This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37352e302f32342d3234203d3e203238303336.roa
File:                     3136352e39382e37352e302f32342d3234203d3e203238303336.roa (raw, json)
Hash identifier:          O4Ws545y9moisC9MmT0CjvxnS4LQL0/QCMxX/8s/014=
Subject key identifier:   BB:76:C9:71:25:83:B5:A4:9B:56:75:E6:54:C4:8B:9D:79:09:0F:CB
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       2D1F8E2870A7EC73877DDB37DEC8018137573109
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37352e302f32342d3234203d3e203238303336.roa
Signing time:             Fri 28 Nov 2025 17:35:02 +0000
ROA not before:           Fri 28 Nov 2025 17:30:02 +0000
ROA not after:            Fri 27 Nov 2026 17:35:02 +0000
asID:                     28036
IP address blocks:        165.98.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 22:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1f:8e:28:70:a7:ec:73:87:7d:db:37:de:c8:01:81:37:57:31:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Nov 28 17:30:02 2025 GMT
            Not After : Nov 27 17:35:02 2026 GMT
        Subject: CN=BB76C9712583B5A49B5675E654C48B9D79090FCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:fc:56:40:79:9e:aa:59:47:bf:1d:b9:19:
                    1a:3b:8c:92:c3:f5:67:4d:1f:ab:21:ca:cb:e0:de:
                    e3:c9:5a:4c:a5:cf:56:3e:f7:5a:18:7f:2c:a1:4f:
                    12:00:6c:b2:84:43:4e:a3:d6:a7:9c:a4:b7:c2:23:
                    a3:f4:a9:c4:cb:26:87:33:6e:40:b9:57:dd:5a:c3:
                    2e:d1:38:9b:38:66:a1:aa:66:de:40:f7:68:a1:57:
                    ad:7f:ea:44:ed:59:27:27:3e:54:b2:e1:c7:8d:94:
                    c8:67:e9:14:e1:53:ee:d5:97:fd:81:ef:cc:36:0e:
                    2b:10:90:5f:3e:d8:c9:2a:b8:5c:b2:be:b7:5b:07:
                    76:bd:33:ea:ff:85:eb:cb:2b:3a:e3:d0:64:b6:bf:
                    7e:18:26:32:a8:9b:90:0b:03:b4:27:06:39:23:86:
                    87:de:98:91:aa:52:0d:53:91:b4:6b:c1:a6:45:b2:
                    2a:b3:a8:59:4a:46:63:76:b7:74:25:a8:74:39:d5:
                    43:86:cb:22:f0:30:a7:a5:c2:93:19:95:c1:dc:b7:
                    b8:51:3e:7c:c2:9b:57:28:e9:b5:2a:31:56:ee:dd:
                    f8:58:d7:2c:7f:ce:b6:ab:17:f0:15:64:16:49:66:
                    bb:bb:75:27:60:de:10:a9:fa:6f:a9:a3:4a:10:82:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:76:C9:71:25:83:B5:A4:9B:56:75:E6:54:C4:8B:9D:79:09:0F:CB
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37352e302f32342d3234203d3e203238303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:e1:84:bd:b1:23:8d:72:1e:b2:03:65:37:03:4d:30:ee:b7:
         21:f1:9d:b1:fe:83:a1:b9:7d:ed:65:fc:c2:7a:c6:e7:e6:10:
         0f:a5:43:96:12:27:97:eb:c6:6f:cf:71:8a:0e:f1:56:8e:4d:
         d4:28:4b:7b:9c:e9:01:b0:26:ea:9b:23:de:d4:9e:89:6d:75:
         76:03:f5:70:c3:63:98:76:85:d9:8d:2e:30:e0:e3:2a:26:2c:
         8d:7b:c0:cb:b3:0c:b6:24:2b:8a:8e:2c:89:5b:1a:9b:1c:61:
         92:b4:37:9e:14:96:58:f7:ac:7a:3a:d2:5c:4a:87:93:9a:ef:
         c8:87:1b:dc:80:11:3a:34:c8:18:68:27:42:4f:67:6d:b3:db:
         9b:83:31:67:dc:88:1b:19:71:81:04:88:d5:57:66:8d:c9:f4:
         10:49:e9:3b:62:c0:f4:2f:f3:20:a1:95:45:aa:d4:bb:d2:e3:
         e7:b5:1c:f1:69:14:06:39:55:6e:af:53:5b:b8:63:cd:6b:2b:
         96:ba:0b:1f:83:e6:6d:cf:3e:2e:38:8b:58:7d:30:a1:e2:8d:
         c2:83:99:95:ee:dc:38:71:e5:96:3d:b2:b6:87:0d:da:ce:dd:
         83:a8:d8:25:e6:79:ca:a5:23:0f:04:f3:a4:6a:66:8a:3a:db:
         0a:ba:da:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:20:21 2025 by rpki-client