This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231302e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3231302e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          SKyIkd1T34ztCR74cNJ+K98s3kcQzA+zzMee1EVOQ3o=
Subject key identifier:   BC:1B:5B:CD:35:2F:57:75:F5:71:5B:10:3C:52:93:C6:35:F4:6D:91
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       4CDDD223335568EEA861B234486C3303D9F2F599
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231302e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 06 Jan 2026 19:23:40 +0000
ROA not before:           Tue 06 Jan 2026 19:18:40 +0000
ROA not after:            Tue 05 Jan 2027 19:23:40 +0000
asID:                     52253
IP address blocks:        190.108.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:dd:d2:23:33:55:68:ee:a8:61:b2:34:48:6c:33:03:d9:f2:f5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Jan  6 19:18:40 2026 GMT
            Not After : Jan  5 19:23:40 2027 GMT
        Subject: CN=BC1B5BCD352F5775F5715B103C5293C635F46D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1d:a3:f6:d3:2d:f0:38:8c:61:77:81:cf:1c:
                    11:48:80:e6:96:52:59:47:cb:0c:da:6a:c3:d7:66:
                    a3:40:17:20:6e:9d:64:62:d3:ce:48:b2:ed:37:da:
                    1b:78:a6:10:05:a7:bb:c8:3e:8a:49:c9:58:3c:8e:
                    e5:62:1d:8b:9c:ef:e4:89:58:5d:37:bc:25:81:06:
                    3f:73:ca:9c:11:2f:ca:b5:fb:00:1f:81:a1:c3:98:
                    bf:c2:c9:29:6f:9a:e6:15:6f:c7:2b:b1:cc:0f:e0:
                    30:2d:5f:54:9e:47:81:91:15:f9:ab:d4:d3:8a:a5:
                    5b:2f:51:7e:66:ef:d8:8e:66:7f:16:a5:c1:65:fa:
                    c8:aa:48:96:d6:81:77:7f:32:d1:62:4a:1b:f8:ed:
                    91:89:d3:c4:ef:be:f8:73:81:e1:8c:04:c6:ef:0b:
                    76:2a:76:a1:bb:fd:b1:3f:0c:c2:04:b6:89:92:ac:
                    91:09:b6:ef:42:f7:e1:f1:49:33:a2:b2:bc:d4:54:
                    41:f7:53:58:6b:ae:ea:d9:2a:c3:97:8b:99:83:71:
                    7c:1a:72:88:f2:da:7c:5b:88:27:22:14:76:50:a4:
                    31:b8:61:cb:c8:f9:9b:da:e0:a4:84:11:14:76:75:
                    05:57:93:e6:c0:3a:e7:c0:3c:db:25:b8:3d:3b:d5:
                    66:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1B:5B:CD:35:2F:57:75:F5:71:5B:10:3C:52:93:C6:35:F4:6D:91
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231302e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:c6:90:1d:f5:3c:bb:a3:a9:02:d1:77:09:59:d6:8c:5e:f5:
         cf:a3:c7:e3:4a:08:fd:7d:4a:ec:6c:c2:1d:ea:93:02:fb:98:
