This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3132342e3232322e302f32342d3234203d3e203532323533.roa
File:                     3139302e3132342e3232322e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          0iMKTZIOVu++lNf3X/zcQQMIuK06eDzivP8gG46vQIc=
Subject key identifier:   D2:5D:C2:C3:A0:A7:BD:C4:1C:5D:D2:04:AF:99:16:59:F6:E1:4A:D6
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       564C94F8FA0A527E0279B3C3CEA2036246892F50
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3132342e3232322e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 06 Jan 2026 19:23:36 +0000
ROA not before:           Tue 06 Jan 2026 19:18:36 +0000
ROA not after:            Tue 05 Jan 2027 19:23:36 +0000
asID:                     52253
IP address blocks:        190.124.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4c:94:f8:fa:0a:52:7e:02:79:b3:c3:ce:a2:03:62:46:89:2f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Jan  6 19:18:36 2026 GMT
            Not After : Jan  5 19:23:36 2027 GMT
        Subject: CN=D25DC2C3A0A7BDC41C5DD204AF991659F6E14AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:ce:bf:83:b4:9c:f0:6c:fa:9b:67:18:2a:
                    37:d6:74:ff:66:1c:90:19:5c:82:a0:2a:bd:7e:c0:
                    65:75:db:6f:41:4c:df:fe:e2:97:39:97:63:78:3d:
                    b5:81:1b:bf:bf:a6:f1:0f:a2:92:37:d6:a0:a8:16:
                    d5:84:d3:38:c9:70:ad:1a:36:03:8d:37:06:eb:1b:
                    21:47:66:27:f5:0a:34:cb:6a:50:5d:3d:b0:28:65:
                    6c:6a:9c:f9:9a:5c:70:51:b2:19:82:da:65:58:a8:
                    65:dc:f4:61:41:7b:11:cc:73:49:9d:51:41:ac:91:
                    b1:27:f4:bf:56:62:57:e7:60:be:56:8b:12:eb:fd:
                    56:f1:b8:38:a6:8f:e2:6d:ea:d8:53:dc:c8:18:e6:
                    ae:0e:db:69:65:2b:d6:92:e5:24:23:58:32:13:41:
                    55:6a:fe:29:99:64:dd:fe:14:09:ea:98:e8:9c:ff:
                    17:d2:c3:33:20:ff:ce:73:f6:30:d7:d8:c7:13:6e:
                    46:25:b1:b0:29:3e:d6:8e:ed:50:0b:4a:ea:22:25:
                    69:8f:63:84:dd:74:91:b5:a4:33:ce:73:e5:d9:5c:
                    fd:ae:7c:21:80:7e:3e:41:a2:94:ad:86:e2:80:14:
                    3d:3d:09:64:15:35:a6:ee:d4:5b:b9:ee:a1:de:94:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5D:C2:C3:A0:A7:BD:C4:1C:5D:D2:04:AF:99:16:59:F6:E1:4A:D6
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3132342e3232322e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ec:f3:27:b2:68:e7:0f:aa:2e:24:1d:e0:5f:35:db:5a:6f:
         0b:ec:d3:8c:8a:a7:f2:2a:97:ea:be:0d:e4:98:f6:cc:a0:50:
         ec:15:bd:06:af:53:2a:1b:8b:95:d8:a3:cf:e5:bb:f3:f4:b8:
         a3:d2:44:95:69:32:7d:d0:c1:b4:12:a6:8d:ff:eb:da:a4:7f:
         9f:f0:a6:36:8a:9e:11:e9:8c:00:dd:94:7a:62:97:eb:f7:65:
         ea:00:37:4e:6d:16:2c:ba:82:88:97:6b:40:26:15:14:ed:a3:
         fa:dc:23:1a:19:8d:a8:1c:7c:b6:1c:4a:88:ca:9f:77:78:33:
         61:3a:40:d6:18:3d:85:28:4c:44:2c:62:9c:79:8c:4a:dd:5f:
         89:e8:28:e3:0b:6f:3b:ee:91:5f:b8:f6:1e:4b:6d:26:ea:78:
         f5:a4:4b:a1:a0:b3:50:22:0f:fa:ae:98:7b:32:4b:d8:9b:e7:
         a5:3a:db:6c:57:bb:b0:52:20:04:d5:df:35:4e:4d:34:05:72:
         c0:86:6c:17:0b:d7:18:bf:fe:ee:0d:89:6e:84:17:2a:b7:67:
         f4:84:45:2e:44:dd:68:b9:33:bd:11:7a:4d:1a:ce:a8:81:cd:
         30:95:d1:1e:45:ef:91:f0:26:37:ee:79:1a:54:b3:6c:b9:da:
         2e:af:e7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:19:51 2026 by rpki-client