This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231392e302f32342d3234203d3e20323635373734.roa
File:                     3136342e3136332e3231392e302f32342d3234203d3e20323635373734.roa (raw, json)
Hash identifier:          ZTGnLH5AuruyXrOa0JrRxjcPTAIeu/L321gw5lIFR4E=
Subject key identifier:   B5:A0:D3:BF:1B:68:9F:0C:0C:01:48:37:BF:09:A5:E9:38:3A:B0:68
Certificate issuer:       /CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
Certificate serial:       1524D34563833EC7EAD2B1DB1C44D2F05839CB40
Authority key identifier: D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231392e302f32342d3234203d3e20323635373734.roa
Signing time:             Thu 20 Nov 2025 15:53:17 +0000
ROA not before:           Thu 20 Nov 2025 15:48:17 +0000
ROA not after:            Thu 19 Nov 2026 15:53:17 +0000
asID:                     265774
IP address blocks:        164.163.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:24:d3:45:63:83:3e:c7:ea:d2:b1:db:1c:44:d2:f0:58:39:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
        Validity
            Not Before: Nov 20 15:48:17 2025 GMT
            Not After : Nov 19 15:53:17 2026 GMT
        Subject: CN=B5A0D3BF1B689F0C0C014837BF09A5E9383AB068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:47:85:77:23:ee:1e:4d:45:bf:d1:b8:c7:
                    91:78:54:d7:8b:2b:b8:6b:31:00:35:1f:7c:71:0b:
                    1b:80:7d:ea:58:1a:97:ef:f8:7c:bd:c8:ff:18:ce:
                    dd:cc:ee:7a:79:af:df:fc:13:e4:5b:36:25:39:66:
                    cc:e3:97:29:3d:b7:94:9b:39:c1:85:60:f3:49:8a:
                    dc:79:2c:ae:6d:89:dd:41:05:df:d1:37:ad:f6:c6:
                    0b:96:01:e1:6d:5f:d6:5c:3e:0a:ea:30:9f:21:4e:
                    74:88:5d:65:0d:2f:d3:8e:e2:ef:69:d3:ba:f6:f9:
                    63:e7:89:89:41:4e:b4:31:ff:97:7a:13:54:67:e7:
                    22:aa:20:56:ed:98:ad:93:64:d5:f8:a1:ca:75:df:
                    c9:40:a7:a3:46:e0:f0:0e:51:d4:c3:50:ff:2c:70:
                    56:63:dd:2e:78:11:a5:31:90:8d:d2:ad:b6:8a:76:
                    69:ae:18:ba:2c:65:de:1f:7d:4b:95:cf:77:ee:e8:
                    40:66:07:b8:b6:48:1e:01:7f:a3:7f:ac:9c:ea:74:
                    54:7d:13:8a:b7:5b:26:98:47:3c:92:c9:46:d4:b3:
                    0e:e9:f1:dd:aa:30:f0:69:c1:e6:07:81:ab:2a:0a:
                    70:14:7f:f1:08:82:5f:04:b0:43:e2:f1:15:ed:c3:
                    a8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A0:D3:BF:1B:68:9F:0C:0C:01:48:37:BF:09:A5:E9:38:3A:B0:68
            X509v3 Authority Key Identifier:
                keyid:D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231392e302f32342d3234203d3e20323635373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:2d:42:1e:cf:71:c0:27:71:32:c8:35:b2:73:dd:af:36:e6:
         51:04:60:a8:af:1a:53:76:57:fd:74:b0:8d:00:b8:84:d6:d0:
         bf:ff:de:d5:dc:ca:55:80:ea:0b:5f:db:0d:e2:c5:f4:5f:06:
         c7:58:13:ba:ef:06:8e:59:85:a8:2b:c1:35:1a:ba:b5:08:94:
         5c:6f:8e:ff:70:69:88:f2:e5:55:03:80:2a:99:92:e1:98:59:
         53:88:c3:71:f8:72:84:e9:4e:55:40:c4:bf:0f:21:5c:6b:4a:
         c7:33:95:4a:2b:8b:a2:23:80:79:0a:e8:c5:fb:16:0d:59:e8:
         7a:e2:68:ad:16:52:f0:fa:42:e8:54:3b:f5:35:54:ac:73:b7:
         4e:6b:92:55:14:47:c6:c3:9f:c2:d5:c7:53:25:df:e6:0d:42:
         f3:68:17:47:c1:93:80:3e:da:b0:01:56:6c:f6:9e:bd:6d:eb:
         3d:44:03:c2:62:55:e6:bb:d4:4d:8b:18:46:9b:38:ad:66:3d:
         7f:5e:3d:7a:c3:55:8f:69:bb:ee:7e:3a:24:53:b1:de:97:6b:
         0e:5b:d1:9e:4c:cc:c3:cd:25:0c:c4:26:fe:9e:cb:cf:a5:c9:
         fe:d4:05:b5:51:71:cf:6b:28:f1:28:9f:ab:14:39:b6:38:34:
         65:32:75:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:28:05 2025 by rpki-client