This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36302e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e36302e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          koj2iqLNk4BCHTobQE6NoiSQs+tLhwc/kg0hT2uxyhc=
Subject key identifier:   0C:A9:A5:F6:E9:92:4C:DE:88:66:72:85:E8:C7:08:9E:CA:34:26:D9
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       632958347B59588012F646BAE33256A448EF63B4
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36302e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 06 Jan 2026 19:43:45 +0000
ROA not before:           Tue 06 Jan 2026 19:38:45 +0000
ROA not after:            Tue 05 Jan 2027 19:43:45 +0000
asID:                     12127
IP address blocks:        190.57.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:29:58:34:7b:59:58:80:12:f6:46:ba:e3:32:56:a4:48:ef:63:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:45 2026 GMT
            Not After : Jan  5 19:43:45 2027 GMT
        Subject: CN=0CA9A5F6E9924CDE88667285E8C7089ECA3426D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:97:cf:85:05:22:c6:46:8c:6f:8f:54:ec:
                    23:7b:48:8a:b2:59:95:dc:37:ca:57:ef:f4:1b:98:
                    10:86:07:2d:80:22:0d:25:d4:b9:07:82:93:c6:67:
                    33:ae:2a:4e:24:40:e3:10:74:18:b3:42:10:8b:23:
                    56:31:32:bc:c9:6a:50:25:05:bb:8a:7e:0b:9b:c7:
                    e6:36:f1:f0:66:57:65:85:47:44:ce:eb:77:8c:99:
                    c2:c2:23:4a:39:d2:20:2a:cb:8f:5e:0d:87:c1:3b:
                    b8:df:b2:3a:63:41:4c:79:7c:6c:af:85:3c:e7:01:
                    77:ad:1b:87:48:b1:87:be:62:97:28:9d:f5:22:cd:
                    82:53:36:7d:28:c4:83:b4:7a:f5:f7:1f:30:e5:e2:
                    30:35:1d:c9:28:7a:e6:71:b4:8b:21:d8:bb:1d:dd:
                    22:6e:23:ea:e8:3a:76:82:b7:4f:75:04:1a:10:6f:
                    6f:4e:62:56:cc:3e:6e:c8:b6:87:a9:99:1c:72:da:
                    12:83:fb:9c:76:8f:6c:d1:79:d9:92:b3:64:47:4d:
                    a3:b6:42:2b:9b:8e:11:ba:52:97:67:b8:f6:3a:5f:
                    e0:16:88:66:9e:6d:8c:8b:f3:47:68:26:66:c5:2b:
                    ef:1e:f1:55:ae:85:aa:14:4f:b9:51:76:92:4a:a0:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A9:A5:F6:E9:92:4C:DE:88:66:72:85:E8:C7:08:9E:CA:34:26:D9
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36302e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:68:d0:c4:9e:c9:7e:29:02:a6:3a:1b:85:ba:1d:5e:69:c2:
         79:fd:34:98:33:d4:2f:59:02:ff:a4:f4:5a:79:fb:99:bc:cd:
         52:c3:1d:96:59:b5:1c:e2:98:5b:1b:ca:3f:40:bf:07:92:55:
         39:be:ea:18:d9:4f:6a:78:96:12:38:8c:c8:05:3a:62:ad:58:
         ef:51:0d:2e:79:53:72:d5:18:01:1a:65:7a:0e:53:50:79:ce:
         31:d8:41:f0:d1:ac:dc:88:d7:36:d6:6d:e8:c6:66:68:ec:78:
         cc:98:df:0c:93:5f:d1:de:80:61:0e:79:b2:c3:c4:87:44:88:
         6c:f6:0a:37:57:9b:94:8e:7b:1c:e7:f6:a1:77:17:20:44:fa:
         ac:64:de:2f:3d:30:ec:3c:54:b7:ee:8f:0f:d9:a0:d7:1a:14:
         ba:0a:c8:9a:cd:ff:80:dd:c3:00:6c:08:c3:51:e0:9d:12:ca:
         46:19:ca:b7:72:a1:e3:22:2e:21:91:a3:89:af:31:20:51:f3:
         59:ba:16:d1:ac:c5:75:6b:44:fe:5c:e7:96:b0:c5:bc:6e:9b:
         65:6d:c3:52:aa:da:07:f7:cc:74:cc:88:b8:86:e5:27:bd:ce:
         f7:c8:a9:72:08:41:4a:1a:30:20:5e:9f:ae:f6:56:54:9e:e9:
         83:d9:de:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:56 2026 by rpki-client