This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36352e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e36352e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          OF8rjz1Fav4FwFmm/4rcq/qJCuZD1i7i7pvv56z3PDM=
Subject key identifier:   95:00:05:99:69:3D:55:8B:A5:52:12:E1:6B:AF:FF:8D:20:2C:6F:67
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       0D1A593725D30D85E92E9E1D06AD9DA96A056E4A
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36352e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 06 Jan 2026 19:43:53 +0000
ROA not before:           Tue 06 Jan 2026 19:38:53 +0000
ROA not after:            Tue 05 Jan 2027 19:43:53 +0000
asID:                     12127
IP address blocks:        190.57.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1a:59:37:25:d3:0d:85:e9:2e:9e:1d:06:ad:9d:a9:6a:05:6e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:53 2026 GMT
            Not After : Jan  5 19:43:53 2027 GMT
        Subject: CN=95000599693D558BA55212E16BAFFF8D202C6F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:8c:fb:f3:a2:50:60:ed:1d:ac:62:db:34:
                    9e:ca:e7:40:54:d4:b6:32:01:3f:b7:0d:26:5f:b4:
                    57:0a:ee:5a:b5:ca:4f:9a:7f:d8:94:8b:07:51:05:
                    e8:38:66:b6:14:1a:93:73:d6:d8:60:57:52:4d:3e:
                    1a:26:3a:c6:c0:1e:fb:3e:2d:3c:bc:8a:d9:29:b7:
                    3f:f4:24:c7:17:b5:8e:21:88:ba:a8:b9:f6:32:0a:
                    38:51:54:11:85:9e:25:dd:22:fb:38:88:f0:f1:24:
                    f1:0e:24:0f:6b:3f:f9:19:74:96:b6:c8:61:24:73:
                    d3:96:73:1f:ae:3a:98:16:68:ba:68:f8:a9:d8:48:
                    0a:52:fb:2f:4a:4e:79:19:96:12:72:39:13:38:27:
                    02:d6:1f:af:8d:59:40:1b:af:9c:d8:8c:b0:c6:8b:
                    bb:ae:68:a0:b6:47:da:2f:36:4e:06:67:7b:94:3f:
                    ba:f8:a7:98:68:cc:ca:4e:a7:be:0f:67:c9:b5:6f:
                    ac:91:14:e2:d1:7f:b0:db:3f:7b:55:d4:f8:b3:09:
                    75:79:40:73:d6:32:c9:6c:0e:ac:ad:c6:0b:0a:1f:
                    48:6e:5b:9c:44:68:e6:73:bf:e4:9e:cc:62:c8:72:
                    0e:e0:5c:d2:c5:bf:e3:4f:4e:bf:25:64:32:3a:a5:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:00:05:99:69:3D:55:8B:A5:52:12:E1:6B:AF:FF:8D:20:2C:6F:67
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36352e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:00:de:4c:8b:2a:bf:9e:5b:18:a8:3d:f8:b0:82:82:89:a1:
         9b:50:4f:e4:43:46:c4:ff:69:78:38:cc:da:e9:cb:0d:0f:0f:
         0f:29:67:f3:9d:00:db:45:b4:39:9b:6f:a7:bc:8a:04:5a:bc:
         00:1d:4f:d1:32:e6:3d:64:95:cd:74:3f:3e:63:9b:dd:bf:6b:
         df:a5:b0:97:d9:5a:24:9f:2d:6d:a1:49:69:17:91:fa:66:ed:
         e2:32:b6:91:fd:06:93:a4:b3:09:96:85:7e:15:bd:1f:99:26:
         e7:f5:ca:c6:56:4a:5f:cd:89:5e:17:af:13:1a:e2:19:99:95:
         81:d9:b7:86:54:41:f4:fc:26:61:a0:76:30:76:41:35:5c:d5:
         32:93:36:1a:98:96:24:8b:d0:cb:d1:93:2f:db:f5:16:8e:1d:
         43:5f:3b:91:29:bf:dc:2e:b0:a8:01:5d:e3:e3:b5:2e:59:da:
         d3:7d:df:e7:55:fe:10:a9:02:d8:16:77:8c:75:28:97:87:32:
         12:6d:62:a1:c1:15:85:46:4b:89:39:1e:a3:60:b2:bc:98:b2:
         d7:44:61:ab:d2:55:89:8f:2d:e5:18:66:49:73:a9:91:7c:e8:
         83:3d:58:e2:34:ea:db:8b:77:03:e4:b9:c2:0b:11:aa:bc:64:
         80:aa:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:57 2026 by rpki-client