This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e382e302f32312d3234203d3e20323633373833.roa
File:                     3139302e35372e382e302f32312d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          J/nL1YXsvGn2PfVf3DDGDcFwV9blm1MDIBYuwiMTDFQ=
Subject key identifier:   B0:F2:50:D5:47:BD:96:E8:38:7C:2F:E7:06:4C:9F:D8:BB:CC:DB:E6
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       1C479BC618F3C29D63AFDA19BD217ECF37D1AF34
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e382e302f32312d3234203d3e20323633373833.roa
Signing time:             Tue 06 Jan 2026 19:43:46 +0000
ROA not before:           Tue 06 Jan 2026 19:38:46 +0000
ROA not after:            Tue 05 Jan 2027 19:43:46 +0000
asID:                     263783
IP address blocks:        190.57.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:47:9b:c6:18:f3:c2:9d:63:af:da:19:bd:21:7e:cf:37:d1:af:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Jan  6 19:38:46 2026 GMT
            Not After : Jan  5 19:43:46 2027 GMT
        Subject: CN=B0F250D547BD96E8387C2FE7064C9FD8BBCCDBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:63:34:97:16:09:78:b9:f3:01:d7:c7:ab:36:
                    a0:bf:72:e4:84:10:bb:79:fb:63:7a:a4:14:ab:2c:
                    4a:67:fc:03:c6:c6:43:6d:37:bc:48:13:67:e3:17:
                    45:8c:c5:25:c3:d3:c9:60:b6:92:b3:c8:88:76:b7:
                    39:16:87:ee:8d:1e:78:78:2d:e2:c6:b8:4d:2c:aa:
                    e9:99:63:7f:ba:a1:8e:42:10:62:40:8a:03:86:14:
                    8b:d3:d0:a1:02:44:fe:8a:8e:f5:01:9b:95:b2:28:
                    97:fc:c4:75:d3:df:01:6a:9d:16:78:f1:42:7b:61:
                    54:c6:d1:05:19:9e:2c:08:76:cf:5e:04:dc:d3:df:
                    76:32:d3:86:52:4f:be:4f:6d:27:be:70:9b:a6:c6:
                    0f:f0:34:68:28:b8:8c:45:85:04:53:b1:e4:d6:f0:
                    a2:7c:0d:ea:34:69:40:fd:23:c0:c1:5c:40:41:bb:
                    4f:48:31:6c:7e:7f:ac:15:30:45:9c:05:91:19:c7:
                    b1:95:cb:c8:08:92:25:0f:f8:02:9b:98:6f:70:bf:
                    24:be:0e:9f:7b:ae:9d:df:5a:79:db:a9:2f:ca:eb:
                    8b:3a:99:63:cc:91:aa:1d:f8:13:c8:cc:29:97:e0:
                    66:b5:ad:80:d7:76:ab:f8:0c:af:e3:f3:ea:eb:2a:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F2:50:D5:47:BD:96:E8:38:7C:2F:E7:06:4C:9F:D8:BB:CC:DB:E6
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e382e302f32312d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:92:b6:1a:f9:7a:f8:74:52:3e:28:b5:db:e7:22:47:bf:c6:
         77:6c:95:6b:12:c8:5d:d5:75:94:01:6e:84:dd:08:fb:88:8b:
         be:f6:c7:c8:ee:06:5d:5c:c5:e8:34:67:20:56:fa:c7:4a:df:
         60:3b:c2:55:28:f9:7a:89:e4:6c:9d:85:b8:65:9b:85:88:65:
         d9:fe:0e:b5:70:3a:fe:af:50:88:41:d3:e0:68:4d:31:1c:da:
         11:d1:89:4c:b2:74:be:f4:e7:11:eb:cc:28:b2:b7:ff:8a:02:
         fb:0e:da:96:5e:fe:fa:1d:2f:a8:13:12:94:1d:4b:f0:99:d1:
         6a:16:53:ec:98:e0:f5:19:81:15:0b:fd:29:9d:35:4c:1d:2f:
         f7:a3:04:af:4c:4f:13:31:16:fb:a1:29:b0:76:68:31:82:c4:
         0a:60:20:3a:2a:e4:ad:a7:69:55:d3:0a:6b:97:cf:54:89:19:
         c7:ce:ea:0d:4e:7d:b7:f3:37:18:97:e8:d4:52:41:ff:6b:91:
         f4:25:a2:97:0b:bf:3d:e6:b2:d0:d0:54:8a:92:29:db:07:e8:
         dc:65:9a:71:a3:6e:80:aa:e0:ce:31:76:b5:c4:89:b3:2b:d0:
         49:2d:67:8e:12:2d:1d:01:ce:8e:8a:f0:05:9b:ac:bb:25:e3:
         2c:07:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:41 2026 by rpki-client