This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32302e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e32302e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          lCDFFsjWwwm2slba6sRsHmYoOMc5cew9V0eIgBHnLSw=
Subject key identifier:   2D:1D:7D:07:83:46:35:2C:60:C7:9E:4D:EA:7B:DC:2B:6E:72:63:81
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       044B0D17A0B85FA3677921D519EB64606400479D
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32302e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 06 Jan 2026 19:43:57 +0000
ROA not before:           Tue 06 Jan 2026 19:38:57 +0000
ROA not after:            Tue 05 Jan 2027 19:43:57 +0000
asID:                     12127
IP address blocks:        190.57.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4b:0d:17:a0:b8:5f:a3:67:79:21:d5:19:eb:64:60:64:00:47:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:57 2026 GMT
            Not After : Jan  5 19:43:57 2027 GMT
        Subject: CN=2D1D7D078346352C60C79E4DEA7BDC2B6E726381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:55:aa:74:3b:1f:74:77:00:e3:0b:4e:65:63:
                    ee:ed:f1:1e:31:23:19:42:e6:d9:9d:14:1a:eb:c3:
                    4f:b0:08:4a:dc:d8:8c:32:cb:3a:05:0c:6f:4e:23:
                    b1:f4:db:38:5b:57:60:97:26:e4:a4:74:7d:88:66:
                    a4:16:46:df:b9:ac:21:8e:15:17:6f:bb:ad:ac:02:
                    34:63:d7:36:5b:01:f7:df:5c:be:a5:3e:4a:4b:45:
                    ea:4b:7f:75:b9:09:c5:c6:be:40:9e:c6:49:04:24:
                    9a:18:88:48:38:f7:6e:9f:bb:0c:b8:41:91:e9:e4:
                    64:3e:2c:a7:3e:aa:7c:83:9f:07:ff:bb:95:f9:36:
                    93:16:dc:0d:09:2e:4e:10:f3:e0:68:48:4b:4b:8a:
                    67:52:fb:9d:67:c7:26:dc:d3:ab:12:e2:5f:50:58:
                    a6:7c:8a:2e:b3:40:3d:8d:e7:39:3f:ba:27:32:15:
                    0f:98:28:7c:47:0d:37:89:19:41:ee:9f:fc:1b:09:
                    ba:72:51:ce:b0:8d:3c:2e:b9:a9:e8:7f:69:ff:b5:
                    c9:e9:e1:67:5d:59:05:60:42:3e:18:ac:28:ca:b9:
                    a0:ee:62:9e:70:5e:54:13:3b:bb:0c:3e:03:de:0c:
                    6a:d2:a3:1b:62:2c:bf:f8:65:e8:43:99:8a:72:94:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1D:7D:07:83:46:35:2C:60:C7:9E:4D:EA:7B:DC:2B:6E:72:63:81
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32302e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:8f:6b:16:ca:fb:f8:5c:2e:15:ed:b7:4a:1e:2a:45:76:82:
         23:18:03:91:08:f3:13:f0:71:36:97:68:0f:c4:2e:61:11:49:
         df:e7:a0:e5:b9:0a:37:90:b5:cb:56:6d:0b:4d:99:09:78:1e:
         c0:70:23:ca:fe:4a:a3:b5:5d:4e:1a:ec:5c:30:61:fd:21:1e:
         7c:52:f8:09:fa:4e:0b:5c:c9:6f:ad:84:9f:04:fb:11:f2:3f:
         86:83:3a:81:3d:2f:0e:b3:12:11:72:e1:9f:5f:46:b0:c4:28:
         ea:8c:30:a4:39:01:17:11:20:af:74:d0:c4:79:9f:22:00:ef:
         3b:d6:69:e5:bf:df:b0:a0:15:6c:a5:1f:8b:bc:39:0a:d7:01:
         c4:31:d3:80:40:b3:e3:15:7b:ed:7e:0a:b1:fd:04:a1:b2:40:
         aa:06:c7:2d:97:a4:25:a5:8f:c1:31:83:ba:29:df:e2:49:b1:
         20:87:44:2c:a0:e9:c4:8e:bc:9e:05:0e:1f:5d:94:8b:10:80:
         d6:d4:51:7c:de:43:1a:e0:92:c7:e4:b5:3e:05:ba:53:a3:73:
         fe:de:19:c6:cb:76:98:a7:97:03:1c:d2:a2:e6:57:a6:d3:23:
         71:bb:7b:74:aa:3e:91:f5:f1:a6:19:dc:18:5b:81:7e:9f:eb:
         2d:96:80:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:58 2026 by rpki-client