This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e312e302f32342d3234203d3e20323637373937.roa
File:                     3136352e39382e312e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          WSQdlgVB5k7EUZkgYeBLoI4SQObuXiYE/h29Qhnq/Uw=
Subject key identifier:   0B:62:53:2B:2C:67:B1:50:A6:DE:94:C6:90:4A:62:84:38:96:69:FC
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       0F721498A32C26DF4DA16354B6BC205B6C792DA4
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e312e302f32342d3234203d3e20323637373937.roa
Signing time:             Sat 10 Jan 2026 19:59:46 +0000
ROA not before:           Sat 10 Jan 2026 19:54:46 +0000
ROA not after:            Sat 09 Jan 2027 19:59:46 +0000
asID:                     267797
IP address blocks:        165.98.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:72:14:98:a3:2c:26:df:4d:a1:63:54:b6:bc:20:5b:6c:79:2d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jan 10 19:54:46 2026 GMT
            Not After : Jan  9 19:59:46 2027 GMT
        Subject: CN=0B62532B2C67B150A6DE94C6904A6284389669FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:16:7f:17:ea:94:08:05:3c:3f:0c:ae:d0:
                    b9:09:98:f4:6c:d7:db:e3:44:80:aa:8b:b7:e2:8e:
                    24:b5:8c:7a:33:27:30:69:4e:7e:29:ec:41:e8:32:
                    69:67:25:50:23:76:fc:49:48:32:ea:ed:9a:e6:5b:
                    8e:bf:be:1b:c3:9a:ca:d8:79:47:5e:e2:f5:36:d4:
                    32:c3:34:c1:ff:27:4f:42:b7:5d:fa:82:38:bb:17:
                    52:fa:6c:30:a4:c3:d6:c0:b6:3e:7f:96:43:a2:93:
                    2a:da:72:52:2c:c5:f7:92:b4:e3:ee:5f:13:bb:f3:
                    14:bd:c2:15:6f:af:b8:a7:35:b0:e9:99:c2:00:26:
                    3d:91:56:ae:db:08:b0:ac:be:27:e2:0c:6c:08:22:
                    b7:2a:03:b2:58:0d:d7:2d:21:a7:2f:d7:ad:30:54:
                    ea:cf:96:c4:db:00:a0:07:68:f8:59:29:e9:bd:16:
                    82:3e:fb:4e:47:61:d6:ca:b5:12:19:76:cc:a7:70:
                    a7:85:d1:49:71:47:2c:0b:cb:cc:11:d9:bf:64:52:
                    33:55:94:6c:09:fd:68:2c:a4:0d:55:52:b1:1d:98:
                    36:b9:de:26:3a:5f:6a:62:af:cb:67:76:95:0d:6b:
                    66:83:37:23:e3:52:dd:73:5f:80:87:0d:58:7d:9f:
                    6b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:62:53:2B:2C:67:B1:50:A6:DE:94:C6:90:4A:62:84:38:96:69:FC
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e312e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:20:a5:5b:68:a9:0a:d1:2c:ad:c5:88:7a:8f:64:6d:53:da:
         f7:19:a1:53:54:a1:af:cc:18:22:28:f7:5b:08:43:53:18:3b:
         13:72:cf:d1:05:77:b2:11:35:8c:a9:c0:83:0c:a9:3f:f1:22:
         c1:d6:74:fa:7b:c0:65:01:35:14:a2:39:8e:e7:c2:0b:8a:c2:
         48:5f:2e:7b:a8:8c:78:4e:e4:5a:44:ea:fe:7d:06:13:bc:ed:
         05:83:82:cd:27:bc:45:3d:0b:56:9e:0b:91:27:ad:ec:78:62:
         7d:34:4c:e5:d1:59:a1:60:9a:43:77:53:1b:b7:41:a4:18:7e:
         9b:50:c2:f1:39:4d:8f:af:53:5b:ec:ad:c1:28:05:2f:88:75:
         ac:23:92:43:a5:50:42:16:bc:71:8a:8e:6b:7d:ab:34:04:95:
         a2:5c:1a:07:d6:b2:4c:a0:d8:34:82:ea:18:37:be:29:c1:4d:
         16:c4:67:6d:c2:12:6e:70:98:ea:08:e5:94:27:6e:a3:f2:df:
         e0:58:3a:7e:a4:92:cc:9a:b0:c3:ae:8c:d9:66:92:bd:b0:da:
         b8:6e:48:43:02:62:49:1f:60:4b:50:72:49:2b:9d:49:fd:b3:
         52:ef:d6:91:ac:90:7a:6a:8e:7b:76:f5:b2:d1:6a:0b:3e:15:
         f5:d8:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:23:51 2026 by rpki-client