         b6:bc:60:0a:79:c4:27:21:12:73:94:03:06:a6:e2:73:00:a2:
         ea:d8:44:82:d4:14:0c:be:58:30:48:ee:03:8a:c9:51:d6:62:
         bc:2d:ed:3c:ff:f9:f7:a5:81:8d:7f:4f:6c:6d:28:f2:9c:90:
         e5:44:0a:1f:df:c9:ae:9f:57:c1:0c:73:ef:48:cd:83:7d:ef:
         6d:fe:5e:47:81:2c:7c:95:91:93:fb:a2:48:e4:bb:6d:c1:7c:
         c4:54:42:51:98:fe:fb:f8:a3:06:e3:43:99:92:7f:fc:9c:33:
         17:3d:43:b0:10:31:85:cd:ff:16:d0:4b:9f:f9:bb:7f:78:8f:
         a3:bb:fd:2a:40:94:0f:88:95:42:63:5f:c1:a8:b1:68:6e:de:
         bb:0f:38:7a:dc:6e:61:58:35:d1:d7:49:e9:5c:e9:c5:a1:dd:
         75:47:32:49:66:2b:d7:9d:ce:04:ad:e1:80:25:19:88:5a:7c:
         8c:36:a9:50:68:10:38:bd:c2:e5:00:93:27:35:e3:07:5b:ba:
         7c:63:19:e2:62:95:e2:f2:2f:e3:62:dd:61:2c:ea:c7:3f:56:
         d5:ff:d9:79
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTN3SIzNVaO6oYbI0SGwzA9ny9ZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMwQjhDQzFFQzMwREM2RUYzQkY1OTM2OURBQTZGODVD
MDIyQkMxNDAeFw0yNjAxMDYxOTE4NDBaFw0yNzAxMDUxOTIzNDBaMDMxMTAvBgNV
BAMTKEJDMUI1QkNEMzUyRjU3NzVGNTcxNUIxMDNDNTI5M0M2MzVGNDZEOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HaP20y3wOIxhd4HPHBFIgOaW
UllHywzaasPXZqNAFyBunWRi085Isu032ht4phAFp7vIPopJyVg8juViHYuc7+SJ
WF03vCWBBj9zypwRL8q1+wAfgaHDmL/CySlvmuYVb8crscwP4DAtX1SeR4GRFfmr
1NOKpVsvUX5m79iOZn8WpcFl+siqSJbWgXd/MtFiShv47ZGJ08TvvvhzgeGMBMbv
C3YqdqG7/bE/DMIEtomSrJEJtu9C9+HxSTOisrzUVEH3U1hrrurZKsOXi5mDcXwa
cojy2nxbiCciFHZQpDG4YcvI+Zva4KSEERR2dQVXk+bAOufAPNsluD071Wb7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvBtbzTUvV3X1cVsQPFKTxjX0bZEwHwYDVR0j
BBgwFoAUQwuMweww3G7zv1k2napvhcAivBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MzZGRjZEOEQ4RUM2M0UxNkIyRkVDNDQxMUI2ODVFODlD
ODMxQzRFMTkyNEMwRDE2QTVCRjFEOUZGRDk2NUVFLzAvNDMwQjhDQzFFQzMwREM2
RUYzQkY1OTM2OURBQTZGODVDMDIyQkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzBCOENDMUVDMzBEQzZFRjNC
RjU5MzY5REFBNkY4NUMwMjJCQzE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjM2RkY2RDhEOEVDNjNFMTZCMkZFQzQ0MTFCNjg1RTg5QzgzMUM0RTE5
MjRDMEQxNkE1QkYxRDlGRkQ5NjVFRS8wLzMxMzkzMDJlMzEzMDM4MmUzMjMxMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmzS
MA0GCSqGSIb3DQEBCwUAA4IBAQCnxpAd9Ty7o6kC0XcJWdaMXvXPo8fjSgj9fUrs
bMId6pMC+5i2vGAKecQnIRJzlAMGpuJzAKLq2ESC1BQMvlgwSO4DislR1mK8Le08
//n3pYGNf09sbSjynJDlRAof38mun1fBDHPvSM2Dfe9t/l5HgSx8lZGT+6JI5Ltt
wXzEVEJRmP77+KMG40OZkn/8nDMXPUOwEDGFzf8W0Euf+bt/eI+ju/0qQJQPiJVC
Y1/BqLFobt67Dzh63G5hWDXR10npXOnFod11RzJJZivXnc4EreGAJRmIWnyMNqlQ
aBA4vcLlAJMnNeMHW7p8YxniYpXi8i/jYt1hLOrHP1bV/9l5
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:21:13 2026 by rpki-client