This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32312d3231203d3e203132313237.roa
File:                     3139302e35372e3130342e302f32312d3231203d3e203132313237.roa (raw, json)
Hash identifier:          BHkCX7NrKpJVs07gwQT4hTR5f1+S8P+hJMGzR9Lbvr0=
Subject key identifier:   43:28:37:8F:EC:5F:CA:51:13:0C:35:28:09:92:1D:F6:F9:D3:7B:96
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       33844810467CDBD98A59610C07CC890076E5ABED
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32312d3231203d3e203132313237.roa
Signing time:             Tue 06 Jan 2026 19:43:56 +0000
ROA not before:           Tue 06 Jan 2026 19:38:56 +0000
ROA not after:            Tue 05 Jan 2027 19:43:56 +0000
asID:                     12127
IP address blocks:        190.57.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 17:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:84:48:10:46:7c:db:d9:8a:59:61:0c:07:cc:89:00:76:e5:ab:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:56 2026 GMT
            Not After : Jan  5 19:43:56 2027 GMT
        Subject: CN=4328378FEC5FCA51130C352809921DF6F9D37B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ef:fd:f9:b1:82:4c:ac:6a:69:9e:4e:c4:46:
                    83:46:34:32:87:57:64:7a:2b:25:6c:b0:c9:ce:cb:
                    ba:56:2e:4c:ae:98:ff:d3:d8:31:84:28:e8:22:85:
                    94:4d:f2:e7:1d:38:4e:9d:27:2d:0e:62:fb:4a:5e:
                    44:b0:98:9e:a5:b7:d4:10:00:b1:4f:15:a5:aa:09:
                    18:87:ae:23:23:3a:63:8f:4c:80:65:6e:cc:f5:7b:
                    98:d4:fb:8c:24:3a:54:fc:00:39:38:75:65:94:12:
                    76:a6:82:de:f9:2e:3a:f7:81:8e:25:6d:27:f6:47:
                    93:dc:b2:b3:cd:e0:0a:91:d0:66:77:37:20:45:2a:
                    9b:c6:92:a9:ec:9d:22:21:61:e3:0d:1c:34:85:60:
                    ac:b3:56:ae:42:71:07:8f:31:5a:15:88:99:f1:c5:
                    6d:b2:08:89:5d:a7:ac:00:42:6b:c6:46:ab:42:12:
                    74:29:ae:cf:93:91:d3:26:39:f2:e5:df:ca:eb:ae:
                    b3:a5:e1:88:3e:c4:99:8c:de:85:42:8a:df:24:f4:
                    56:d8:28:a2:44:2a:13:27:59:eb:d1:35:16:ef:21:
                    e3:f8:da:b1:8f:3a:26:e6:35:71:23:e0:ec:cc:7c:
                    52:45:ae:d3:6a:71:c0:04:89:b3:44:ba:5a:71:3f:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:28:37:8F:EC:5F:CA:51:13:0C:35:28:09:92:1D:F6:F9:D3:7B:96
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32312d3231203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:1c:e7:dd:61:7c:9d:d1:63:57:f4:1a:06:fc:af:fd:d6:c4:
         4c:f6:81:16:14:92:d9:22:fc:84:fe:09:e5:1d:ef:b1:c7:8a:
         2f:c4:36:41:3b:0d:d7:f4:d0:ca:64:c8:69:33:6d:25:bd:1e:
         6c:22:5d:82:fa:0a:71:6b:aa:cd:f1:98:81:0c:1f:b8:17:38:
         5e:88:3d:ff:78:dd:8e:9d:96:e4:2b:e5:b1:04:b7:3e:f3:9f:
         7d:8b:7c:b1:fb:9c:7b:d6:12:92:29:78:09:01:2e:a5:82:43:
         41:56:6e:3a:e4:45:6e:0e:5c:87:6c:cb:7e:66:20:3d:c0:aa:
         77:c2:3e:e0:54:cf:a8:76:0c:66:65:b3:b1:d7:4c:44:6c:4e:
         4c:89:7e:f8:45:ce:19:cb:ef:22:4f:4b:b6:0d:3d:f8:55:a4:
         71:c6:71:4d:3f:89:f3:b7:e5:9d:25:7f:56:25:73:81:50:66:
         8c:e9:37:cd:57:1e:30:7a:46:f7:e0:77:41:2d:ab:8b:12:65:
         47:1c:80:de:a3:e0:b5:72:83:14:86:b7:9d:ce:3c:1f:58:bb:
         9f:13:22:57:4c:9a:eb:e4:dc:a4:59:e0:77:06:7d:5a:60:c4:
         57:c4:8c:79:a6:7b:df:32:75:19:dc:b9:e3:28:5b:b2:61:10:
         84:d2:65:d3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUM4RIEEZ829mKWWEMB8yJAHblq+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNjAxMDYxOTM4NTZaFw0yNzAxMDUxOTQzNTZaMDMxMTAvBgNV
BAMTKDQzMjgzNzhGRUM1RkNBNTExMzBDMzUyODA5OTIxREY2RjlEMzdCOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH7/35sYJMrGppnk7ERoNGNDKH
V2R6KyVssMnOy7pWLkyumP/T2DGEKOgihZRN8ucdOE6dJy0OYvtKXkSwmJ6lt9QQ
ALFPFaWqCRiHriMjOmOPTIBlbsz1e5jU+4wkOlT8ADk4dWWUEnamgt75Ljr3gY4l
bSf2R5PcsrPN4AqR0GZ3NyBFKpvGkqnsnSIhYeMNHDSFYKyzVq5CcQePMVoViJnx
xW2yCIldp6wAQmvGRqtCEnQprs+TkdMmOfLl38rrrrOl4Yg+xJmM3oVCit8k9FbY
KKJEKhMnWevRNRbvIeP42rGPOibmNXEj4OzMfFJFrtNqccAEibNEulpxP0ABAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQyg3j+xfylETDDUoCZId9vnTe5YwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzEzMDM0MmUz
MDJmMzIzMTJkMzIzMTIwM2QzZTIwMzEzMjMxMzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA745aDAN
BgkqhkiG9w0BAQsFAAOCAQEAcBzn3WF8ndFjV/QaBvyv/dbETPaBFhSS2SL8hP4J
5R3vsceKL8Q2QTsN1/TQymTIaTNtJb0ebCJdgvoKcWuqzfGYgQwfuBc4Xog9/3jd
jp2W5CvlsQS3PvOffYt8sfuce9YSkil4CQEupYJDQVZuOuRFbg5ch2zLfmYgPcCq
d8I+4FTPqHYMZmWzsddMRGxOTIl++EXOGcvvIk9Ltg09+FWkccZxTT+J87flnSV/
ViVzgVBmjOk3zVceMHpG9+B3QS2rixJlRxyA3qPgtXKDFIa3nc48H1i7nxMiV0ya
6+TcpFngdwZ9WmDEV8SMeaZ73zJ1Gdy54yhbsmEQhNJl0w==
-----END CERTIFICATE-----
Generated at Mon Jan 12 04:11:16 2026 by rpki-client