This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36362e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e36362e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          Y9V2ADZ3k/fCjkCCDeCU6zrNxihFpg3oe28dskDDfXQ=
Subject key identifier:   01:2C:57:13:0E:3E:F6:4D:22:5D:23:33:A3:E0:83:6A:12:B7:0D:6C
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       4C6AB787C9EE399A452B3F688D8D7AF62AABDA36
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36362e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 06 Jan 2026 19:43:49 +0000
ROA not before:           Tue 06 Jan 2026 19:38:49 +0000
ROA not after:            Tue 05 Jan 2027 19:43:49 +0000
asID:                     263783
IP address blocks:        190.57.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6a:b7:87:c9:ee:39:9a:45:2b:3f:68:8d:8d:7a:f6:2a:ab:da:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:49 2026 GMT
            Not After : Jan  5 19:43:49 2027 GMT
        Subject: CN=012C57130E3EF64D225D2333A3E0836A12B70D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:ed:eb:3a:3a:ab:ad:44:60:ba:25:76:09:
                    94:75:19:3e:0d:51:ed:ae:6c:a1:89:c7:7e:ec:5a:
                    9c:e6:06:df:12:5c:19:e3:86:bd:bc:df:53:b7:16:
                    ee:36:9c:d3:42:57:8c:ad:d2:8c:46:3a:3e:48:bf:
                    24:bd:d7:8b:77:7d:a3:94:b0:d0:d8:18:b9:1e:07:
                    61:a5:19:34:00:44:91:24:fd:92:93:96:c5:7d:34:
                    39:19:a3:6d:d9:20:53:61:75:ab:ee:f0:d5:1b:49:
                    5b:ca:4c:cc:c1:8d:4c:5b:16:55:12:0d:a1:39:54:
                    b0:8a:af:82:df:20:a3:66:fc:b4:64:95:d4:59:9c:
                    4c:62:18:4c:c4:e0:61:04:f8:32:a9:82:2a:dd:7e:
                    8c:af:85:f4:96:82:c2:19:b6:d6:ed:b4:c3:c9:ab:
                    21:22:03:9a:8a:20:75:91:a3:28:ef:a1:5f:1a:de:
                    3f:b1:6a:b0:64:6e:91:be:b5:59:02:79:d8:ff:6f:
                    ec:f9:1b:26:38:9f:fc:ab:78:c8:f4:6e:f1:d0:f7:
                    66:c9:4a:f0:84:ff:c5:10:e9:03:f1:71:c3:a1:7d:
                    44:2a:93:a8:5a:81:af:38:5a:1c:66:bb:d6:ff:99:
                    fa:12:38:b7:21:8e:53:8f:5f:a1:0d:04:d7:a4:be:
                    ec:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2C:57:13:0E:3E:F6:4D:22:5D:23:33:A3:E0:83:6A:12:B7:0D:6C
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36362e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:df:b1:02:8a:b6:1c:84:46:74:e6:5b:c5:08:9e:b5:ab:3e:
         b8:2b:4d:da:b7:9c:b7:31:fe:62:a7:b5:7e:7e:73:d5:6f:d2:
         11:42:de:f5:2d:bc:ba:88:69:6f:3b:2f:80:4f:33:05:89:7a:
         25:ad:f5:34:3d:84:32:8c:c2:26:14:9d:e3:50:6e:4a:ae:12:
         bd:82:4a:96:e3:7c:1c:4e:2d:18:2e:b8:3f:6b:14:39:db:9a:
         4e:a7:43:8a:c2:97:f5:2e:51:73:0a:ae:00:1a:78:11:19:d3:
         7f:7c:ce:90:a3:be:cd:8e:95:93:94:67:28:9e:1b:b8:c0:ed:
         90:41:f7:42:48:5c:26:cd:b5:e8:66:fe:68:e3:1c:87:95:6b:
         a8:69:05:fe:47:6e:3d:e6:5f:fb:06:ce:6b:34:0d:3d:4a:68:
         57:ba:e6:d5:e9:93:ac:af:41:85:c0:cf:6d:e6:29:ce:51:e3:
         ed:fc:21:5f:80:61:5c:1f:27:3a:89:92:62:8d:0e:78:25:0d:
         45:d0:be:fc:92:10:0f:71:03:5e:24:5c:90:72:cb:d1:be:c4:
         0f:80:21:47:a7:60:da:59:c5:db:b9:95:0d:5c:25:7f:5e:7f:
         20:3f:59:78:47:5b:5e:c5:81:ec:2f:db:6d:c9:99:c4:0a:4f:
         56:88:4d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:26 2026 by rpki-client