This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230312e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3230312e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          MJqQzQU8HlNJ6VNeE7r3OEoNjE5M3k4jQ0bOFlbGf2k=
Subject key identifier:   41:E5:F5:2E:87:AA:52:4A:16:3C:2E:EE:45:0A:59:09:BF:D5:31:30
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       4CEE43F30B7F2A5E33701633F235B7FC739BF48A
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230312e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 06 Jan 2026 19:23:37 +0000
ROA not before:           Tue 06 Jan 2026 19:18:37 +0000
ROA not after:            Tue 05 Jan 2027 19:23:37 +0000
asID:                     52253
IP address blocks:        190.108.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ee:43:f3:0b:7f:2a:5e:33:70:16:33:f2:35:b7:fc:73:9b:f4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Jan  6 19:18:37 2026 GMT
            Not After : Jan  5 19:23:37 2027 GMT
        Subject: CN=41E5F52E87AA524A163C2EEE450A5909BFD53130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:3c:81:44:31:2d:72:4f:73:db:d5:04:0b:
                    16:9a:28:6b:82:37:72:ca:ca:e4:cb:cc:24:6e:2f:
                    48:df:1d:d2:4a:3e:e5:c0:14:e0:f1:18:6c:ed:fc:
                    43:ef:59:e7:59:2c:0a:c1:19:89:24:21:44:8b:ac:
                    2b:4d:69:a1:07:9b:c1:41:98:0d:01:28:9b:63:6f:
                    c1:83:8b:1b:e9:68:a9:f3:a1:da:97:13:ed:34:97:
                    b2:0d:08:fe:83:bb:a0:56:eb:7f:9b:4e:2c:92:5c:
                    7c:cb:38:ee:39:81:52:29:83:25:76:b1:01:9a:9b:
                    ba:90:26:20:9a:1b:b9:bc:7d:ab:27:35:e9:0a:d1:
                    d2:6b:46:36:8a:6a:23:be:01:cc:47:cb:4a:20:a3:
                    f4:97:6f:f3:0e:7b:3a:ae:ae:70:38:24:24:e5:dc:
                    4c:93:ed:4f:52:6e:98:07:c0:88:f6:c4:05:95:d5:
                    5c:94:e3:be:1e:e7:d7:a9:4c:22:79:f7:31:5b:51:
                    ae:ab:88:f8:0e:d3:b9:27:c4:31:0d:c5:65:50:85:
                    ab:91:d8:6d:b7:e3:98:80:5a:ad:29:66:27:7e:86:
                    b7:71:eb:7d:97:3e:d9:f2:05:83:2b:c5:2a:ff:15:
                    c0:3a:2d:a3:11:5e:43:ab:e8:bd:08:52:52:f5:32:
                    3c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E5:F5:2E:87:AA:52:4A:16:3C:2E:EE:45:0A:59:09:BF:D5:31:30
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230312e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:5b:f8:e9:7b:78:df:64:8e:a7:93:25:d8:d2:63:39:ba:b4:
         04:b5:59:3a:60:7a:19:de:98:14:a3:b6:2f:32:57:72:77:bb:
         a9:00:e6:d6:e5:0f:29:61:87:58:04:5d:69:6e:74:bb:e3:70:
         dd:b1:ef:5e:12:d8:e1:80:05:fe:b2:da:d7:7e:d9:b2:23:97:
         2b:e3:ba:ee:8e:00:b2:97:d0:12:57:d0:e9:a1:cc:dc:9b:b1:
         d7:c3:16:29:8b:e7:92:89:ef:32:d0:2d:aa:08:27:65:63:52:
         28:ed:15:3c:1b:20:1f:e7:77:92:c7:13:a5:eb:1a:73:68:a6:
         ea:4f:cb:3c:3d:01:37:f4:dc:a8:e9:9b:c1:f6:95:e9:d5:12:
         f1:00:ec:3a:8c:13:97:b7:e9:f0:be:db:7e:15:c8:29:6a:96:
         27:2b:23:cb:62:32:6b:e2:94:3b:ec:3d:59:b6:82:f4:f3:5f:
         6c:68:ac:39:f8:7e:08:91:af:8d:92:c3:30:72:9a:c1:63:a5:
         90:df:55:af:b8:21:0e:c9:c0:c7:a1:42:62:17:4e:f6:5b:b1:
         e8:6d:08:83:27:c1:3c:2a:9d:50:b9:c0:29:52:20:de:1d:1f:
         a9:68:b3:1c:43:2d:1d:45:02:d4:f2:cd:42:d7:b3:72:b3:19:
         a2:28:d0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:21:11 2026 by rpki-client