This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230382e302f32312d3234203d3e203532323533.roa
File:                     3139302e3130382e3230382e302f32312d3234203d3e203532323533.roa (raw, json)
Hash identifier:          /IEFzPdiVNCMrWtasaY3b/HjEKmSe0fVBj3WaS48+c8=
Subject key identifier:   71:01:73:05:BA:F2:DE:52:D5:4B:F4:FA:EB:AF:60:11:AC:89:F9:E3
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       40893A24F594BE124C063A19EE9B691D9BF2AE96
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230382e302f32312d3234203d3e203532323533.roa
Signing time:             Tue 06 Jan 2026 19:23:38 +0000
ROA not before:           Tue 06 Jan 2026 19:18:38 +0000
ROA not after:            Tue 05 Jan 2027 19:23:38 +0000
asID:                     52253
IP address blocks:        190.108.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:89:3a:24:f5:94:be:12:4c:06:3a:19:ee:9b:69:1d:9b:f2:ae:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Jan  6 19:18:38 2026 GMT
            Not After : Jan  5 19:23:38 2027 GMT
        Subject: CN=71017305BAF2DE52D54BF4FAEBAF6011AC89F9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:89:0c:3c:f6:89:f0:d7:77:c0:f4:34:09:
                    fe:08:78:76:f0:4b:fb:66:7e:05:24:1a:e0:ab:35:
                    c8:27:d5:64:ea:4e:a9:75:d2:18:b2:3e:ce:d1:7f:
                    a1:59:4b:fd:a5:76:d9:a8:f6:4f:69:b8:7d:1a:bd:
                    af:80:68:0b:5d:92:37:5f:df:d3:10:8a:e3:a9:63:
                    96:18:d0:6e:e9:b6:96:da:0a:64:2f:fe:c4:e2:fb:
                    61:27:21:db:09:d0:db:63:dc:52:2f:b5:dc:01:43:
                    d6:b2:a8:af:77:ca:02:e3:54:70:9f:60:d5:a8:4d:
                    8e:89:af:94:76:1b:e7:be:52:e8:10:0f:ea:2a:06:
                    9b:87:b0:81:a7:80:b1:56:44:65:85:49:a5:ef:30:
                    c7:ac:ea:bd:e5:68:15:30:c2:d4:a3:0f:44:3d:a2:
                    82:73:b5:1e:7d:f5:aa:d4:a9:ba:40:d3:60:52:5a:
                    a4:89:1f:78:39:ac:23:71:e9:8a:4d:44:8a:97:5f:
                    68:be:a6:6c:cd:41:31:ca:a7:9b:c5:83:d5:24:a5:
                    98:56:21:6a:9c:1b:0f:d3:80:91:61:fd:f5:5d:b5:
                    c5:ed:e2:e1:fb:29:ac:0d:9f:a5:d3:ad:3b:11:13:
                    7f:02:6a:d9:53:97:bc:f1:a8:52:a2:83:2f:9a:e0:
                    ab:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:01:73:05:BA:F2:DE:52:D5:4B:F4:FA:EB:AF:60:11:AC:89:F9:E3
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230382e302f32312d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:52:62:ab:09:58:86:f3:01:39:04:bc:0c:b6:d4:17:06:b5:
         f9:50:ee:59:d6:b4:37:10:59:8e:f2:60:a5:43:e4:fa:8b:e8:
         98:40:1b:3e:0c:17:1d:28:86:ae:c8:e3:ac:09:35:9e:3d:a4:
         e7:98:25:a1:f0:23:fb:e6:98:c5:fa:54:a2:f6:12:5e:2b:7c:
         7d:33:08:d4:52:4d:bb:9f:b2:e0:76:65:c7:4f:41:85:cb:83:
         f1:7f:05:d9:95:96:f0:1e:2e:0e:00:68:bc:6b:20:be:ec:da:
         0e:70:1a:98:1b:a7:53:c4:b5:af:fd:c1:41:de:5a:1a:e8:ea:
         f3:43:51:f3:0b:53:f4:be:34:62:d8:30:2a:7d:5c:c7:c1:68:
         4e:94:0e:ea:ac:f4:d5:56:9e:97:37:f0:1f:43:73:75:b0:ac:
         1b:94:1f:0f:a3:33:b2:8f:0e:ba:e8:d1:92:2c:12:c5:f5:cd:
         ed:e3:32:3e:39:dc:b1:cd:d8:c4:a9:83:e6:ed:b1:50:e1:ba:
         11:e6:92:a7:45:f3:e0:e6:f5:9c:11:32:78:c4:97:38:77:1a:
         93:1f:90:11:ae:6d:c4:00:3d:f3:fd:65:c2:2e:91:c3:fe:0f:
         e7:20:b7:68:40:1c:ff:51:f5:ea:6d:d7:a0:09:c7:63:8d:68:
         25:e7:d6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:21:12 2026 by rpki-client