This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3132302e302f32322d3234203d3e203132313237.roa
File:                     3139302e35372e3132302e302f32322d3234203d3e203132313237.roa (raw, json)
Hash identifier:          i1XQND3mulMTPR92YeBWhu45fF4gdkt+qe3BXJsy1vI=
Subject key identifier:   D5:BA:78:ED:D6:14:22:29:F3:92:EB:DF:76:3A:21:4A:10:57:7D:1C
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       1E97A31FCAAF15E413CD3AF0F86026D5ED5EC662
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3132302e302f32322d3234203d3e203132313237.roa
Signing time:             Tue 06 Jan 2026 19:43:46 +0000
ROA not before:           Tue 06 Jan 2026 19:38:46 +0000
ROA not after:            Tue 05 Jan 2027 19:43:46 +0000
asID:                     12127
IP address blocks:        190.57.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:97:a3:1f:ca:af:15:e4:13:cd:3a:f0:f8:60:26:d5:ed:5e:c6:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:46 2026 GMT
            Not After : Jan  5 19:43:46 2027 GMT
        Subject: CN=D5BA78EDD6142229F392EBDF763A214A10577D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:c2:ac:ba:62:19:cb:70:27:79:e6:2f:33:
                    72:b0:5b:5b:20:33:ba:0b:37:4f:54:8c:98:ff:a0:
                    35:d8:a6:dd:1d:2c:30:58:c3:42:6f:54:13:ce:f4:
                    f4:61:2b:29:c9:40:dc:6f:9d:f5:e9:5c:53:48:f2:
                    b6:e6:fd:82:a2:03:0e:ee:0b:24:52:74:d4:49:1b:
                    17:c3:27:18:e3:2d:9b:b2:a9:ed:a8:a7:cc:e3:af:
                    42:bb:51:2e:63:64:47:7c:e2:ae:48:c3:5c:5a:8b:
                    eb:19:cb:d7:24:6a:af:e1:d6:60:3b:06:9d:ba:91:
                    19:f4:8c:97:ec:7e:9d:ab:dd:67:fd:4a:b2:7c:53:
                    76:20:d8:e8:68:87:d5:25:24:c3:c4:1b:7c:40:05:
                    e2:0c:ae:32:75:ca:49:f7:b8:f6:b9:a8:0b:53:31:
                    84:58:f9:4a:f6:a3:d3:f4:21:f8:07:ad:0f:53:c9:
                    15:e2:9e:e9:81:fd:bb:7d:c7:9b:f9:f3:81:c2:13:
                    2e:14:67:33:91:bb:3b:48:e4:ba:75:24:20:b4:55:
                    40:83:68:d6:d7:f1:37:9b:6d:77:41:66:a8:7f:27:
                    2a:0b:9a:d4:41:d9:36:ea:61:77:16:23:17:c6:84:
                    ad:de:37:2f:f0:bb:75:0b:5e:cc:03:bd:a2:cb:e0:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BA:78:ED:D6:14:22:29:F3:92:EB:DF:76:3A:21:4A:10:57:7D:1C
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3132302e302f32322d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:91:2c:71:0d:d6:90:03:f2:10:83:8f:60:7a:7e:84:06:03:
         a0:e8:32:63:a3:77:d9:df:50:b7:80:3b:23:fa:eb:f8:1a:4d:
         5c:17:c2:3b:0f:d0:b3:3a:0d:10:33:47:5a:c7:1e:72:74:d1:
         e6:0a:80:00:80:eb:d0:51:38:21:a2:b0:52:4c:54:de:09:55:
         d7:10:18:46:53:fc:8f:86:72:03:ab:be:81:fd:e1:92:52:db:
         4c:d0:5d:39:39:5c:89:c3:c5:51:92:b1:fb:ab:43:c2:f9:3b:
         80:00:84:f1:aa:35:1c:a5:31:bb:ce:07:f4:4d:1d:0e:90:48:
         02:f9:3c:9b:ee:87:dd:1a:ac:58:b1:f1:1c:13:ee:82:fb:b8:
         63:7b:f9:c1:63:f7:95:90:3f:81:66:f8:37:dd:b5:8b:a9:d3:
         7f:6b:f8:ec:f5:9e:fd:cf:66:a8:33:42:5a:22:1d:3b:48:22:
         c4:fe:61:08:af:9a:cb:92:1a:b3:e9:e4:97:90:bb:22:b7:c1:
         b0:e0:34:ac:10:9b:c9:5a:fb:4d:59:94:2d:4c:47:53:81:b8:
         12:38:ee:0a:6a:bb:8d:a0:53:dd:31:00:6a:cc:ca:95:b4:f0:
         b8:b7:55:a5:93:dd:0e:27:1f:87:ae:31:70:42:19:e3:ec:56:
         65:16:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:22:19 2026 by rpki-client