This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230372e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3230372e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          t4ZYCD67wmSv8h+5GRuqBIeUoJZ8tgzhRGUBsKeIZxo=
Subject key identifier:   6F:68:07:5C:FC:8D:2A:D7:F4:B5:7D:A4:47:50:C6:35:0E:82:75:2B
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       0A45D0ED92AB618BCC196B995C8903EF8C8B106E
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230372e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 06 Jan 2026 19:23:35 +0000
ROA not before:           Tue 06 Jan 2026 19:18:35 +0000
ROA not after:            Tue 05 Jan 2027 19:23:35 +0000
asID:                     52253
IP address blocks:        190.108.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:45:d0:ed:92:ab:61:8b:cc:19:6b:99:5c:89:03:ef:8c:8b:10:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Jan  6 19:18:35 2026 GMT
            Not After : Jan  5 19:23:35 2027 GMT
        Subject: CN=6F68075CFC8D2AD7F4B57DA44750C6350E82752B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:eb:ce:82:88:e1:e8:b5:a6:ac:d7:73:26:
                    58:b0:40:4d:4a:4e:5e:07:35:5c:c8:77:7b:d2:45:
                    35:1d:af:62:92:8c:39:f4:be:f3:79:bb:c2:8b:17:
                    fe:90:a2:7a:04:6f:2e:ee:99:bf:5c:4e:dd:3c:cd:
                    21:5e:c8:a5:bd:01:19:1e:c3:2a:9e:94:82:78:f1:
                    b7:8e:95:da:a7:3e:29:63:79:2a:cd:9e:6f:fd:9e:
                    33:ab:87:37:b1:aa:c1:77:32:37:bb:e9:b6:be:65:
                    04:c5:b4:86:25:e0:62:28:39:00:57:62:4d:5b:76:
                    e0:31:ab:3c:04:18:af:cc:20:45:dd:16:b1:3a:b2:
                    e4:fd:47:0a:97:3a:ea:59:bb:13:57:1c:1b:f9:f2:
                    aa:09:b0:fd:bf:da:b0:87:6e:f4:7d:be:73:3a:66:
                    59:19:70:1c:0c:fd:22:ea:4d:21:68:a1:31:ff:1b:
                    2a:e1:df:4b:2b:a2:bc:eb:94:20:43:40:1b:c4:d0:
                    66:53:0b:38:d3:55:af:42:f9:68:eb:22:00:b6:7d:
                    8d:7f:c8:9c:af:8e:85:72:a7:ae:91:eb:56:b8:09:
                    31:69:10:4f:d2:af:13:1f:81:e6:4f:e6:3b:ee:24:
                    6d:5d:9d:43:1a:c3:df:38:b2:fe:bc:4b:76:9f:98:
                    79:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:68:07:5C:FC:8D:2A:D7:F4:B5:7D:A4:47:50:C6:35:0E:82:75:2B
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230372e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:63:57:01:86:5d:0e:4c:40:61:85:a4:90:aa:7d:69:e8:83:
         79:51:dd:ae:ff:05:4a:81:88:a9:8d:a7:a6:da:34:aa:52:0b:
         57:f6:92:66:50:98:f1:81:c7:b5:ef:5c:2e:26:b5:64:fe:ca:
         28:55:ca:82:e3:87:65:f5:00:b3:cd:02:94:89:cf:fb:9d:6c:
         08:c3:cd:cb:80:f8:f7:1e:d3:48:6e:57:18:79:bc:84:61:cf:
         28:34:90:e4:fa:e1:03:ff:fb:70:f3:6b:12:ee:f1:fd:04:4f:
         2e:d0:e3:00:18:48:51:f6:03:d1:73:67:0f:58:35:dc:a5:39:
         a2:fe:ef:47:de:c8:ae:04:d2:d9:78:4e:06:15:a2:9e:3a:04:
         ee:c8:ce:de:37:ef:4e:bf:63:b3:53:74:b3:db:50:ed:ef:9e:
         4e:00:0c:b2:5a:5b:6a:35:98:12:a3:c0:a9:4e:c8:6f:6b:75:
         e8:85:1b:8c:bf:4e:af:91:38:66:75:c3:f4:26:ab:a6:0b:8a:
         70:f8:9d:0a:74:7a:c0:b9:86:e1:12:94:57:74:d2:c9:88:df:
         46:4c:aa:fb:b3:f3:57:eb:98:7b:b1:99:a2:ca:93:12:3c:91:
         3c:91:10:4d:08:16:79:f9:b8:cd:3d:c4:ba:d3:82:ff:a5:1f:
         e6:19:91:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:20:49 2026 by rpki-client