This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e35332e302f32342d3234203d3e203238303336.roa
File:                     3136352e39382e35332e302f32342d3234203d3e203238303336.roa (raw, json)
Hash identifier:          mdp4GRjos+T8aQIQOxgl5lIqISdEulyLwR1qvFJKWJQ=
Subject key identifier:   C3:52:8F:57:1F:17:FF:C0:46:26:E2:60:D7:42:EE:F6:C2:CD:70:D9
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       2065A82A6C11F0EEFC2638A748C11F77B1ACB32B
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e35332e302f32342d3234203d3e203238303336.roa
Signing time:             Fri 28 Nov 2025 01:15:00 +0000
ROA not before:           Fri 28 Nov 2025 01:10:00 +0000
ROA not after:            Fri 27 Nov 2026 01:15:00 +0000
asID:                     28036
IP address blocks:        165.98.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 22:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:65:a8:2a:6c:11:f0:ee:fc:26:38:a7:48:c1:1f:77:b1:ac:b3:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Nov 28 01:10:00 2025 GMT
            Not After : Nov 27 01:15:00 2026 GMT
        Subject: CN=C3528F571F17FFC04626E260D742EEF6C2CD70D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:04:64:0d:5f:b8:15:45:9a:f7:3d:c3:07:
                    12:ff:a8:75:81:1a:23:b1:ca:5f:e4:17:89:89:15:
                    88:41:81:6b:bd:cd:bc:17:b0:5e:74:78:5b:a5:62:
                    61:01:82:3b:29:e4:9b:13:a2:50:bf:4b:00:87:40:
                    82:32:f9:52:b7:7a:23:1b:23:c3:e1:2d:0f:0c:34:
                    1c:61:01:69:76:34:22:85:e8:05:1e:3e:69:e7:86:
                    c7:80:90:64:11:57:30:a6:84:80:af:01:67:bc:21:
                    34:94:39:a7:75:86:98:6e:d0:9c:c4:9b:31:ce:83:
                    01:0c:c6:99:c5:57:b4:14:f0:0d:f7:16:ee:b5:5e:
                    78:e7:c0:a8:db:86:90:4a:3c:0f:61:e9:bb:b5:1b:
                    b3:95:83:df:65:a7:67:06:e8:31:7a:26:06:6b:79:
                    b5:3f:8d:83:90:30:09:2e:8f:6a:06:2a:b7:b4:6b:
                    fe:38:52:30:40:c1:98:1e:79:5e:3c:78:ba:a8:61:
                    16:f5:e3:bf:69:b6:5b:70:45:b6:e1:82:56:74:4e:
                    49:0b:64:80:d7:5d:34:f4:94:13:d4:53:22:19:50:
                    7d:2b:27:40:ae:8a:29:94:7e:5d:a6:2e:5b:2e:76:
                    50:9d:aa:51:48:93:ce:7f:de:61:0d:b5:c8:66:e6:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:52:8F:57:1F:17:FF:C0:46:26:E2:60:D7:42:EE:F6:C2:CD:70:D9
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e35332e302f32342d3234203d3e203238303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:21:11:9e:07:3c:cc:75:87:ac:2b:ca:7a:6a:24:d7:c3:2b:
         b5:aa:7b:be:08:3a:ec:c4:25:17:0e:a8:ba:51:27:c0:f3:e4:
         bf:db:e2:3e:0a:8a:29:e6:d6:d9:c3:b9:71:1d:0c:f1:e9:ca:
         c2:f7:bf:4e:db:54:e6:3c:ef:d3:10:4e:f6:4a:37:81:78:79:
         d5:d4:13:9a:b9:88:b1:a1:a6:16:9e:5b:d8:6a:07:41:0f:2d:
         29:87:05:18:ae:56:7e:86:60:75:f0:0f:c1:77:88:5c:03:0f:
         c9:82:bc:31:07:69:32:8b:af:2b:5f:13:d2:75:f0:2b:ed:9d:
         91:9b:2f:6e:6a:ae:d9:73:e0:95:c5:6e:1f:0e:72:a3:e0:78:
         e7:88:4e:27:df:d3:f4:ed:83:20:0f:52:cb:f9:cb:60:ce:06:
         78:3b:94:9f:b0:b1:46:4f:10:5e:eb:19:0b:57:bf:72:ce:e9:
         fa:c0:2f:be:33:22:64:9c:49:85:0c:f5:6f:3e:85:53:1a:84:
         44:66:39:f1:c1:fc:c2:f8:bf:16:bd:d6:58:48:f8:e0:f4:ab:
         34:e8:aa:d6:ff:57:0b:ba:e3:3a:95:18:8d:46:6e:9e:fc:61:
         82:fe:f6:a3:6a:0c:fe:8a:18:14:43:f0:e1:39:fd:97:0f:77:
         39:fb:e6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:20:13 2025 by rpki-client