This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3231392e302f32342d3234203d3e20323637373937.roa
File:                     3136352e39382e3231392e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          y1zWM1pbLnMETGz51sfXyocG/arvxpBh1c+AaXJVLhU=
Subject key identifier:   1A:5E:EC:96:32:09:EA:4A:D2:7D:10:17:12:24:AE:35:4B:8B:34:4F
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       50E0AEDDCCAD6FAF9C254271E6C1A179E8FB942E
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3231392e302f32342d3234203d3e20323637373937.roa
Signing time:             Fri 19 Dec 2025 17:55:35 +0000
ROA not before:           Fri 19 Dec 2025 17:50:35 +0000
ROA not after:            Fri 18 Dec 2026 17:55:35 +0000
asID:                     267797
IP address blocks:        165.98.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 13:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e0:ae:dd:cc:ad:6f:af:9c:25:42:71:e6:c1:a1:79:e8:fb:94:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Dec 19 17:50:35 2025 GMT
            Not After : Dec 18 17:55:35 2026 GMT
        Subject: CN=1A5EEC963209EA4AD27D10171224AE354B8B344F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:1c:ab:aa:8f:ab:7f:a4:f3:a0:85:2a:19:
                    73:db:fd:27:0b:c0:78:b5:76:42:b4:8a:1b:32:fb:
                    f5:77:02:64:af:e5:56:3c:c4:b9:17:a4:32:a3:a0:
                    5a:80:eb:f1:61:46:bd:8e:0e:40:eb:e9:86:6a:e7:
                    3c:2b:7a:60:35:80:29:28:8a:02:09:20:4c:1a:03:
                    0c:2d:9d:42:1a:d7:63:70:03:da:2e:50:3f:c3:ee:
                    cd:09:b0:8a:9a:04:d1:93:3d:07:0d:8d:da:83:a8:
                    3a:c5:1d:0c:1a:d2:5c:49:a8:0c:bd:a8:f1:fa:cc:
                    95:c1:ed:6a:a9:bc:4a:41:52:a4:d3:ec:10:21:df:
                    ae:cb:0d:53:89:cf:91:3e:62:dd:9d:9c:29:48:a8:
                    49:bc:28:ee:f4:2a:3e:b8:22:39:39:a0:42:63:8e:
                    7f:52:82:56:f4:97:df:5b:48:b7:1e:20:b4:00:3d:
                    b7:24:64:94:a0:00:f5:ae:ff:26:47:94:d9:d0:e5:
                    bd:a0:37:12:75:e4:58:7a:6f:b8:84:0e:b0:11:f8:
                    d6:53:a2:23:cf:b1:be:2f:10:a0:a6:7d:5b:b9:6a:
                    08:85:50:5f:ca:4f:2c:df:3b:63:67:64:5d:27:8f:
                    04:00:b8:2b:b7:a2:a9:d2:df:19:1a:de:ed:56:43:
                    04:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5E:EC:96:32:09:EA:4A:D2:7D:10:17:12:24:AE:35:4B:8B:34:4F
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3231392e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:fb:8d:4e:2f:f1:8c:63:be:8a:92:6f:04:4c:59:98:23:1f:
         b5:4e:20:53:24:02:4b:43:74:b6:50:10:72:b9:bf:a7:20:85:
         f5:7e:16:25:41:60:f8:81:30:be:81:0f:7a:7a:8e:f2:c4:13:
         b9:fe:64:28:84:36:e3:a8:42:84:d3:02:ed:57:c7:76:7f:69:
         6e:6e:72:d5:f1:12:f2:ca:6f:7a:cf:e1:ce:31:70:ae:b8:95:
         48:be:c7:85:0e:b9:1c:ad:4d:17:80:44:18:98:be:6d:7d:05:
         23:ed:48:cc:b9:b8:cb:7e:54:2a:7d:43:7c:dd:a5:eb:d1:fc:
         00:16:71:e1:02:50:25:29:aa:de:63:73:88:a0:88:d9:bd:59:
         f3:3f:0e:bf:fb:aa:d3:87:49:cd:2c:7d:d8:d2:cf:54:61:46:
         f5:88:78:cd:d3:85:ed:39:96:a4:9d:98:8a:92:9b:d6:2d:d4:
         8f:59:15:cf:42:af:00:09:94:8c:3f:3f:54:ee:1a:51:ad:d9:
         2d:8a:75:81:9f:db:92:78:03:32:67:20:1e:f2:ee:dd:86:55:
         29:2c:97:60:d5:d9:ab:40:7b:08:78:ba:d7:e3:e2:8e:72:59:
         fd:2a:80:78:15:dd:d9:95:f7:50:06:dd:1c:6b:c0:fc:be:bc:
         06:e0:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:35:28 2025 by rpki-client