This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35362e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e35362e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          d3KLNCRRbNJd8daLmQ4OAnIYcRJP1O9It5wU1LTUmcg=
Subject key identifier:   5C:FB:DD:7B:65:27:2B:1F:38:B0:A3:0A:C6:6C:8B:49:82:30:23:60
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       53B5187FD57BA20B94D4BBABD0A45E0879D210DA
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35362e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 06 Jan 2026 19:44:02 +0000
ROA not before:           Tue 06 Jan 2026 19:39:02 +0000
ROA not after:            Tue 05 Jan 2027 19:44:02 +0000
asID:                     263783
IP address blocks:        190.57.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 17:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b5:18:7f:d5:7b:a2:0b:94:d4:bb:ab:d0:a4:5e:08:79:d2:10:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:39:02 2026 GMT
            Not After : Jan  5 19:44:02 2027 GMT
        Subject: CN=5CFBDD7B65272B1F38B0A30AC66C8B4982302360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:98:c3:88:bf:ae:ce:68:c9:4b:d4:d5:82:
                    bd:09:79:3e:be:d2:07:93:de:3c:eb:a0:a4:9f:6a:
                    2a:1d:57:96:af:ec:a9:a9:38:6d:94:81:60:3b:07:
                    25:2d:ee:f0:9e:df:ab:42:a3:55:5e:1f:34:9b:84:
                    28:c3:26:95:01:e4:df:56:6d:e8:7d:42:7e:13:fa:
                    a9:64:4b:2d:80:a7:5b:4b:3e:15:42:7a:58:9b:1c:
                    dd:31:b4:6b:f9:72:fc:9e:2a:18:cd:b5:af:a3:7e:
                    0b:8f:ec:db:8b:20:61:29:e1:ae:89:f1:d2:9b:7e:
                    95:2f:4f:97:4b:ce:3e:57:9b:6f:8f:cf:af:86:d5:
                    21:42:c7:cb:78:a9:41:87:3b:5d:ac:b5:d9:a1:df:
                    49:30:0e:5c:a3:8a:ca:4f:99:5d:19:66:c9:38:50:
                    64:eb:67:77:3b:e6:a1:8c:d5:e8:4f:9e:d8:f5:a3:
                    a3:36:5f:48:7a:d0:27:2e:89:5d:b5:a5:37:e4:22:
                    0d:bb:bb:12:6f:e3:6a:c8:31:a8:2e:5c:53:52:d0:
                    e4:7d:fd:8f:28:2f:d4:11:cd:45:f2:0f:a9:ec:12:
                    d4:c2:45:9e:b7:0f:b2:a5:13:57:ff:33:93:10:aa:
                    be:42:0f:d8:d0:02:cb:23:04:be:75:52:80:bf:aa:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FB:DD:7B:65:27:2B:1F:38:B0:A3:0A:C6:6C:8B:49:82:30:23:60
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35362e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:e5:e7:4f:b9:95:5c:f1:46:56:8d:3e:fb:31:6a:cc:38:6c:
         2e:83:76:d5:9b:1c:89:a2:c8:bf:d2:97:66:37:0b:c5:c8:82:
         c5:62:1d:2c:e3:12:5d:ad:3b:c1:33:86:73:ba:d8:70:18:e5:
         ad:ef:47:a9:f6:d3:6e:7c:48:28:db:9c:be:58:a0:d8:9e:24:
         3a:45:9a:03:44:3c:48:26:56:4a:ff:2f:d3:91:c8:e2:f6:8c:
         d7:8b:20:57:da:e8:99:8d:db:c9:88:fd:2e:34:a6:24:d9:84:
         4d:c4:81:f9:c7:77:8e:d2:41:99:7c:46:91:53:9d:06:1b:f5:
         27:a4:5f:44:50:c8:71:e0:49:14:d0:52:ea:7c:ed:d3:a4:e0:
         47:fa:10:fc:e0:ab:24:7b:99:99:5b:84:41:6b:54:ab:86:fe:
         c8:91:c2:e2:64:65:41:87:32:e0:03:c9:a1:27:e8:3d:0a:9a:
         19:32:c6:90:e8:ad:b8:13:7d:f7:31:d9:09:ca:0b:4c:da:15:
         4c:e0:7b:bc:68:14:47:ad:db:b0:7c:2a:33:83:2f:3b:ef:79:
         3e:30:fe:11:f2:ef:2f:ad:5a:04:88:bf:cc:87:99:43:8f:13:
         f9:5f:e2:bc:3a:88:c8:51:9b:1e:f1:33:28:e6:06:64:8d:0f:
         3e:70:d5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:53:39 2026 by rpki-client