This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32312e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e32312e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          xNlsfDbVroZ4DUIC4u4lFcyA5OA5Mx9NxSt8mulezY4=
Subject key identifier:   4C:81:4F:4F:1C:BF:54:36:D5:F0:8B:1F:77:3F:D7:02:32:FB:FA:EE
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       478790B10BDD70C3B796FDC65A87534A043F7BAD
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32312e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 06 Jan 2026 19:43:50 +0000
ROA not before:           Tue 06 Jan 2026 19:38:50 +0000
ROA not after:            Tue 05 Jan 2027 19:43:50 +0000
asID:                     263783
IP address blocks:        190.57.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 17:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:87:90:b1:0b:dd:70:c3:b7:96:fd:c6:5a:87:53:4a:04:3f:7b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:50 2026 GMT
            Not After : Jan  5 19:43:50 2027 GMT
        Subject: CN=4C814F4F1CBF5436D5F08B1F773FD70232FBFAEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e2:ad:ab:fc:91:6f:59:82:96:35:22:e6:d0:
                    c2:4b:d2:02:03:80:a5:97:6a:9f:7b:f7:3c:47:ad:
                    28:0f:67:fe:0f:10:9a:12:32:53:48:7c:a9:6b:0f:
                    52:c5:07:94:1e:ea:2d:59:5a:0a:14:cc:a7:0a:1a:
                    40:6e:96:c6:c2:53:97:1c:34:46:42:19:98:01:2b:
                    d1:ba:a5:3c:d1:0f:04:2c:7d:28:12:53:4d:58:35:
                    14:51:57:75:85:be:6b:45:98:10:bd:4d:89:e9:23:
                    4b:97:68:5c:66:72:70:bb:64:44:f4:e8:12:ba:66:
                    2a:a5:81:71:f9:9d:1b:06:d5:32:a6:de:4a:19:45:
                    0b:88:d5:23:6f:3d:60:74:fc:28:ee:02:56:69:19:
                    19:d5:b1:dc:ea:9b:00:c0:86:8e:80:67:6b:af:8a:
                    6e:96:42:e1:81:ba:5a:c7:70:85:e6:44:1e:16:d0:
                    20:e4:15:54:12:6b:10:1d:dd:1e:99:c3:de:f1:75:
                    dd:a4:c5:06:1d:00:41:97:1c:97:2e:e2:68:42:a7:
                    50:bb:14:a3:66:aa:fb:21:03:29:18:53:7e:af:bd:
                    db:ce:76:12:09:c7:d9:c7:6b:2c:31:09:d1:e8:5d:
                    f2:76:8e:ff:38:83:99:db:15:c8:72:a2:83:57:66:
                    9e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:81:4F:4F:1C:BF:54:36:D5:F0:8B:1F:77:3F:D7:02:32:FB:FA:EE
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32312e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:aa:55:a0:9c:2c:9f:e5:29:c0:1c:cb:7a:46:67:8d:ba:3d:
         87:ee:83:85:39:35:51:4a:5a:3d:16:d9:e5:5f:2f:d4:b5:f6:
         2c:35:c9:57:1b:0e:66:70:ba:b1:45:6a:83:d9:64:bb:04:97:
         95:55:c7:06:1e:a4:48:85:47:e5:56:37:80:27:21:0f:23:ab:
         9c:57:2d:32:c2:7d:c3:27:27:fb:7e:a7:d3:77:1d:69:65:73:
         9e:99:06:5b:b7:d6:02:ae:65:19:0d:16:0b:4a:c5:94:c1:e5:
         85:ec:eb:4a:2a:de:64:e9:32:6c:68:9e:d2:79:fa:17:c0:c1:
         6c:e3:b9:a9:79:66:12:c7:35:a9:82:26:71:51:9a:90:05:7f:
         c1:aa:d5:75:20:e0:3f:d4:cf:f2:bf:fc:1a:4a:b3:e3:b7:9b:
         e2:18:1d:8b:10:bd:c8:84:af:17:d8:4f:5f:c2:b1:0a:a5:91:
         52:54:29:12:23:cf:d7:17:9b:ec:d2:9f:18:bd:09:0b:12:32:
         ba:bc:ea:36:8e:90:65:38:62:2a:11:b2:ee:d9:d6:53:2b:af:
         53:a4:b7:a1:dc:9c:a0:d6:01:34:b5:2d:ec:46:fe:5a:59:b8:
         e3:42:f8:23:31:df:8a:ee:22:80:8b:27:7c:55:57:1f:10:66:
         c5:fb:42:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:36:34 2026 by rpki-client