This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e36382e302f32342d3234203d3e203238303336.roa
File:                     3136352e39382e36382e302f32342d3234203d3e203238303336.roa (raw, json)
Hash identifier:          tzs2OqrwAN7Trv6xD2IY2n1Bgswj4owUxZiveaYwHRs=
Subject key identifier:   1E:E4:28:F0:58:A6:FE:45:9B:FA:A3:F8:76:02:B2:42:5A:D0:A8:56
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       6453855E4362233624B95C5F8D7DE275915DC9B2
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e36382e302f32342d3234203d3e203238303336.roa
Signing time:             Thu 27 Nov 2025 22:00:00 +0000
ROA not before:           Thu 27 Nov 2025 21:55:00 +0000
ROA not after:            Thu 26 Nov 2026 22:00:00 +0000
asID:                     28036
IP address blocks:        165.98.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 22:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:53:85:5e:43:62:23:36:24:b9:5c:5f:8d:7d:e2:75:91:5d:c9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Nov 27 21:55:00 2025 GMT
            Not After : Nov 26 22:00:00 2026 GMT
        Subject: CN=1EE428F058A6FE459BFAA3F87602B2425AD0A856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:89:1f:d0:2a:cc:0f:31:d9:29:1f:d6:ae:
                    20:8d:16:a3:9e:30:7b:ad:94:ec:ce:12:7f:15:f7:
                    59:9e:fd:28:52:b2:b9:44:99:29:49:eb:90:68:98:
                    82:c8:69:1d:be:c7:98:33:38:d6:b0:8d:8c:8d:c8:
                    06:b1:77:45:77:60:e7:dd:c7:ac:3d:9b:9e:f7:90:
                    34:ee:de:b7:76:09:c2:bb:68:26:61:7a:0e:76:af:
                    8e:90:32:5c:41:90:bf:bf:0b:a1:69:67:bb:84:ee:
                    09:c9:8c:93:da:78:6a:58:2d:38:e0:76:0a:22:85:
                    49:f4:9a:de:91:23:62:31:f9:40:06:12:d6:b5:e9:
                    6c:5b:c8:cd:4b:ec:6d:34:b6:4c:7f:9d:c7:87:c7:
                    9c:2b:92:49:ec:3f:5e:00:c1:b4:6f:d2:1d:ee:1e:
                    0f:ae:54:0b:cd:33:4d:39:a7:f2:9f:3b:d6:bf:23:
                    2f:0b:fc:ee:69:57:72:39:4e:42:63:59:cf:d8:cd:
                    a3:03:af:0d:9a:e2:e6:9a:93:32:8c:a0:f6:2a:4a:
                    97:4d:66:db:b1:d8:70:2b:8c:89:52:7d:d7:12:32:
                    bd:bd:f9:7a:e6:ef:1e:4d:03:c6:11:ad:a6:fe:db:
                    c3:a3:9f:c7:69:37:65:4e:7f:ee:b4:97:77:0b:d7:
                    a0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E4:28:F0:58:A6:FE:45:9B:FA:A3:F8:76:02:B2:42:5A:D0:A8:56
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e36382e302f32342d3234203d3e203238303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:43:93:c1:08:7a:22:af:59:f2:88:15:ef:3c:80:a6:a5:35:
         7f:89:83:2b:22:62:11:88:3a:6f:e6:90:f7:f2:fd:6b:3f:0a:
         14:d9:e9:36:3a:03:bb:ad:e7:ed:7d:67:9a:17:a9:b1:c1:6e:
         f3:da:be:34:4f:c6:5c:80:49:34:d5:89:9a:10:67:3c:98:bc:
         24:96:93:b8:4d:3d:2b:2a:4a:7e:02:a6:7c:93:a9:2c:19:9e:
         eb:92:c3:b7:1e:a5:64:a2:8a:70:1a:73:b9:68:1b:0f:ff:0b:
         aa:dd:10:95:bd:bf:19:cf:05:46:67:51:83:5f:49:4e:2b:8a:
         b0:d0:8b:9f:bd:47:6b:8d:bb:53:df:b3:94:a8:70:61:a1:5c:
         82:61:e6:a3:44:b9:3f:60:48:85:66:23:b9:56:f3:40:c8:16:
         af:33:a7:61:bf:15:9a:da:cd:a2:e6:a9:06:1d:a4:9c:67:0d:
         b1:cd:25:87:42:5d:d5:94:a9:d9:6f:41:9a:bf:72:90:95:92:
         f1:65:57:73:5a:51:5f:59:04:8c:ab:5f:76:d2:11:88:87:dc:
         f0:9d:56:2b:9f:70:05:21:05:e0:ed:22:51:d7:d6:2a:5b:27:
         af:11:55:b9:df:86:61:18:3a:fc:b1:e3:84:50:45:26:88:3c:
         17:9b:f8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:20:12 2025 by rpki-client