This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37322e302f32322d3234203d3e203132313237.roa
File:                     3139302e35372e37322e302f32322d3234203d3e203132313237.roa (raw, json)
Hash identifier:          n49O/v+m1h5viYrvky6UJzznisAXMl+dLDIDC47dMXA=
Subject key identifier:   1E:F1:2D:5F:58:03:30:D2:5F:F6:4A:7F:06:EB:AE:11:37:ED:ED:6E
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       059C715A5B4F34F0A223B47EC705104FF8381367
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37322e302f32322d3234203d3e203132313237.roa
Signing time:             Tue 06 Jan 2026 19:43:52 +0000
ROA not before:           Tue 06 Jan 2026 19:38:52 +0000
ROA not after:            Tue 05 Jan 2027 19:43:52 +0000
asID:                     12127
IP address blocks:        190.57.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9c:71:5a:5b:4f:34:f0:a2:23:b4:7e:c7:05:10:4f:f8:38:13:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:52 2026 GMT
            Not After : Jan  5 19:43:52 2027 GMT
        Subject: CN=1EF12D5F580330D25FF64A7F06EBAE1137EDED6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:a3:30:9f:9c:a1:21:58:f0:c0:56:db:a2:
                    9c:ce:ee:96:5b:4e:42:d8:6a:3e:de:1b:bb:37:7b:
                    c2:f2:cd:43:60:e4:93:7e:0b:d0:fe:f5:b7:5b:02:
                    25:63:5f:b4:09:1a:8c:40:06:2d:ea:b2:67:97:f0:
                    d8:43:a2:51:80:5e:eb:63:86:89:dc:29:fd:fc:83:
                    96:cd:c9:ac:d0:5c:34:a2:ed:81:42:85:72:7b:28:
                    97:6c:a2:4b:d2:41:0e:75:89:ee:6d:db:72:7e:7d:
                    bd:ee:f8:26:dc:d2:00:50:71:d7:70:67:d5:28:3c:
                    31:ce:3b:17:65:29:42:62:19:e4:04:6f:5b:e4:c7:
                    a7:b0:03:75:b1:5f:11:e1:84:b0:d2:d2:b9:3b:68:
                    93:08:84:6a:65:70:52:73:2c:4c:38:c1:fd:39:5e:
                    09:5a:2e:39:66:a5:7b:ec:ba:96:e2:3c:9b:64:b2:
                    39:66:12:11:63:67:49:52:a8:80:2d:fa:70:0c:52:
                    74:f0:af:ce:28:7f:1d:2f:e5:14:25:c7:ee:f2:b2:
                    fa:93:51:77:56:08:03:38:1a:f6:4b:46:3a:f5:3a:
                    d5:38:3d:05:c7:6e:5f:ef:6a:61:54:4d:22:dc:9c:
                    52:12:8b:d0:9b:da:32:e3:63:ea:e2:ab:22:04:30:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F1:2D:5F:58:03:30:D2:5F:F6:4A:7F:06:EB:AE:11:37:ED:ED:6E
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37322e302f32322d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:b7:ed:af:2b:88:32:90:a1:bb:2a:4b:01:9c:88:c7:cb:18:
         bf:a3:59:e7:7d:4c:b0:50:30:33:e2:25:9a:d2:ab:74:c4:e1:
         a4:33:a6:01:d8:be:73:00:75:87:35:79:d1:ae:42:d4:ab:57:
         f3:71:7e:eb:8f:84:97:35:c9:31:53:b2:c4:dc:78:71:3b:eb:
         ce:f0:5f:25:d1:bc:2d:af:56:8e:dd:55:4b:00:a7:75:18:7c:
         1c:c6:f4:15:90:c5:eb:f7:e7:43:a0:25:fd:c3:59:6d:e7:00:
         46:43:5a:53:a0:12:47:f8:c1:08:96:0f:9b:4f:39:76:a6:a0:
         32:73:98:03:5c:6b:53:35:7e:cd:81:56:9f:95:07:90:98:1a:
         30:ab:f8:00:f8:4e:8c:a9:55:57:33:ae:0a:85:bb:70:93:bb:
         7e:f9:a3:12:7f:02:e0:9f:a0:31:a8:71:4a:a5:fe:b0:f9:e5:
         14:d2:55:59:43:3b:03:06:91:9f:0c:9b:58:37:54:28:d0:31:
         54:fa:f9:d3:41:28:04:39:46:9c:79:38:ef:b3:fa:a6:7b:b5:
         d9:e6:ab:ac:ad:40:45:71:71:da:94:88:36:43:07:95:14:23:
         65:7a:60:ae:65:c5:fa:d5:9b:b3:9c:af:46:82:84:e7:c3:2d:
         35:73:72:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:52 2026 by rpki-client