This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133352e302f32342d3234203d3e203237373432.roa
File:                     3136352e39382e3133352e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          xXkLc2RD8xaT06fL56BvSyJsbMCLxXRRGlyaO8jzChI=
Subject key identifier:   E6:FF:D4:BB:9C:73:6D:DF:55:86:B4:D4:E3:47:9B:5C:2D:C8:C0:56
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       5C07BE55706EB9ED4FCF3276B914C35BD2BD6B95
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133352e302f32342d3234203d3e203237373432.roa
Signing time:             Fri 28 Nov 2025 17:35:01 +0000
ROA not before:           Fri 28 Nov 2025 17:30:01 +0000
ROA not after:            Fri 27 Nov 2026 17:35:01 +0000
asID:                     27742
IP address blocks:        165.98.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Dec 2025 17:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:07:be:55:70:6e:b9:ed:4f:cf:32:76:b9:14:c3:5b:d2:bd:6b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Nov 28 17:30:01 2025 GMT
            Not After : Nov 27 17:35:01 2026 GMT
        Subject: CN=E6FFD4BB9C736DDF5586B4D4E3479B5C2DC8C056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:23:28:cc:9a:db:81:25:b5:cc:12:e4:aa:
                    f8:38:b3:8c:03:e4:c0:e7:38:d2:d9:43:65:4d:6e:
                    13:62:ce:80:af:ad:27:c0:fe:04:84:76:10:44:be:
                    51:b8:50:f5:a3:5e:94:a0:fd:46:f9:e7:01:6d:f3:
                    d3:92:ef:a5:39:d0:04:e7:e5:eb:07:b4:e8:6b:65:
                    9a:f9:1f:33:cb:22:16:a5:9b:ef:a9:26:5a:1d:f3:
                    6e:9a:1b:9d:2e:e8:3d:47:45:cf:55:0b:9a:4b:a4:
                    fb:5b:a7:fc:32:41:0f:b1:ae:05:97:a9:bf:00:b9:
                    5c:09:a8:72:ec:b5:91:26:96:39:13:05:a7:72:73:
                    ef:3e:41:1e:73:7e:86:e9:22:5c:bd:ca:4d:8b:f0:
                    71:4b:e0:b8:fc:2e:a8:8e:de:df:2f:b4:7c:3b:d6:
                    12:25:f1:9e:c7:6a:34:af:1e:b3:02:a9:ec:f6:38:
                    a2:f2:3e:62:8a:53:e0:0f:01:bd:9d:cb:0d:6d:12:
                    d1:9e:52:61:53:65:ef:ef:da:5f:5d:3d:7c:a2:89:
                    b9:f1:89:32:e1:db:50:34:84:8f:4b:60:0d:ad:f2:
                    30:65:9e:7b:f5:ac:d1:40:9c:dc:48:99:a8:ac:16:
                    da:dc:09:a6:74:ec:84:9b:3a:09:fc:00:f3:08:52:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FF:D4:BB:9C:73:6D:DF:55:86:B4:D4:E3:47:9B:5C:2D:C8:C0:56
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3133352e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:f7:39:86:16:12:ba:f5:96:d8:74:25:07:23:59:95:c2:b8:
         60:a2:b1:44:c3:66:3a:3e:5e:7e:18:8d:70:a2:f7:e0:59:50:
         84:d1:71:36:b7:0e:54:e6:6e:62:31:b3:a3:44:57:5e:26:b5:
         7e:b6:3b:ac:4c:5c:a1:09:39:46:ec:36:4a:d9:cf:ea:98:08:
         af:f7:d1:c7:fa:40:d0:eb:28:5a:b0:08:9f:73:20:b8:7d:ae:
         77:59:7a:5d:7c:e2:92:5a:cc:49:1c:2f:3f:2c:00:c7:6e:a4:
         43:bb:53:7f:83:e2:ec:fc:1f:91:88:5e:ef:bb:16:54:68:ab:
         9d:a3:c3:44:16:3b:0a:e0:3e:f6:b1:a1:38:84:63:da:e2:3a:
         fb:b3:b5:2b:07:d0:ab:f5:75:63:5d:2d:51:d9:f9:9d:7a:8e:
         05:c6:e9:c4:46:ca:cd:ac:15:ec:cd:f4:80:81:57:b6:92:ee:
         6f:fd:8d:cc:44:32:a9:c5:e9:eb:5f:5f:22:42:fe:cc:bd:a6:
         c1:f6:94:8a:2e:b1:21:2a:2b:6e:8a:ec:92:9c:1e:53:6a:99:
         6b:9a:37:b1:c1:86:9b:57:e8:5d:4b:5f:de:df:bd:d1:ea:52:
         ea:68:5f:18:a6:81:84:d3:94:6c:b0:b7:1d:e5:96:5c:c2:66:
         96:a7:f8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 10:24:10 2025 by rpki-client