This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35362e302f32312d3231203d3e203132313237.roa
File:                     3139302e35372e35362e302f32312d3231203d3e203132313237.roa (raw, json)
Hash identifier:          tnFgnMsYU5OygQHpR5DE0euVfcy5EAX1OKK2cOxizt0=
Subject key identifier:   50:74:E1:69:06:F7:87:FC:C8:3D:A6:23:46:1D:72:AA:32:E1:1E:F6
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       7C4B36F854D061C80BBD03B6C39D82C121A4E032
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35362e302f32312d3231203d3e203132313237.roa
Signing time:             Tue 06 Jan 2026 19:43:47 +0000
ROA not before:           Tue 06 Jan 2026 19:38:47 +0000
ROA not after:            Tue 05 Jan 2027 19:43:47 +0000
asID:                     12127
IP address blocks:        190.57.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4b:36:f8:54:d0:61:c8:0b:bd:03:b6:c3:9d:82:c1:21:a4:e0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:47 2026 GMT
            Not After : Jan  5 19:43:47 2027 GMT
        Subject: CN=5074E16906F787FCC83DA623461D72AA32E11EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:31:07:5d:ce:88:97:d0:f3:60:d5:b0:2c:
                    d1:8a:28:a7:06:a4:6f:f8:9b:72:04:82:b2:44:7c:
                    f5:91:e9:6d:f8:03:10:78:f7:a9:02:56:ec:2a:c9:
                    91:5e:4c:69:ea:e2:78:e5:8f:f1:28:5c:c3:bb:50:
                    78:89:35:21:f7:fd:ae:88:75:de:1b:18:77:72:25:
                    63:96:5d:bc:b9:e4:80:41:0b:c8:3b:36:23:97:3d:
                    0b:bb:33:d3:96:54:8a:e2:6d:8e:7a:61:85:9a:67:
                    0e:1d:1c:08:ce:06:fc:1c:71:ef:51:df:2a:77:7d:
                    eb:e6:db:c6:a5:8c:84:6c:00:b5:bf:1b:8b:55:15:
                    2b:36:08:9e:88:fb:ed:df:8d:06:8c:0b:23:03:70:
                    27:a0:6d:62:0c:f2:63:48:f7:c0:6d:ed:60:a0:6f:
                    a5:33:3f:fe:35:49:09:c1:92:2e:89:1d:95:09:e5:
                    da:f9:47:b0:36:55:97:45:42:10:6f:20:0f:fb:30:
                    96:39:fe:71:52:2b:ef:43:9e:a7:16:59:53:f8:98:
                    c7:fb:ae:8b:fc:6b:93:86:09:11:ae:23:e3:40:b9:
                    98:e2:06:e1:d2:a5:54:8e:b9:7c:1a:75:02:3a:bf:
                    c6:ea:20:e1:1f:55:36:61:a4:1c:57:b0:f0:9b:2a:
                    66:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:74:E1:69:06:F7:87:FC:C8:3D:A6:23:46:1D:72:AA:32:E1:1E:F6
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35362e302f32312d3231203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:42:3b:31:b0:4f:fa:72:7f:a5:35:47:ae:c9:db:fc:b9:db:
         d1:0a:1f:c5:47:3e:e4:32:aa:76:70:82:65:ad:d5:83:28:e0:
         19:e4:e8:82:53:a0:30:9d:13:14:b7:f8:a9:7b:b7:e5:e5:59:
         8d:50:93:d1:6c:e4:22:a4:60:df:1f:64:49:c6:6a:81:a9:20:
         ed:a7:3f:65:03:89:83:01:e4:3f:ee:7f:ca:9b:75:5b:c0:1e:
         2c:2f:9f:7b:06:bb:a6:f6:3b:9c:dc:b7:c8:93:0f:42:fa:c1:
         d9:8f:76:f0:59:01:d2:f0:e9:13:c1:89:7d:29:1e:05:c6:c9:
         90:56:18:19:01:4c:52:23:5c:bd:c4:ae:5e:80:f6:d2:20:fd:
         64:6a:96:b4:85:a7:84:00:fc:2d:5f:82:60:ab:89:4f:93:66:
         74:cb:55:90:29:ff:b3:38:74:f2:d8:c7:c1:a1:f3:df:df:78:
         cc:91:ec:47:08:df:7a:05:2a:a3:0a:a1:25:79:4b:98:90:b5:
         0b:cc:b6:8c:90:6e:b0:93:6b:ff:20:1f:9a:8b:fa:51:ab:5c:
         8c:00:48:58:cd:05:f1:d5:39:49:e3:f7:43:17:d3:52:0b:f2:
         07:15:4d:bf:64:82:35:33:9c:66:0c:9c:8f:16:97:ac:b6:d9:
         cd:b8:1b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:58 2026 by rpki-client