This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e35342e302f32342d3234203d3e203238303336.roa
File:                     3136352e39382e35342e302f32342d3234203d3e203238303336.roa (raw, json)
Hash identifier:          OL9+7pEsh9JQGFW+ZHXeZfRbzUUjVjDVZC3ejv9S/ds=
Subject key identifier:   E6:D6:0F:A5:9A:8B:01:D7:DB:4A:14:D5:C0:E1:97:00:EE:65:7B:84
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       7562CDE489806089E57742C88F747D2BBF4CA475
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e35342e302f32342d3234203d3e203238303336.roa
Signing time:             Fri 28 Nov 2025 17:35:00 +0000
ROA not before:           Fri 28 Nov 2025 17:30:00 +0000
ROA not after:            Fri 27 Nov 2026 17:35:00 +0000
asID:                     28036
IP address blocks:        165.98.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 22:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:62:cd:e4:89:80:60:89:e5:77:42:c8:8f:74:7d:2b:bf:4c:a4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Nov 28 17:30:00 2025 GMT
            Not After : Nov 27 17:35:00 2026 GMT
        Subject: CN=E6D60FA59A8B01D7DB4A14D5C0E19700EE657B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:b6:a0:96:42:1f:94:df:21:2f:f5:ed:e1:
                    a6:d1:29:20:65:55:39:3f:ef:0c:0e:8e:85:c3:01:
                    39:69:63:05:68:bd:f0:ed:1b:72:57:0c:bf:80:1d:
                    2d:14:43:4a:99:bc:0c:e4:b5:c9:87:31:59:6f:04:
                    00:4a:07:fe:c4:91:e6:e0:c4:50:ad:47:1f:a5:b0:
                    73:56:d2:f2:ed:ee:6b:92:bd:5e:6a:34:ac:01:1c:
                    52:a1:2b:c9:13:32:77:a9:39:0a:83:a1:90:41:79:
                    6e:63:a9:d7:be:4c:77:19:56:2f:2e:d6:1f:df:66:
                    84:b4:5e:bd:00:3d:1c:a9:dd:d4:97:c7:f7:b6:4b:
                    c2:95:b6:0b:81:b1:08:74:e0:80:e9:37:1f:db:80:
                    12:b6:3f:62:1b:f3:c9:d1:bb:a8:64:25:45:65:2f:
                    52:2b:c9:38:a4:c7:70:83:6d:7e:50:eb:ac:57:03:
                    c9:e9:be:53:ce:01:43:8a:8a:49:63:bb:3c:fa:ab:
                    de:a9:32:74:ec:fd:7f:42:02:9a:49:de:99:bf:c9:
                    6d:81:1a:15:da:c5:37:89:4e:68:72:07:5c:20:45:
                    4b:c2:dc:b9:51:df:28:94:f5:cc:76:8c:ba:55:27:
                    a1:a0:16:98:88:e2:6f:43:07:69:80:28:9c:55:6e:
                    05:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D6:0F:A5:9A:8B:01:D7:DB:4A:14:D5:C0:E1:97:00:EE:65:7B:84
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e35342e302f32342d3234203d3e203238303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:36:d6:51:b9:65:a0:e1:87:85:f2:a8:05:d2:f1:86:3b:61:
         cb:43:82:e5:56:ec:f4:1e:d7:94:aa:f2:f5:c0:0c:ae:7a:53:
         cf:c8:06:a0:f2:07:31:73:eb:a2:11:bc:64:0d:5d:c6:c0:db:
         c0:f3:05:d3:13:b8:37:00:89:36:23:8f:88:37:9a:c7:c7:13:
         a1:64:03:9d:e1:fe:5d:eb:2c:d2:48:ee:37:a8:ee:6f:35:db:
         bf:e9:43:63:36:46:33:5b:9d:6d:99:5b:32:24:8b:03:23:da:
         19:c3:75:5c:4c:fb:f3:69:94:d9:40:3f:42:75:e7:5c:ad:28:
         d9:9d:52:66:93:9b:94:5f:05:01:31:77:4a:61:64:3a:5f:d3:
         a0:a2:94:6e:34:d3:90:7c:a4:09:2a:cf:be:be:18:7f:35:bb:
         ad:b3:7d:b4:45:b8:1b:e4:09:2b:02:ff:ce:02:0c:cb:36:be:
         35:56:34:28:29:73:4c:08:56:4d:2d:b1:d9:7f:0c:22:17:37:
         84:f9:35:03:f9:04:87:33:7a:01:38:bf:df:85:ca:b7:ec:c8:
         0c:db:96:16:9c:89:d9:b7:1b:66:b5:f1:e0:01:dd:97:15:32:
         b7:c4:60:44:e0:d5:3b:47:3f:c4:28:a1:ab:dc:5f:19:38:f1:
         f9:f2:ba:ae
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUdWLN5ImAYInld0LIj3R9K79MpHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC
MzAzQzAzRDAeFw0yNTExMjgxNzMwMDBaFw0yNjExMjcxNzM1MDBaMDMxMTAvBgNV
BAMTKEU2RDYwRkE1OUE4QjAxRDdEQjRBMTRENUMwRTE5NzAwRUU2NTdCODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMbaglkIflN8hL/Xt4abRKSBl
VTk/7wwOjoXDATlpYwVovfDtG3JXDL+AHS0UQ0qZvAzktcmHMVlvBABKB/7Ekebg
xFCtRx+lsHNW0vLt7muSvV5qNKwBHFKhK8kTMnepOQqDoZBBeW5jqde+THcZVi8u
1h/fZoS0Xr0APRyp3dSXx/e2S8KVtguBsQh04IDpNx/bgBK2P2Ib88nRu6hkJUVl
L1IryTikx3CDbX5Q66xXA8npvlPOAUOKikljuzz6q96pMnTs/X9CAppJ3pm/yW2B
GhXaxTeJTmhyB1wgRUvC3LlR3yiU9cx2jLpVJ6GgFpiI4m9DB2mAKJxVbgU3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU5tYPpZqLAdfbShTVwOGXAO5le4QwHwYDVR0j
BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5
QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5
MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4
MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC
RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMxMzYzNTJlMzkzODJlMzUzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMDMzMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClYjYwDQYJ
KoZIhvcNAQELBQADggEBAGc21lG5ZaDhh4XyqAXS8YY7YctDguVW7PQe15Sq8vXA
DK56U8/IBqDyBzFz66IRvGQNXcbA28DzBdMTuDcAiTYjj4g3msfHE6FkA53h/l3r
LNJI7jeo7m8127/pQ2M2RjNbnW2ZWzIkiwMj2hnDdVxM+/NplNlAP0J151ytKNmd
UmaTm5RfBQExd0phZDpf06CilG4005B8pAkqz76+GH81u62zfbRFuBvkCSsC/84C
DMs2vjVWNCgpc0wIVk0tsdl/DCIXN4T5NQP5BIczegE4v9+FyrfsyAzblhacidm3
G2a18eAB3ZcVMrfEYETg1TtHP8QooavcXxk48fnyuq4=
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:04:02 2025 by rpki-client