This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32372e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e32372e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          AhJT/Wo3iJxy6dKhbymTxsxTj54Qxa+mSja5hS4xK3M=
Subject key identifier:   3E:24:FA:33:12:70:77:62:9B:90:99:1E:DC:5C:85:B8:C0:6E:7F:20
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       75386416AF1C60677BA4668AAEB36C97C377D299
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32372e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 06 Jan 2026 19:43:48 +0000
ROA not before:           Tue 06 Jan 2026 19:38:48 +0000
ROA not after:            Tue 05 Jan 2027 19:43:48 +0000
asID:                     12127
IP address blocks:        190.57.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:38:64:16:af:1c:60:67:7b:a4:66:8a:ae:b3:6c:97:c3:77:d2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:48 2026 GMT
            Not After : Jan  5 19:43:48 2027 GMT
        Subject: CN=3E24FA33127077629B90991EDC5C85B8C06E7F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:47:10:ea:be:3b:c7:8d:27:e9:0b:ea:58:
                    07:0b:e6:2c:5b:8b:bf:42:36:1b:1d:5b:7e:ac:db:
                    81:99:ec:21:62:d4:a2:08:22:3c:3b:48:18:d0:90:
                    bf:43:87:ad:2c:52:0c:17:c2:20:6c:72:fc:6f:7c:
                    9a:d8:e8:c5:94:51:da:81:bd:2b:13:3b:ad:3d:52:
                    a9:2a:d3:d9:77:2f:01:e9:fe:27:2e:54:db:a5:5f:
                    bc:6e:af:bf:9f:12:9d:e6:e0:49:35:e4:69:64:b3:
                    b0:65:99:3e:56:b5:ef:87:13:38:c6:3c:21:03:3a:
                    42:a7:34:7d:03:fb:62:2c:18:93:b0:85:4d:77:a4:
                    53:00:85:91:77:d5:34:19:ca:9c:d7:bb:cc:4f:69:
                    b6:f7:81:39:09:01:dd:cc:4b:b8:81:6a:0b:43:32:
                    af:3d:bc:e4:e2:86:01:97:8c:3b:b7:cf:c8:91:5b:
                    d9:ab:73:17:9e:45:54:bd:75:10:b8:35:3f:e0:00:
                    e7:74:c2:85:04:78:21:b9:6b:26:00:58:f9:de:a4:
                    f7:8a:e6:b1:94:59:37:dc:45:3b:03:20:12:30:af:
                    ae:36:9c:18:96:00:9b:47:be:79:b7:f4:6b:61:0f:
                    d4:4c:ec:af:d5:d9:f2:da:47:49:28:72:9d:a1:fe:
                    3c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:24:FA:33:12:70:77:62:9B:90:99:1E:DC:5C:85:B8:C0:6E:7F:20
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32372e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:eb:fd:90:fb:42:57:0c:8e:6c:9e:df:db:17:48:4a:a4:fa:
         24:71:aa:92:a1:19:3f:b4:86:ab:fe:87:a8:2f:fe:0e:57:9e:
         a8:84:65:80:b4:56:8c:75:78:51:4f:a3:bd:f9:1d:c2:bd:bc:
         53:9b:95:41:7e:dc:e3:8a:d8:d9:7a:b6:9e:5e:cc:e7:b2:e6:
         bb:fa:ec:86:7c:6f:32:0c:7d:b7:a1:0e:b6:a9:7c:3c:82:0f:
         50:eb:91:18:19:c7:fa:92:df:b2:76:d9:bd:43:6c:77:e5:87:
         f0:8d:4a:1c:f9:d8:1d:28:4a:3b:0c:ba:7c:c0:92:f3:d4:a4:
         2d:ce:64:d5:e1:64:41:64:d3:c6:69:f7:ff:42:d3:e5:f1:18:
         7e:72:61:4b:10:4d:22:44:21:48:ea:69:4d:eb:b7:5e:9b:bb:
         7c:dc:76:aa:b1:28:73:27:f8:d8:e9:e7:b0:88:c6:e5:94:34:
         dc:80:f2:75:d3:81:e3:81:65:3f:1b:5c:8e:3b:e1:90:36:b0:
         a1:18:2c:33:0d:97:62:59:3a:c2:f6:82:9d:19:26:b6:ef:46:
         0b:0e:c6:f0:0e:f2:71:5f:1e:43:fd:3c:1f:e3:c5:90:93:4c:
         cc:72:cb:53:5d:ec:4f:b4:92:7e:b7:a4:32:50:d1:65:19:9d:
         37:32:17:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:53 2026 by rpki-client