This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37312e302f32342d3234203d3e2032363338.roa
File:                     3136352e39382e37312e302f32342d3234203d3e2032363338.roa (raw, json)
Hash identifier:          gY4TCR3O8mG1CUMtpf//9qiCn5FXZ8cy4gqhmdU5p6k=
Subject key identifier:   66:05:A1:63:45:01:26:3E:7E:2E:B8:A5:E2:61:9C:70:36:63:E0:1F
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       0D18B5FE5266E45B7F3081D54051225429A5CA5A
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37312e302f32342d3234203d3e2032363338.roa
Signing time:             Thu 27 Nov 2025 19:15:03 +0000
ROA not before:           Thu 27 Nov 2025 19:10:03 +0000
ROA not after:            Thu 26 Nov 2026 19:15:03 +0000
asID:                     2638
IP address blocks:        165.98.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 22:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:18:b5:fe:52:66:e4:5b:7f:30:81:d5:40:51:22:54:29:a5:ca:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Nov 27 19:10:03 2025 GMT
            Not After : Nov 26 19:15:03 2026 GMT
        Subject: CN=6605A1634501263E7E2EB8A5E2619C703663E01F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:18:ee:3e:7b:ab:37:b6:cc:e3:08:6d:ad:
                    1a:bd:50:6b:40:aa:a2:98:d2:ee:4c:cf:89:64:46:
                    a8:15:da:8e:ae:fc:00:1a:b8:14:4a:72:3e:fc:cf:
                    9d:ac:f4:97:47:84:ea:28:72:ac:ad:7f:51:9f:05:
                    a7:ee:9e:8e:cd:48:f2:fe:26:aa:a8:bc:71:ab:2d:
                    6e:d5:6c:0a:0d:12:09:62:dd:54:a7:2d:2d:61:d8:
                    fb:63:a8:48:6b:9d:ec:a0:70:4d:45:81:6d:ad:1d:
                    1d:12:b4:2d:f4:2f:e6:84:26:55:6a:39:2b:a5:4a:
                    59:cb:21:67:f5:73:f5:b3:ea:b9:cc:bb:c9:d6:3b:
                    68:da:ec:25:d4:a7:cc:06:9b:9e:38:01:c2:b8:a6:
                    f9:0a:61:13:d9:12:9d:8a:1c:7c:ba:97:3a:18:cf:
                    2c:1e:22:83:da:6f:18:aa:1c:4a:ac:14:8b:f4:1e:
                    96:58:67:90:a6:26:85:51:0e:3b:b5:cd:e2:7e:b4:
                    c1:c2:d7:88:a0:11:56:ef:c7:9e:80:bf:09:c8:5b:
                    1f:cd:dc:d1:ab:dd:91:67:0f:8c:3b:02:77:6a:86:
                    f4:06:df:e1:48:56:8f:5c:e6:ba:66:5c:10:7d:d1:
                    b5:d5:4b:4d:0e:8c:f0:9f:a9:2b:60:b0:46:a4:85:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:05:A1:63:45:01:26:3E:7E:2E:B8:A5:E2:61:9C:70:36:63:E0:1F
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37312e302f32342d3234203d3e2032363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:53:4d:ab:14:9a:f6:8c:cb:53:2d:72:97:c4:ab:05:c7:1f:
         f8:16:cd:f4:f2:e7:81:87:b9:ce:7a:17:a3:e4:6d:3b:06:63:
         b9:78:c1:d7:f1:1d:62:de:08:6d:64:05:bf:ab:1d:52:b3:6e:
         75:8e:36:f2:e8:9d:4a:90:24:b8:71:2d:67:9d:c5:78:30:a9:
         5a:b0:68:c5:6b:21:2b:64:b5:a9:1f:b1:cc:3d:8a:e0:9b:af:
         80:76:9b:f9:c1:69:80:88:2a:8a:37:1b:4c:c6:cc:4b:d9:be:
         d7:50:45:9d:06:24:4d:9e:9c:c3:19:e3:2c:c8:03:31:53:bc:
         be:ea:38:84:40:79:20:af:06:79:44:dc:f9:f4:91:0d:65:18:
         42:dd:2c:4b:f8:20:13:10:23:82:72:7e:6d:e9:10:39:29:bb:
         a4:49:93:b9:dc:86:29:fc:ea:18:29:78:3d:74:94:69:70:4c:
         fa:26:b8:89:b6:c0:f7:a8:68:56:87:8a:ef:2b:02:35:a6:ed:
         29:b5:2e:37:e7:4f:bf:b0:8c:b4:59:fd:78:34:00:1e:ae:c5:
         1d:8a:a8:0a:ef:29:4c:04:e5:a1:f6:3c:82:29:e4:59:ef:96:
         03:59:97:06:5d:91:86:28:88:19:fc:73:ae:f3:c1:15:20:64:
         17:16:ce:33
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUDRi1/lJm5Ft/MIHVQFEiVCmlylowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC
MzAzQzAzRDAeFw0yNTExMjcxOTEwMDNaFw0yNjExMjYxOTE1MDNaMDMxMTAvBgNV
BAMTKDY2MDVBMTYzNDUwMTI2M0U3RTJFQjhBNUUyNjE5QzcwMzY2M0UwMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ChjuPnurN7bM4whtrRq9UGtA
qqKY0u5Mz4lkRqgV2o6u/AAauBRKcj78z52s9JdHhOoocqytf1GfBafuno7NSPL+
JqqovHGrLW7VbAoNEgli3VSnLS1h2PtjqEhrneygcE1FgW2tHR0StC30L+aEJlVq
OSulSlnLIWf1c/Wz6rnMu8nWO2ja7CXUp8wGm544AcK4pvkKYRPZEp2KHHy6lzoY
zyweIoPabxiqHEqsFIv0HpZYZ5CmJoVRDju1zeJ+tMHC14igEVbvx56AvwnIWx/N
3NGr3ZFnD4w7AndqhvQG3+FIVo9c5rpmXBB90bXVS00OjPCfqStgsEakhdEBAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUZgWhY0UBJj5+Lril4mGccDZj4B8wHwYDVR0j
BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5
QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5
MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4
MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC
RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMxMzYzNTJlMzkzODJlMzczMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApWJHMA0GCSqG
SIb3DQEBCwUAA4IBAQAiU02rFJr2jMtTLXKXxKsFxx/4Fs308ueBh7nOehej5G07
BmO5eMHX8R1i3ghtZAW/qx1Ss251jjby6J1KkCS4cS1nncV4MKlasGjFayErZLWp
H7HMPYrgm6+Adpv5wWmAiCqKNxtMxsxL2b7XUEWdBiRNnpzDGeMsyAMxU7y+6jiE
QHkgrwZ5RNz59JENZRhC3SxL+CATECOCcn5t6RA5KbukSZO53IYp/OoYKXg9dJRp
cEz6JriJtsD3qGhWh4rvKwI1pu0ptS4350+/sIy0Wf14NAAersUdiqgK7ylMBOWh
9jyCKeRZ75YDWZcGXZGGKIgZ/HOu88EVIGQXFs4z
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:03:59 2025 by rpki-client