This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e302e302f32322d3234203d3e203132313237.roa
File:                     3139302e35372e302e302f32322d3234203d3e203132313237.roa (raw, json)
Hash identifier:          QdELgVZdRowKrd20AAIhUKI2nkh0LapyeDzdYc0ANOU=
Subject key identifier:   EF:B6:65:45:29:7E:72:72:86:26:C6:99:C5:02:6B:6C:13:2D:EA:8C
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       24D34F9CD4A216F5DCE8EDB2AD2D20D0E3D22D7A
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e302e302f32322d3234203d3e203132313237.roa
Signing time:             Tue 06 Jan 2026 19:43:44 +0000
ROA not before:           Tue 06 Jan 2026 19:38:44 +0000
ROA not after:            Tue 05 Jan 2027 19:43:44 +0000
asID:                     12127
IP address blocks:        190.57.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d3:4f:9c:d4:a2:16:f5:dc:e8:ed:b2:ad:2d:20:d0:e3:d2:2d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:44 2026 GMT
            Not After : Jan  5 19:43:44 2027 GMT
        Subject: CN=EFB66545297E72728626C699C5026B6C132DEA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:d2:7e:0f:68:3d:a5:76:19:5b:92:73:dc:
                    6d:1d:17:51:e0:2f:6d:aa:b5:97:bf:e0:1f:56:14:
                    66:8a:3d:ae:71:78:3c:0c:13:42:00:cf:eb:ba:3a:
                    85:70:8b:3f:d2:08:b5:23:e9:c9:a8:44:b9:3e:58:
                    04:7c:8e:28:29:76:53:c2:13:0a:64:ab:75:12:b9:
                    26:52:bd:4e:7a:01:b8:db:95:5f:44:39:0d:be:d5:
                    3d:ae:6c:8b:e5:6a:28:0d:e2:f3:35:7a:ab:e6:4d:
                    09:cd:4e:81:6b:a9:e4:5d:34:d7:e7:c5:c8:df:39:
                    75:bf:71:87:40:cf:07:e2:29:b1:7e:c4:fb:1a:31:
                    21:a8:a5:2f:57:9f:9a:a4:31:8e:5f:e6:6f:8b:5c:
                    a5:55:18:87:cb:02:36:75:41:12:ee:6c:60:3d:10:
                    92:d1:cc:e5:71:03:5d:b4:42:51:44:3a:cd:77:2d:
                    ff:b8:90:1d:4b:f7:7e:a1:36:21:16:18:38:d6:f3:
                    47:d9:bb:5e:74:e5:15:10:04:b6:17:d4:ce:3c:60:
                    c3:78:d7:38:57:83:1d:e2:b9:04:ed:fc:c3:3b:41:
                    fb:99:01:97:45:21:6d:ee:93:15:20:f5:e4:89:5c:
                    82:f9:61:2d:66:5c:f4:06:82:a1:fc:eb:17:54:39:
                    62:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B6:65:45:29:7E:72:72:86:26:C6:99:C5:02:6B:6C:13:2D:EA:8C
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e302e302f32322d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:0f:f6:1e:f9:4f:9f:b2:f4:c3:26:1e:8a:c9:18:73:48:b2:
         14:b6:f2:37:6d:f7:a4:ce:ea:b4:1c:59:f7:21:ca:e0:c0:16:
         44:35:33:c5:6e:e4:95:58:87:54:13:f1:62:fc:e5:13:a9:f2:
         65:08:12:52:3b:b5:69:28:06:1f:91:0d:11:69:30:dc:77:ed:
         bd:27:8d:bd:65:e4:72:47:ee:10:4b:4c:61:f9:7a:a1:fb:65:
         13:cf:fc:8d:01:ec:87:cf:16:a7:54:97:0a:22:fe:65:cd:96:
         a4:74:01:8f:66:fd:76:0e:1c:6f:63:e9:f9:ef:83:77:32:9a:
         bc:51:a5:e3:4a:f6:24:8c:43:5b:85:86:02:42:f5:b2:90:3b:
         fb:de:c6:18:19:d2:ec:41:a6:03:a8:80:88:f3:22:15:4a:dd:
         cb:6a:b1:19:f2:16:fa:e7:de:0a:61:43:42:91:11:fc:34:65:
         ab:46:62:ee:fc:97:69:5c:bb:0e:2c:19:0b:bc:88:8b:7b:ce:
         0b:05:7e:b9:3b:b5:b6:8e:0f:f8:f5:ea:01:73:6c:aa:2e:66:
         b2:e5:15:f1:8b:c1:74:df:96:b5:8c:e4:e9:ff:07:da:4c:81:
         ae:8d:4a:98:73:f3:d7:be:cc:77:eb:fc:8f:e2:ca:45:62:02:
         b8:6f:a2:20
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUJNNPnNSiFvXc6O2yrS0g0OPSLXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNjAxMDYxOTM4NDRaFw0yNzAxMDUxOTQzNDRaMDMxMTAvBgNV
BAMTKEVGQjY2NTQ1Mjk3RTcyNzI4NjI2QzY5OUM1MDI2QjZDMTMyREVBOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CdJ+D2g9pXYZW5Jz3G0dF1Hg
L22qtZe/4B9WFGaKPa5xeDwME0IAz+u6OoVwiz/SCLUj6cmoRLk+WAR8jigpdlPC
Ewpkq3USuSZSvU56AbjblV9EOQ2+1T2ubIvlaigN4vM1eqvmTQnNToFrqeRdNNfn
xcjfOXW/cYdAzwfiKbF+xPsaMSGopS9Xn5qkMY5f5m+LXKVVGIfLAjZ1QRLubGA9
EJLRzOVxA120QlFEOs13Lf+4kB1L936hNiEWGDjW80fZu1505RUQBLYX1M48YMN4
1zhXgx3iuQTt/MM7QfuZAZdFIW3ukxUg9eSJXIL5YS1mXPQGgqH86xdUOWIDAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU77ZlRSl+cnKGJsaZxQJrbBMt6owwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTMyMzEzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvjkAMA0GCSqG
SIb3DQEBCwUAA4IBAQAZD/Ye+U+fsvTDJh6KyRhzSLIUtvI3bfekzuq0HFn3Icrg
wBZENTPFbuSVWIdUE/Fi/OUTqfJlCBJSO7VpKAYfkQ0RaTDcd+29J429ZeRyR+4Q
S0xh+Xqh+2UTz/yNAeyHzxanVJcKIv5lzZakdAGPZv12DhxvY+n574N3Mpq8UaXj
SvYkjENbhYYCQvWykDv73sYYGdLsQaYDqICI8yIVSt3LarEZ8hb6594KYUNCkRH8
NGWrRmLu/JdpXLsOLBkLvIiLe84LBX65O7W2jg/49eoBc2yqLmay5RXxi8F035a1
jOTp/wfaTIGujUqYc/PXvsx36/yP4spFYgK4b6Ig
-----END CERTIFICATE-----
Generated at Tue Jan 13 04:02:44 2026 by rpki-client