This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230302e302f32312d3231203d3e203532323533.roa
File:                     3139302e3130382e3230302e302f32312d3231203d3e203532323533.roa (raw, json)
Hash identifier:          GDhwl3XHQzD3Wc4Sidw2aGz3JtqJkOJVQI1CM0d39sg=
Subject key identifier:   EC:6D:30:81:A0:B7:E1:65:0B:DC:9E:44:73:5A:7A:A2:CA:9F:8B:A1
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       5EB830CD52D899CD2FE4E6AE20F3F783D3D641A1
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230302e302f32312d3231203d3e203532323533.roa
Signing time:             Tue 06 Jan 2026 19:23:38 +0000
ROA not before:           Tue 06 Jan 2026 19:18:38 +0000
ROA not after:            Tue 05 Jan 2027 19:23:38 +0000
asID:                     52253
IP address blocks:        190.108.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b8:30:cd:52:d8:99:cd:2f:e4:e6:ae:20:f3:f7:83:d3:d6:41:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Jan  6 19:18:38 2026 GMT
            Not After : Jan  5 19:23:38 2027 GMT
        Subject: CN=EC6D3081A0B7E1650BDC9E44735A7AA2CA9F8BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4b:52:f2:4d:66:d1:4c:ff:a3:b5:75:2c:aa:
                    7d:60:10:9e:f1:6d:1a:d1:f2:10:d9:c8:e6:c4:a7:
                    ce:d9:7c:35:08:6e:6c:b2:a6:7a:75:04:8b:a6:39:
                    8f:68:4f:18:6b:7c:0b:c5:b4:40:18:7a:e6:61:9c:
                    e3:72:c6:01:76:d6:e4:bc:04:fe:a2:68:f6:88:96:
                    8a:c7:3a:ce:b6:58:67:94:fc:8b:fd:cf:83:2f:00:
                    5d:02:20:45:83:7f:3a:56:d8:ed:84:35:00:08:f7:
                    3d:3d:5e:7f:59:76:fb:3f:6d:fc:40:36:e9:7f:7d:
                    62:7a:dc:2b:b6:88:e5:63:a1:91:bf:92:f7:14:3f:
                    aa:9e:c8:b3:bb:25:2d:23:7e:a5:35:58:81:fb:f5:
                    c4:9b:3b:a3:a2:2b:93:40:1e:5d:c4:55:62:c0:81:
                    51:07:a7:5c:43:d5:04:96:3c:72:86:32:1f:5e:5c:
                    f8:f8:fb:f7:44:2a:c8:56:df:27:71:2f:26:e4:b0:
                    fb:b7:42:52:7d:31:7f:c9:b9:5d:6d:91:7c:54:23:
                    33:f3:d7:36:44:81:04:6e:32:43:e1:b7:4b:9b:83:
                    bf:e9:5f:15:c6:eb:69:1e:85:4c:35:86:d5:af:34:
                    27:e2:37:8f:dd:08:4c:9d:23:66:68:5c:f4:0d:ae:
                    66:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6D:30:81:A0:B7:E1:65:0B:DC:9E:44:73:5A:7A:A2:CA:9F:8B:A1
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230302e302f32312d3231203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b1:12:bd:9f:74:d0:62:f3:11:89:1f:ad:78:79:03:a1:6e:9e:
         94:57:1d:5d:35:68:d7:04:0e:16:54:06:3e:16:67:7d:56:7d:
         45:f4:db:4a:4c:85:9f:1f:bd:f2:42:59:a0:e7:20:11:b4:af:
         b0:79:98:11:c5:99:5e:4f:2b:d4:ef:5d:92:55:d9:0b:3a:b5:
         ea:2a:82:92:3c:d6:95:19:db:3c:b8:5c:c9:85:b9:68:31:82:
         47:55:bb:0b:00:b9:92:5e:c0:30:5a:9b:2a:48:37:53:f6:17:
         f8:4c:6e:cd:dc:12:ed:23:7f:d3:74:95:1a:08:c0:82:d1:ef:
         bf:37:e8:c6:74:25:34:dd:b5:8d:04:1c:7e:3d:a2:96:b4:62:
         47:ef:86:84:a9:87:b3:d2:d7:b0:47:98:80:af:64:76:1b:1a:
         19:24:2f:4d:a8:58:e6:66:76:46:04:11:02:90:4a:20:8d:b3:
         62:e3:0b:d7:f0:f0:94:76:2f:4f:0b:c6:46:fd:4b:ce:51:fa:
         b2:e8:26:c3:12:01:91:44:6f:0e:a1:77:1d:90:c1:56:2a:ce:
         8a:15:28:0d:b8:b5:56:22:0d:77:2e:61:22:6a:82:87:4a:15:
         9a:f5:2e:8b:aa:ee:4e:c2:dc:5b:0d:8b:7e:44:31:91:4e:e0:
         12:43:d1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:20:51 2026 by rpki-client