This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36332e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e36332e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          xUN5Tcgki2MBr9Hx3ks3JncJtuTABVRjfQsLmgJpXZo=
Subject key identifier:   09:87:4E:6A:53:EF:6C:4C:37:6A:25:06:CD:6A:AB:9F:5B:91:70:A3
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       32337B8A090A92BF46A7953AF3CE641EB87249CE
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36332e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 06 Jan 2026 19:43:55 +0000
ROA not before:           Tue 06 Jan 2026 19:38:55 +0000
ROA not after:            Tue 05 Jan 2027 19:43:55 +0000
asID:                     12127
IP address blocks:        190.57.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:33:7b:8a:09:0a:92:bf:46:a7:95:3a:f3:ce:64:1e:b8:72:49:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:55 2026 GMT
            Not After : Jan  5 19:43:55 2027 GMT
        Subject: CN=09874E6A53EF6C4C376A2506CD6AAB9F5B9170A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:dc:b6:c9:79:51:a5:76:89:99:68:cb:c8:e8:
                    c5:8c:a4:94:30:06:41:3a:78:68:48:0f:c9:bf:85:
                    5f:d5:84:65:8e:3d:db:ae:c0:44:b5:b9:e7:81:c8:
                    77:b5:5d:ac:d5:43:44:3b:21:5a:27:0b:c7:8c:9f:
                    0e:c2:5b:b3:4d:22:6b:d1:fa:7e:11:91:bb:35:89:
                    e5:77:d6:8b:f3:c2:74:0e:f3:1e:0b:93:59:44:8f:
                    2b:25:3e:3d:57:d9:6c:aa:99:15:a7:f9:44:a1:32:
                    f1:8b:e6:fd:01:74:73:4b:b0:fd:60:e6:30:44:bd:
                    fb:9a:35:26:2e:0a:06:93:8e:b8:74:8c:0f:17:07:
                    f8:37:87:61:14:bf:6f:bf:b8:fb:ae:fb:c2:c5:b1:
                    00:4b:e0:35:41:8a:02:f6:a8:53:46:5a:e9:5e:68:
                    40:0e:f4:23:f2:3d:49:14:26:2c:45:6b:e4:56:86:
                    2c:2f:62:cb:d2:8c:71:40:11:2f:11:4b:c1:22:f3:
                    34:4f:5f:92:6c:c5:22:cb:fd:12:5b:9a:3e:71:90:
                    9c:c2:a8:c8:36:25:b9:e4:7a:d6:6e:87:01:63:91:
                    1c:1b:3e:e3:d7:0b:8c:bc:2c:c7:a8:f2:2c:6b:80:
                    72:76:1b:92:28:74:e1:bc:29:00:b6:7e:9c:1c:e6:
                    83:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:87:4E:6A:53:EF:6C:4C:37:6A:25:06:CD:6A:AB:9F:5B:91:70:A3
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36332e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:09:5c:7a:da:2e:3a:74:42:ab:b0:7d:87:10:17:c6:a7:fa:
         38:29:0c:23:46:26:fb:13:a8:ca:34:0d:db:14:7a:96:86:2e:
         fb:ee:0b:34:30:c6:6f:ce:9d:17:fa:ea:bc:a8:1d:68:4a:8a:
         51:46:43:5a:c2:e9:61:1e:ce:48:bf:24:8b:8f:16:ea:14:89:
         97:2d:8c:22:e5:74:88:7b:d9:e8:91:60:5e:c4:2d:2a:ad:e6:
         19:36:6d:08:6a:74:df:d9:ff:1a:85:e2:fd:8f:79:54:68:75:
         73:cb:d8:f2:1c:4e:d0:a0:a1:db:c7:ad:f0:a4:5d:7f:97:f8:
         86:25:a4:98:71:53:d5:a2:e8:ab:af:77:7b:79:99:b1:1c:ae:
         6f:f5:9f:11:24:c5:c7:e4:42:59:4e:c7:8a:c4:cc:0c:f5:80:
         d9:6a:26:00:e8:97:05:82:03:f2:7e:bb:5e:e8:11:3a:73:28:
         ec:18:88:54:f7:8c:20:d7:a2:01:84:f4:01:57:6a:bc:7c:5f:
         55:2b:16:6a:3a:d6:6d:48:29:59:57:d4:1e:b6:77:f5:d6:56:
         9c:a5:e7:57:69:98:7f:9b:aa:b4:f7:48:24:dd:4c:4e:1a:21:
         64:b2:64:9f:ef:84:cb:6c:82:cb:07:52:16:de:3f:e8:40:dd:
         a9:41:10:fb
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUMjN7igkKkr9Gp5U6885kHrhySc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNjAxMDYxOTM4NTVaFw0yNzAxMDUxOTQzNTVaMDMxMTAvBgNV
BAMTKDA5ODc0RTZBNTNFRjZDNEMzNzZBMjUwNkNENkFBQjlGNUI5MTcwQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs3LbJeVGldomZaMvI6MWMpJQw
BkE6eGhID8m/hV/VhGWOPduuwES1ueeByHe1XazVQ0Q7IVonC8eMnw7CW7NNImvR
+n4Rkbs1ieV31ovzwnQO8x4Lk1lEjyslPj1X2WyqmRWn+UShMvGL5v0BdHNLsP1g
5jBEvfuaNSYuCgaTjrh0jA8XB/g3h2EUv2+/uPuu+8LFsQBL4DVBigL2qFNGWule
aEAO9CPyPUkUJixFa+RWhiwvYsvSjHFAES8RS8Ei8zRPX5JsxSLL/RJbmj5xkJzC
qMg2JbnketZuhwFjkRwbPuPXC4y8LMeo8ixrgHJ2G5IodOG8KQC2fpwc5oPZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUCYdOalPvbEw3aiUGzWqrn1uRcKMwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzYzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzIzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+OT8wDQYJ
KoZIhvcNAQELBQADggEBACAJXHraLjp0QquwfYcQF8an+jgpDCNGJvsTqMo0DdsU
epaGLvvuCzQwxm/OnRf66ryoHWhKilFGQ1rC6WEezki/JIuPFuoUiZctjCLldIh7
2eiRYF7ELSqt5hk2bQhqdN/Z/xqF4v2PeVRodXPL2PIcTtCgodvHrfCkXX+X+IYl
pJhxU9Wi6Kuvd3t5mbEcrm/1nxEkxcfkQllOx4rEzAz1gNlqJgDolwWCA/J+u17o
ETpzKOwYiFT3jCDXogGE9AFXarx8X1UrFmo61m1IKVlX1B62d/XWVpyl51dpmH+b
qrT3SCTdTE4aIWSyZJ/vhMtsgssHUhbeP+hA3alBEPs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:53 2026 by rpki-client