This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35392e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e35392e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          aHj16gKPnJw+b7V8bb/uc9a4k1f8JMwmsvmNbPAnBs8=
Subject key identifier:   67:2C:5E:E0:7F:FD:7B:F6:F4:50:FA:21:07:76:AB:22:CB:69:DF:A9
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       1D791425DDF0664A34CF8DCD9988CA48CD3FF9C1
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35392e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 06 Jan 2026 19:43:57 +0000
ROA not before:           Tue 06 Jan 2026 19:38:57 +0000
ROA not after:            Tue 05 Jan 2027 19:43:57 +0000
asID:                     263783
IP address blocks:        190.57.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:79:14:25:dd:f0:66:4a:34:cf:8d:cd:99:88:ca:48:cd:3f:f9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:57 2026 GMT
            Not After : Jan  5 19:43:57 2027 GMT
        Subject: CN=672C5EE07FFD7BF6F450FA210776AB22CB69DFA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:37:ed:46:2e:41:d8:3b:e0:22:20:e5:82:
                    a3:ff:e7:b7:a1:ec:a6:eb:9b:f3:57:60:b1:85:c9:
                    91:11:33:4f:f7:b8:1e:41:09:db:53:60:15:c4:70:
                    16:2f:ef:6c:12:40:9b:3a:16:67:d7:be:94:17:77:
                    c1:33:e0:38:d9:17:09:3a:c1:b0:a6:78:16:b4:22:
                    32:6a:d2:e6:17:db:6b:2a:c4:c3:21:19:df:38:ac:
                    55:83:c2:e4:67:a4:1b:ca:93:e8:da:c6:3d:4e:92:
                    22:3c:1e:f0:32:ca:a7:75:7a:84:3c:4f:6d:3c:5c:
                    b5:e6:2c:0e:74:c1:ab:18:35:cd:29:42:4e:2d:d5:
                    e5:65:e8:5d:c0:ff:8f:27:f6:66:8a:b5:ec:f6:ba:
                    74:54:43:91:16:fc:b7:e3:1e:0b:89:37:4a:a9:d7:
                    0e:66:48:2a:fe:1a:a6:a5:28:10:e5:6c:c7:c3:05:
                    14:f8:5e:a0:6e:af:5b:f9:b6:9f:1b:54:04:9f:f1:
                    58:fe:5b:d8:cc:82:7f:5f:f1:a5:8f:98:d8:15:7d:
                    fe:1f:68:0c:6b:1a:15:67:7d:c7:77:5b:dd:1e:2e:
                    10:07:b2:19:32:88:cc:c3:64:f3:ea:6e:92:d2:ab:
                    bf:55:75:de:9c:42:f0:1f:93:c8:35:1a:44:77:f8:
                    5a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2C:5E:E0:7F:FD:7B:F6:F4:50:FA:21:07:76:AB:22:CB:69:DF:A9
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35392e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:49:c1:74:f6:7b:7b:3f:20:1f:d3:74:39:92:47:f6:d9:48:
         1a:d0:e6:f5:44:6a:b7:eb:d0:5e:f2:6b:43:a0:d7:a7:b9:17:
         9b:3a:6a:e7:18:d9:a2:2b:7d:ad:45:f0:4f:61:8a:d6:51:01:
         bb:6f:b0:73:a5:e5:99:52:e6:df:8b:4f:a1:67:1d:a7:65:f8:
         f5:a8:63:ad:1f:ea:67:39:ce:9e:5b:a4:89:49:eb:1b:3e:ae:
         53:d9:63:9a:3c:7c:96:ff:7d:17:f2:3b:b4:8f:6a:05:9d:c1:
         a2:1f:9f:cc:ad:e0:f3:53:b8:ff:27:da:9a:76:c1:0e:f4:f2:
         7a:e2:8e:56:78:1a:43:6c:0c:9e:0a:77:89:17:ef:b3:fe:fa:
         70:27:72:9c:92:12:73:4f:39:03:56:bc:1b:74:d2:cd:fc:ad:
         7c:4e:cb:d3:67:16:7c:a5:a0:39:0c:08:55:07:b8:fc:c6:ea:
         ad:5e:83:0e:83:08:91:0a:01:1b:cd:ec:25:52:a1:50:4d:c2:
         6c:16:c3:58:4a:c6:d3:bc:7c:4a:40:ef:e7:90:84:cc:ba:36:
         7f:41:99:d5:30:5c:5e:db:ac:c7:99:2e:05:d3:d5:d0:cc:49:
         16:69:e3:2d:b5:16:87:f4:f7:e6:a4:86:bd:05:b2:0f:65:a3:
         f2:f8:16:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:45 2026 by rpki-client