This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231312e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3231312e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          w5r0bDw59EWeDgL+VXO4u8awq8UXVvClSFdL+PMz8PI=
Subject key identifier:   26:E3:68:6E:67:08:CE:15:07:29:DB:A4:54:29:39:01:4E:D9:E6:69
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       7E408B7D62D3DDE43AFDF4BB39C17B10BA0382E3
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231312e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 06 Jan 2026 19:23:36 +0000
ROA not before:           Tue 06 Jan 2026 19:18:36 +0000
ROA not after:            Tue 05 Jan 2027 19:23:36 +0000
asID:                     52253
IP address blocks:        190.108.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:40:8b:7d:62:d3:dd:e4:3a:fd:f4:bb:39:c1:7b:10:ba:03:82:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Jan  6 19:18:36 2026 GMT
            Not After : Jan  5 19:23:36 2027 GMT
        Subject: CN=26E3686E6708CE150729DBA4542939014ED9E669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:64:70:dc:69:84:ae:dc:76:0c:e7:67:ca:bc:
                    1f:e3:2e:10:18:33:57:13:42:e6:c1:bf:8c:bc:11:
                    d9:94:e0:31:3a:ff:77:a9:2f:3e:db:02:55:15:1a:
                    78:b5:d2:fc:77:a9:63:f7:47:28:31:f9:68:5a:9f:
                    5d:fd:df:f2:91:60:86:b9:00:bd:64:d1:61:5b:eb:
                    f1:f2:64:19:12:ba:a6:6f:33:05:1e:22:81:f8:a4:
                    aa:75:0e:13:dc:cf:49:7d:28:a4:6f:9d:3e:7d:5c:
                    59:94:67:f9:ee:43:4d:9e:03:ac:5b:44:ae:8b:18:
                    1f:50:3e:e2:45:9b:66:07:ee:78:69:0f:9d:5f:50:
                    21:0c:eb:cc:73:33:6f:74:43:28:e5:59:e9:c9:ac:
                    26:ac:97:47:1a:0f:5b:fc:3a:fc:2d:41:b3:9e:66:
                    d9:d1:d5:fd:56:6e:f8:af:dd:b8:9b:7d:39:41:29:
                    f6:b0:cc:7a:fe:c9:47:10:2c:bc:ac:e7:7b:73:2c:
                    27:bc:87:fc:38:17:77:57:6f:09:b3:12:5c:cc:7c:
                    5f:cd:0e:45:4e:cd:7f:42:17:bf:02:24:8f:59:f3:
                    f8:ec:e7:7d:73:3d:02:0b:3e:26:52:ca:b4:5a:b3:
                    f3:5b:fb:8f:c0:d9:3b:1e:78:14:b9:64:25:89:e1:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E3:68:6E:67:08:CE:15:07:29:DB:A4:54:29:39:01:4E:D9:E6:69
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231312e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:40:ae:49:cc:45:10:cc:77:0b:f8:d8:b3:34:2d:c1:61:52:
         ad:df:9b:95:14:a3:60:3e:86:31:99:21:6f:f2:51:ed:ec:b0:
         20:c0:ff:0b:41:66:f1:3a:e2:4c:e7:76:ba:cf:21:c6:ac:0d:
         85:42:de:90:70:59:06:7e:92:e8:45:1e:81:f6:a9:1e:8e:41:
         ab:e2:cd:5d:e5:ac:e4:86:57:c1:9e:1f:a9:bb:91:9b:da:27:
         ed:2b:de:fd:49:48:3d:46:8e:de:65:05:19:18:51:7d:01:48:
         b9:1e:07:0d:86:d9:b8:91:8e:e2:ed:c9:7e:8d:25:34:e7:b0:
         5e:17:c3:fc:c9:31:43:8e:01:66:3f:d2:08:01:2c:76:7e:7d:
         3f:f2:00:74:29:2e:d4:fd:e3:d6:55:d9:0e:0b:62:0f:33:30:
         0b:c5:e2:51:b6:4d:a0:65:53:a7:40:9d:b2:db:00:72:6c:90:
         d1:93:dd:d4:3a:c6:98:01:fc:81:97:40:2c:c5:bc:0e:c8:64:
         32:99:8f:c0:5b:9a:62:c4:de:f3:20:c3:f5:87:bf:b3:04:f6:
         83:3f:9d:c0:73:c7:33:3b:52:fd:15:c8:d7:af:7c:3f:15:d7:
         b7:2d:1d:66:cf:d5:93:6d:01:36:e6:2e:ee:55:ea:ec:4e:ab:
         02:ae:39:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:21:13 2026 by rpki-client