This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e36392e302f32342d3234203d3e2032363338.roa
File:                     3136352e39382e36392e302f32342d3234203d3e2032363338.roa (raw, json)
Hash identifier:          K5djpnxfnr2eP6boS1ptPTzxjb+0YQwhE9vZHEWVFdg=
Subject key identifier:   67:39:16:17:03:CB:A8:EE:5B:05:56:C1:F4:93:13:BC:13:1A:35:B0
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       5AA5044DA4634A47C724D6E61678DAE1A7A731F0
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e36392e302f32342d3234203d3e2032363338.roa
Signing time:             Thu 27 Nov 2025 19:15:01 +0000
ROA not before:           Thu 27 Nov 2025 19:10:01 +0000
ROA not after:            Thu 26 Nov 2026 19:15:01 +0000
asID:                     2638
IP address blocks:        165.98.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 22:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a5:04:4d:a4:63:4a:47:c7:24:d6:e6:16:78:da:e1:a7:a7:31:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Nov 27 19:10:01 2025 GMT
            Not After : Nov 26 19:15:01 2026 GMT
        Subject: CN=6739161703CBA8EE5B0556C1F49313BC131A35B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:b9:83:f8:38:a3:40:fe:0a:90:9b:c0:d9:
                    b7:e2:77:c4:da:09:8c:ca:3a:08:a8:75:1c:1c:c5:
                    58:72:d2:01:09:eb:2b:03:e1:a8:9d:41:e5:a7:88:
                    2d:77:09:5a:cf:f9:d6:f4:86:0c:c2:87:74:98:a1:
                    3c:8a:47:f3:3c:c2:66:59:41:0a:e5:18:51:62:aa:
                    b8:35:4b:bb:35:95:6d:c8:e1:76:b4:c1:c2:45:3b:
                    30:f2:69:ac:72:4f:6d:ae:ff:10:30:06:00:02:76:
                    42:c3:1b:02:0b:0c:64:9c:56:64:db:d3:75:c3:89:
                    dc:24:93:be:4b:48:70:47:90:34:db:ca:93:00:fe:
                    49:13:a8:c3:b6:9c:69:33:01:f0:9c:de:a0:70:92:
                    81:9f:1d:2e:f0:ce:28:0e:45:a8:16:0e:5a:a1:4e:
                    3e:d4:94:49:2d:a2:5c:e1:f8:0d:03:53:1b:2f:21:
                    d6:05:ff:7f:fc:df:62:1b:7e:bf:4a:ab:69:72:fc:
                    ed:3c:32:27:16:0d:cc:cb:c0:a3:fc:3f:c3:17:d0:
                    e0:7b:e7:c8:9b:fe:49:72:9a:09:f3:f1:4e:57:2b:
                    56:4d:f1:14:be:cc:71:fb:e8:8e:6c:5a:40:6e:31:
                    6d:91:f9:22:11:7b:e9:b2:96:a1:76:26:17:fe:c2:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:39:16:17:03:CB:A8:EE:5B:05:56:C1:F4:93:13:BC:13:1A:35:B0
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e36392e302f32342d3234203d3e2032363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:37:94:a8:59:40:ad:3d:66:34:b0:2d:b9:5e:42:a3:66:e4:
         ae:d9:fd:7b:bc:51:63:be:79:fc:b5:d9:df:6d:66:8e:21:dd:
         c9:19:89:e3:aa:98:21:52:87:5b:fe:95:30:86:22:a3:6c:46:
         74:ce:fc:e3:bd:c6:ce:88:89:03:4f:2a:de:67:3a:c9:80:8b:
         3b:35:1f:f0:bf:08:24:71:fa:72:16:15:74:8b:3a:b7:c2:44:
         39:ea:4e:73:ca:09:0a:d4:36:39:62:a3:70:75:22:91:0d:41:
         69:8e:66:02:0f:bb:4c:7a:7d:4f:54:2c:0f:97:41:f5:bb:2c:
         a6:5a:37:f0:eb:fb:36:be:1c:83:c2:1b:a4:76:62:b8:02:cc:
         47:81:b9:3e:5b:2a:bf:b3:5e:cd:1b:73:97:e4:5f:a9:35:ff:
         c1:9c:c9:03:f9:7d:05:40:ab:51:4b:c6:8a:67:a9:f5:37:6c:
         bd:0f:f2:d2:f7:25:d5:64:7b:71:11:56:db:dd:4f:3e:e5:08:
         ca:9b:14:4a:f3:e2:99:a7:c7:c0:26:d9:45:ab:c2:c6:f9:5f:
         2e:f0:44:c8:b6:5c:03:72:14:ca:d8:42:65:99:07:e0:01:ad:
         76:83:45:1c:2a:b5:19:e6:2c:7f:bf:4d:8c:3b:b6:a0:83:e0:
         63:ab:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:03:56 2025 by rpki-client