This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230342e302f32322d3234203d3e203532323533.roa
File:                     3139302e3130382e3230342e302f32322d3234203d3e203532323533.roa (raw, json)
Hash identifier:          gK7grh5ajjy+WAT+k07D9kcgPa7nXhWH/gYVQE/CC1U=
Subject key identifier:   AE:55:FA:C6:62:1A:C7:A8:77:7B:58:06:C7:B5:11:A9:9B:1A:9F:FA
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       151C487D8DB81E7C170678C011DFA2E47B4D3E27
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230342e302f32322d3234203d3e203532323533.roa
Signing time:             Tue 06 Jan 2026 19:23:34 +0000
ROA not before:           Tue 06 Jan 2026 19:18:34 +0000
ROA not after:            Tue 05 Jan 2027 19:23:34 +0000
asID:                     52253
IP address blocks:        190.108.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 03:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1c:48:7d:8d:b8:1e:7c:17:06:78:c0:11:df:a2:e4:7b:4d:3e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Jan  6 19:18:34 2026 GMT
            Not After : Jan  5 19:23:34 2027 GMT
        Subject: CN=AE55FAC6621AC7A8777B5806C7B511A99B1A9FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5f:5c:d0:6c:07:d1:4e:90:4f:15:6e:a6:90:
                    3b:e2:5f:29:0b:21:de:75:7b:eb:de:31:4a:4a:f1:
                    ea:8e:f8:3f:b7:29:7e:04:b4:c1:12:35:9b:f8:d1:
                    5d:db:13:2e:77:bc:f5:c0:02:51:54:76:ef:77:e5:
                    16:3f:7f:96:04:6e:3c:80:4f:23:c2:5d:c5:34:65:
                    a2:62:b4:c5:11:f8:82:57:a4:ce:97:bf:b5:c1:4b:
                    fe:0c:04:df:35:9d:58:47:4d:ea:da:f8:d9:99:d6:
                    5f:45:07:00:83:96:ff:b7:14:62:92:d9:39:c1:1d:
                    56:d1:cc:74:81:d5:03:cf:cf:f5:86:5d:20:05:fe:
                    de:55:f0:27:9f:18:3f:57:39:4b:dc:d8:31:bf:e5:
                    9b:52:fe:2c:bf:64:ce:fb:88:7d:03:5f:6b:23:8c:
                    b3:65:08:d3:1f:a3:3e:14:76:b0:d7:7f:be:fa:4b:
                    af:34:8e:79:b0:f4:92:60:5e:9a:fc:d2:fe:b2:a0:
                    72:c4:3f:f6:60:01:f8:7e:c0:e1:ec:c9:59:7b:9a:
                    91:98:43:0c:95:58:0c:35:07:8a:af:6e:43:e3:1d:
                    aa:9c:e8:a0:2d:33:16:61:3a:9b:21:a8:4e:24:4a:
                    ce:94:a5:35:a8:47:81:9f:92:a6:5c:89:24:4b:c3:
                    f0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:55:FA:C6:62:1A:C7:A8:77:7B:58:06:C7:B5:11:A9:9B:1A:9F:FA
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230342e302f32322d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:bb:3f:a8:30:b8:50:0e:40:3e:47:3e:c0:42:5e:38:d7:96:
         69:31:e0:5f:b1:c2:46:3f:1a:35:2c:ef:cb:e5:53:b3:14:b4:
         a7:57:1d:ba:79:13:5b:23:22:77:83:d1:67:5d:f4:7c:a4:2b:
         6a:43:49:c0:85:7b:87:4f:58:9f:dd:44:1e:1c:e8:49:41:0a:
         50:ed:23:55:fb:e9:e9:93:e5:bc:91:61:9d:19:03:a0:61:2c:
         7a:ed:13:5c:c0:df:5d:89:aa:a8:be:68:53:2f:3c:a3:9f:11:
         07:46:74:3b:bd:83:e3:6c:cf:23:a0:3d:3c:d2:b2:dd:9e:d0:
         e8:83:fd:d3:9b:07:0f:ae:b7:59:8a:a8:63:9d:c4:c3:c9:01:
         5d:84:4c:46:d9:7d:82:1b:47:8a:2f:e0:9a:b8:20:a9:96:0e:
         47:27:8d:b3:5e:10:f1:3f:74:1f:cc:5f:24:b5:01:27:8b:64:
         7b:e7:18:29:8f:37:e2:ac:8b:33:80:80:f5:3b:80:42:60:44:
         14:e2:1f:6d:fb:6b:3d:e9:8b:0c:16:8e:92:a3:63:e2:8a:f5:
         c1:c8:63:b7:d3:9b:36:5e:e3:a6:af:35:8d:58:a0:29:21:ec:
         be:6a:9d:ec:8f:36:1f:95:93:15:35:34:0e:c8:de:1a:19:cf:
         5d:e4:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:38:20 2026 by rpki-client