This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34352e302f32342d3234203d3e2032363338.roa
File:                     3139322e3133362e34352e302f32342d3234203d3e2032363338.roa (raw, json)
Hash identifier:          bflCW2x8x1Y7G5dXGV/wT/a1bHkj24UpMbjeZG7xSuc=
Subject key identifier:   B8:F8:AA:B8:BB:7E:58:4B:C2:DB:6D:B7:B7:F4:CF:0D:A1:D0:78:1A
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       1AB6761E60F48C86995802BD57B209821F8DC270
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34352e302f32342d3234203d3e2032363338.roa
Signing time:             Tue 16 Dec 2025 22:20:00 +0000
ROA not before:           Tue 16 Dec 2025 22:15:00 +0000
ROA not after:            Tue 15 Dec 2026 22:20:00 +0000
asID:                     2638
IP address blocks:        192.136.45.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 18 Dec 2025 17:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b6:76:1e:60:f4:8c:86:99:58:02:bd:57:b2:09:82:1f:8d:c2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Dec 16 22:15:00 2025 GMT
            Not After : Dec 15 22:20:00 2026 GMT
        Subject: CN=B8F8AAB8BB7E584BC2DB6DB7B7F4CF0DA1D0781A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f3:80:9e:47:bd:4b:10:ee:8b:57:1d:37:e2:
                    e8:bd:62:a9:36:c6:56:8f:94:4b:ac:ac:25:98:1e:
                    a7:9c:02:b4:bc:62:f9:49:0c:ad:57:f6:7a:c2:de:
                    49:77:e0:d9:b1:03:f1:d0:3d:11:0a:10:39:3d:57:
                    5e:d3:61:2b:e1:02:e5:98:f0:fb:29:0d:2f:52:70:
                    8b:9e:0f:de:82:23:f9:eb:e6:b5:27:8d:86:6b:d9:
                    8b:b2:86:11:c4:81:93:d9:1b:fc:6e:0b:d0:d8:5b:
                    e3:0a:ab:d2:35:71:42:df:26:6b:00:7d:3f:c0:0c:
                    71:af:a1:63:0a:c4:d0:07:f7:63:b2:51:7d:3a:45:
                    52:6b:9c:14:e3:ff:58:ac:33:20:3b:52:93:a3:6a:
                    89:b0:db:cf:fe:b9:06:cc:c9:9c:36:c9:50:fe:54:
                    ce:6f:45:41:23:05:02:3d:60:42:0f:61:2d:6e:9e:
                    40:c5:32:24:0a:91:8c:e2:5a:e3:fa:2f:9a:5e:09:
                    2a:62:98:b3:36:ef:2e:ad:ca:4c:70:54:5b:ea:18:
                    63:99:92:86:bf:79:f9:80:0c:60:b6:5b:6c:9e:37:
                    2e:23:a3:6c:db:be:1e:51:a0:df:52:cc:71:37:d8:
                    bb:cd:9b:2a:dd:df:6d:e8:06:c4:ac:d0:9f:0a:ed:
                    33:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F8:AA:B8:BB:7E:58:4B:C2:DB:6D:B7:B7:F4:CF:0D:A1:D0:78:1A
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34352e302f32342d3234203d3e2032363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:71:5b:82:fe:86:3e:93:f3:dd:77:dd:17:cb:a1:b8:e8:e2:
         3c:2a:29:29:e1:96:fa:b5:af:eb:d5:82:fb:56:57:9d:34:66:
         0e:9c:6b:b7:3b:d0:f9:47:44:5a:cc:87:94:1f:8f:f1:7b:8e:
         2c:95:87:30:a6:79:86:24:ef:72:3a:df:ba:26:ea:61:61:34:
         57:79:33:5e:09:33:35:33:f1:11:e8:b2:e6:74:9e:9f:fc:e3:
         ae:73:34:15:63:c4:7b:66:2d:87:dc:1a:c0:13:a3:92:a3:5b:
         5d:1a:87:1c:0c:59:94:02:91:41:4f:7d:e9:20:e1:48:49:e3:
         c7:54:00:ea:56:32:c6:d9:84:cc:19:31:dc:e0:c0:3c:ab:f0:
         64:5b:12:8f:db:f9:cd:f1:16:ea:09:90:e7:07:7a:3d:11:43:
         99:28:a1:54:28:19:d0:fd:99:59:3c:8e:6f:78:a0:8a:28:bd:
         f1:63:48:90:f4:9b:e9:1c:8d:50:d8:bf:b3:31:b5:c3:35:2d:
         27:3d:17:ec:d9:bd:42:02:8a:c4:6f:de:d2:38:90:e6:89:57:
         47:45:02:c3:40:91:d0:ce:aa:04:e7:85:e7:a5:13:da:85:61:
         b5:20:20:b3:84:79:e0:d7:71:e7:df:33:99:e8:a1:18:41:0d:
         aa:0d:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:02:24 2025 by rpki-client