b0:86:61:7f:3d:83:2a:
         5c:c0:ac:f6:76:72:1b:59:ac:aa:17:e3:f1:51:aa:0f:4d:83:
         ac:d5:42:95:7e:ea:d3:fe:17:b4:20:9f:a4:39:e4:8e:65:af:
         93:a3:16:34:43:cf:64:e7:a4:83:ad:df:7f:87:a8:06:a4:24:
         d7:73:18:8e:d1:86:d5:c7:0b:9f:47:df:44:f2:58:0f:31:90:
         6c:69:e7:7d:c1:8f:7b:2f:ac:f7:57:9b:f2:6c:1b:7f:60:cf:
         d7:eb:aa:2f:95:76:8e:a4:81:ef:bf:04:e7:91:f0:f9:33:06:
         3d:d0:10:54:47:d3:1d:12:94:c0:6f:64:0e:49:39:06:ad:64:
         56:10:2c:fd:4a:25:9f:75:0f:e7:2f:e8:ad:87:e8:8b:db:92:
         45:f2:e4:8f:a2:54:f3:95:e5:f8:f1:ed:39:ef:71:29:ac:b6:
         7a:86:34:78:25:8d:41:97:90:f9:e3:0f:bf:fb:89:42:07:ce:
         3f:de:f3:1a:66:87:97:b1:32:f4:77:69:1a:9e:c5:7f:e8:94:
         26:9e:f5:84:4c:1f:8c:ed:49:39:98:f5:d9:7c:ca:7a:a1:7a:
         58:e8:62:d2:94:d4:4e:36:92:2c:97:4c:4d:0e:aa:cb:11:dd:
         16:28:13:51
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUA96f+xJvreX1DpRPfUXX6HD8uFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNTEyMTEyMDQ5NDBaFw0yNjEyMTAyMDU0NDBaMDMxMTAvBgNV
BAMTKDUxREFDQ0FERDQ3ODU2REQ3QTI5MTk1RUUwMEQ1RDM0NzBCNERGODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFN5ZQ7C59HJq6v+cWWjAfbVd
Sppgidj3ky9EIFnNllSY5i+57vVFnmd3ZHhU6IONo6HebjA6ZN/OQHiqsa0imGUX
sYSwlLZuxOHgU/yOaPHwLrYd9TIniJJ+bnMHyci7Qv0BcDdcnAZ8TYYf5IryO2VQ
FHS8UW/AutwHQROQugEPButNeKIWrHhxeY+MLTHEjmiOZHiW5B56izA0kAF2x6QB
gQpE12xFVgzQd71vXYVEHi27TA8n4tCmBoQLaJD2fxKmFX/+jBKLeVhd0u0Qg/ey
LCQwyXmV9fG4qH206k0ktC/OUssN9Dy2cR9qwvwkqwmBjvJ16yd/mV8Yixu7AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUUdrMrdR4Vt16KRle4A1dNHC034EwHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMxMzgzNjJlMzQzMzJlMzAyZTMwMmYz
MTM3MmQzMTM3MjAzZDNlMjAzMTMzMzQzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHuisAMA0GCSqG
SIb3DQEBCwUAA4IBAQARSd3NJIETCayDFrCGYX89gypcwKz2dnIbWayqF+PxUaoP
TYOs1UKVfurT/he0IJ+kOeSOZa+ToxY0Q89k56SDrd9/h6gGpCTXcxiO0YbVxwuf
R99E8lgPMZBsaed9wY97L6z3V5vybBt/YM/X66ovlXaOpIHvvwTnkfD5MwY90BBU
R9MdEpTAb2QOSTkGrWRWECz9SiWfdQ/nL+ith+iL25JF8uSPolTzleX48e0573Ep
rLZ6hjR4JY1Bl5D54w+/+4lCB84/3vMaZoeXsTL0d2kansV/6JQmnvWETB+M7Uk5
mPXZfMp6oXpY6GLSlNRONpIsl0xNDqrLEd0WKBNR
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:46:52 2025 by rpki-client