This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32332e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e32332e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          mh97HLv712aRsmBqgSTFdrBQrS/Md4emsp9KsQ+SM8Q=
Subject key identifier:   04:28:5B:B8:46:C9:7E:EC:A7:05:F1:2F:3D:03:CE:A4:72:3E:BE:DD
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       498DD3A42A2392E6CE1D285519B6D200416E6DAE
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32332e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 06 Jan 2026 19:43:54 +0000
ROA not before:           Tue 06 Jan 2026 19:38:54 +0000
ROA not after:            Tue 05 Jan 2027 19:43:54 +0000
asID:                     263783
IP address blocks:        190.57.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8d:d3:a4:2a:23:92:e6:ce:1d:28:55:19:b6:d2:00:41:6e:6d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:54 2026 GMT
            Not After : Jan  5 19:43:54 2027 GMT
        Subject: CN=04285BB846C97EECA705F12F3D03CEA4723EBEDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:88:7f:f4:63:fb:0e:d7:6c:c4:17:c5:3e:94:
                    6c:24:b9:50:1c:0e:62:0e:01:4a:64:a7:a3:d9:ff:
                    45:e2:fe:0e:bb:6c:a8:93:5e:fe:8a:2b:39:84:82:
                    0d:4a:1a:ae:5f:f5:c4:e5:79:8b:b2:f3:38:01:1d:
                    30:7c:9a:67:e6:bb:10:40:ff:c7:c3:50:70:c6:c5:
                    cc:e4:58:6a:d8:66:97:7f:61:db:87:a8:f8:5b:88:
                    16:88:18:17:f2:c9:32:bd:64:12:0f:61:94:ff:6d:
                    25:c2:e7:f1:10:14:8a:dd:06:9c:09:4f:a6:79:9e:
                    b7:db:25:53:aa:1c:ab:16:82:de:49:d4:17:b1:e7:
                    8f:45:2a:35:61:c3:57:e5:6b:4c:32:05:f1:92:18:
                    f1:99:9f:81:55:04:29:e6:41:7c:d3:b1:c6:4c:ab:
                    5f:2d:ad:e5:e1:28:3b:b9:63:c7:44:5d:99:d0:a3:
                    76:cd:75:ff:aa:35:26:a6:06:a7:00:44:f3:0a:19:
                    f9:87:ad:8a:c1:1d:c5:34:79:30:81:95:6c:b8:6b:
                    b9:31:51:f9:14:4b:f1:33:15:2b:fa:b3:96:2e:74:
                    78:b7:65:c3:ee:2e:20:ed:d2:2d:27:84:8d:49:27:
                    57:3d:fe:63:70:75:75:ee:dc:92:3a:12:fb:a8:e4:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:28:5B:B8:46:C9:7E:EC:A7:05:F1:2F:3D:03:CE:A4:72:3E:BE:DD
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32332e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:47:e1:ee:c5:73:8e:ce:2d:9c:1e:16:46:7b:65:7b:b3:ff:
         ec:86:c6:ad:a4:3b:a4:14:f0:b3:1b:12:6b:4e:aa:09:e5:17:
         0f:ca:5d:36:2c:84:ea:5e:38:dc:d7:0a:78:f7:74:27:79:58:
         93:47:3e:4f:be:54:2a:ad:59:a9:37:e1:e3:60:d4:59:ee:e2:
         82:d6:4d:b9:88:00:f6:27:d5:f9:c6:58:22:54:04:bd:50:ac:
         85:15:4f:6f:8e:6a:8e:7e:9e:55:ea:dc:98:83:48:54:f6:9b:
         87:fd:b0:28:c4:09:fd:37:0f:76:6c:5e:1d:2a:ac:d5:d3:22:
         fb:ab:ac:bb:12:c7:4e:99:50:13:ab:28:5f:3c:b1:70:8c:07:
         2d:cc:f5:28:ce:1f:d0:fc:81:d5:66:e1:83:0c:d2:08:68:d2:
         e3:ee:ae:5f:b0:8e:9e:90:aa:29:fd:11:f0:66:2d:1c:3c:0d:
         59:9e:6e:c4:f2:c1:c1:fa:f3:72:95:1f:08:be:70:32:6e:30:
         ac:d1:37:17:aa:2d:23:6c:f4:42:d3:21:14:29:86:81:38:ed:
         f9:e2:15:a1:13:1a:10:a9:81:3f:95:c3:80:8d:e2:dd:a2:21:
         06:ab:07:bb:c8:e0:87:e9:24:2e:e1:5e:bf:cc:af:7a:7b:74:
         06:95:8e:e5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSY3TpCojkubOHShVGbbSAEFuba4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNjAxMDYxOTM4NTRaFw0yNzAxMDUxOTQzNTRaMDMxMTAvBgNV
BAMTKDA0Mjg1QkI4NDZDOTdFRUNBNzA1RjEyRjNEMDNDRUE0NzIzRUJFREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgiH/0Y/sO12zEF8U+lGwkuVAc
DmIOAUpkp6PZ/0Xi/g67bKiTXv6KKzmEgg1KGq5f9cTleYuy8zgBHTB8mmfmuxBA
/8fDUHDGxczkWGrYZpd/YduHqPhbiBaIGBfyyTK9ZBIPYZT/bSXC5/EQFIrdBpwJ
T6Z5nrfbJVOqHKsWgt5J1Bex549FKjVhw1fla0wyBfGSGPGZn4FVBCnmQXzTscZM
q18treXhKDu5Y8dEXZnQo3bNdf+qNSamBqcARPMKGfmHrYrBHcU0eTCBlWy4a7kx
UfkUS/EzFSv6s5YudHi3ZcPuLiDt0i0nhI1JJ1c9/mNwdXXu3JI6Evuo5Py3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBChbuEbJfuynBfEvPQPOpHI+vt0wHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzIzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM3MzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL45FzAN
BgkqhkiG9w0BAQsFAAOCAQEAoEfh7sVzjs4tnB4WRntle7P/7IbGraQ7pBTwsxsS
a06qCeUXD8pdNiyE6l443NcKePd0J3lYk0c+T75UKq1ZqTfh42DUWe7igtZNuYgA
9ifV+cZYIlQEvVCshRVPb45qjn6eVercmINIVPabh/2wKMQJ/TcPdmxeHSqs1dMi
+6usuxLHTplQE6soXzyxcIwHLcz1KM4f0PyB1WbhgwzSCGjS4+6uX7COnpCqKf0R
8GYtHDwNWZ5uxPLBwfrzcpUfCL5wMm4wrNE3F6otI2z0QtMhFCmGgTjt+eIVoRMa
EKmBP5XDgI3i3aIhBqsHu8jgh+kkLuFev8yvent0BpWO5Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:58 2026 by rpki-client