This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231322e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3231322e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          wEUs5Fmdz1du4+XFPtlClrqoPCDXLlGb+rH08tmWSgo=
Subject key identifier:   A9:79:9A:CA:30:25:3C:76:75:BF:B5:EA:4C:05:AB:01:16:6D:EF:9D
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       33188F0444E0DCB991C76A24DEA7412B33B88894
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231322e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 06 Jan 2026 19:23:35 +0000
ROA not before:           Tue 06 Jan 2026 19:18:35 +0000
ROA not after:            Tue 05 Jan 2027 19:23:35 +0000
asID:                     52253
IP address blocks:        190.108.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:18:8f:04:44:e0:dc:b9:91:c7:6a:24:de:a7:41:2b:33:b8:88:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Jan  6 19:18:35 2026 GMT
            Not After : Jan  5 19:23:35 2027 GMT
        Subject: CN=A9799ACA30253C7675BFB5EA4C05AB01166DEF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:95:82:64:9f:83:bf:06:d8:92:76:8a:ea:
                    3a:6f:a1:9b:02:63:8b:22:68:ba:6d:e1:50:65:04:
                    ed:7a:e8:f7:e9:22:72:88:65:9b:7c:43:1a:4a:83:
                    fd:e2:f7:ab:4c:03:06:d9:ce:2a:ac:7f:75:e6:e9:
                    7c:ee:26:5f:12:f8:33:45:c0:43:9a:9c:36:45:46:
                    ec:d7:7f:1b:42:9d:14:f6:bd:6e:3b:c0:e8:d3:c0:
                    15:4c:1c:42:88:47:6b:ca:8a:7b:ea:0f:83:ae:38:
                    26:0a:2e:61:90:a7:f5:bd:6a:04:d5:e0:91:bb:59:
                    92:94:d5:68:69:71:26:19:c0:78:46:bd:02:f6:ab:
                    52:50:cb:a4:19:55:4f:bb:62:0c:2b:fe:92:e1:fb:
                    21:6c:cf:a3:69:5b:8a:81:f3:88:95:c7:0d:47:5c:
                    cb:01:a7:24:6d:e8:69:2b:d8:43:a7:11:9d:4f:80:
                    c3:06:5d:76:21:67:d0:77:14:44:8c:7f:26:41:04:
                    cd:4d:ea:4e:d1:a9:e1:e8:39:e4:06:7b:e1:a0:d8:
                    89:90:bf:68:89:50:21:70:c7:96:04:bc:d0:31:ce:
                    03:6f:ed:0c:3f:d7:35:de:4c:bb:31:de:af:32:37:
                    54:00:f9:11:ba:b5:20:62:a9:79:de:f1:fe:dc:54:
                    00:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:79:9A:CA:30:25:3C:76:75:BF:B5:EA:4C:05:AB:01:16:6D:EF:9D
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231322e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:f0:70:40:fe:ea:90:8d:75:29:99:72:9e:97:31:fd:29:72:
         31:6c:2b:57:89:5f:eb:72:7d:2a:0a:ed:d1:37:52:bb:32:fa:
         f3:e1:f1:5a:4b:f0:30:2d:a9:e1:28:a7:64:9e:5f:fb:b0:bd:
         77:38:70:f1:63:10:b4:77:70:e1:e8:61:86:2f:d8:b9:3c:5f:
         ec:a1:fd:aa:ff:d2:b6:38:4a:39:10:d1:ec:b3:03:0e:a9:3b:
         fa:9f:83:9c:ff:6f:12:e3:07:66:91:20:53:b8:28:9e:e4:01:
         43:b3:6c:93:87:f5:15:6b:1f:14:04:53:3b:3d:4b:82:f2:32:
         67:96:b1:96:97:76:61:3e:6a:d9:eb:fb:00:ba:92:bf:b2:78:
         f1:2c:51:3a:a1:78:a0:92:17:bd:10:60:ea:1d:8d:a6:e6:6c:
         24:fb:16:27:1c:ac:d1:22:df:15:bf:01:73:1c:03:b0:46:08:
         af:1f:7e:6e:df:7b:20:da:52:1e:58:a5:1b:8e:3a:df:89:6f:
         b4:7c:94:d3:e8:6d:58:d4:fe:1d:f8:1f:0f:4b:5c:65:79:23:
         3d:7b:ab:f6:ce:0d:d6:45:57:18:7e:d6:2a:7d:ce:01:83:85:
         c4:4f:fa:f8:45:a8:8b:5b:28:f5:e1:fc:58:39:1d:d5:bc:a1:
         f1:7d:f6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:21:23 2026 by rpki-client