This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32312e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e32312e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          zDO1/Mb5B3POopCm4vTduXRVSO+rEul5CLu72G8wl7s=
Subject key identifier:   0F:92:F0:1A:E9:9E:A3:C3:85:79:03:EE:F7:33:63:76:0A:CF:76:91
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       75756B65E661B61A4C18EA241736930DFF67C1A7
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32312e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 06 Jan 2026 19:43:43 +0000
ROA not before:           Tue 06 Jan 2026 19:38:43 +0000
ROA not after:            Tue 05 Jan 2027 19:43:43 +0000
asID:                     12127
IP address blocks:        190.57.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:75:6b:65:e6:61:b6:1a:4c:18:ea:24:17:36:93:0d:ff:67:c1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:43 2026 GMT
            Not After : Jan  5 19:43:43 2027 GMT
        Subject: CN=0F92F01AE99EA3C3857903EEF73363760ACF7691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:29:66:e8:c0:51:a4:72:8c:6c:ce:7f:f7:a8:
                    6b:d3:4b:8b:4e:19:bf:08:c2:14:5f:c8:2c:24:e9:
                    c3:58:73:f2:6f:a7:b8:fd:49:d9:ec:d3:5e:72:f0:
                    7d:c8:83:8e:05:a4:26:74:2d:3d:1a:a1:1f:30:b2:
                    de:8d:93:22:ce:42:13:a9:f7:19:4c:ad:55:3b:3e:
                    aa:21:8b:a1:f6:3d:e6:b3:65:b3:24:44:fc:a8:d8:
                    57:bb:1a:ee:e2:d5:97:0d:96:58:a6:3b:29:19:1b:
                    a6:1f:d2:dc:6a:e5:fa:35:ce:3a:14:07:86:dc:14:
                    af:14:64:1b:30:c7:11:c1:a2:6f:9c:8c:eb:7f:f6:
                    70:61:95:03:49:96:91:47:80:3e:76:64:5b:96:1a:
                    18:82:12:85:45:37:72:b2:97:10:0d:1c:37:12:7b:
                    2c:8a:c6:64:d9:53:f6:f2:b7:e8:84:96:40:bc:d8:
                    7a:a6:06:ad:14:5b:b8:bd:b8:2d:63:69:27:e7:d0:
                    78:ee:75:37:bf:df:25:d6:dc:6f:c8:2a:6b:b5:60:
                    50:82:ca:36:fc:34:cb:f1:9d:e4:a3:11:ee:76:82:
                    00:c2:f6:d2:28:1d:22:7a:ba:33:28:bd:84:c8:ed:
                    80:ff:5e:7c:9c:bd:07:17:e4:f6:61:2d:1f:0f:8d:
                    2b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:92:F0:1A:E9:9E:A3:C3:85:79:03:EE:F7:33:63:76:0A:CF:76:91
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32312e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:4a:71:20:56:a1:5e:d5:7b:6f:e2:47:0e:76:4c:c5:6d:a0:
         84:ed:b2:54:c1:22:99:78:ba:2a:00:2c:89:23:e2:50:9a:49:
         d8:8b:66:35:d5:bb:de:64:d3:a0:c9:ab:5b:f2:a2:40:32:28:
         05:e3:88:ee:cc:7e:09:ce:0b:f2:16:fc:15:de:3a:c4:04:a3:
         21:cc:59:29:95:35:6a:d3:6a:f7:50:b8:c5:03:5d:22:b9:e3:
         ac:f2:20:19:1b:e2:3d:bf:da:5b:d1:ee:6a:cb:c7:4b:68:06:
         db:e5:73:3f:d5:cf:02:4c:f0:7e:54:34:35:c1:ae:7a:6a:27:
         2f:54:66:6b:12:46:16:8f:d1:b1:6c:86:0a:26:bf:9f:54:f4:
         f5:79:bf:95:45:f2:51:ce:bb:41:ea:cc:58:f4:e3:29:76:27:
         50:0d:af:55:96:f5:d2:a2:52:e9:2d:39:ce:d3:15:d9:3b:91:
         21:a9:8a:85:99:23:b4:35:fb:12:2c:4d:c5:19:ea:ed:2c:bc:
         b8:41:d6:aa:83:7d:a7:ce:28:64:25:e9:6b:f1:d1:6f:23:18:
         74:94:44:b1:49:5b:59:ca:86:07:17:ce:f5:ef:ad:ab:eb:82:
         71:52:12:fc:47:56:9a:c8:ea:8d:35:19:a8:5c:ad:9f:7e:1a:
         4c:02:8d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:55 2026 by rpki-client