This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138352e34322e32302e302f32322d3232203d3e20323632313931.roa
File:                     3138352e34322e32302e302f32322d3232203d3e20323632313931.roa (raw, json)
Hash identifier:          NYXB8SxKQ5V9LAiwoGufcbI3Pzs7+BRDngi5a7u1oio=
Subject key identifier:   03:42:B4:6B:E6:AC:91:7D:1D:D1:81:81:97:12:62:7C:BA:9B:E1:EF
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       74D344A12335427FE2C1EBA4C4878BAFF12793E2
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138352e34322e32302e302f32322d3232203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:14 +0000
ROA not before:           Fri 30 Jan 2026 06:36:14 +0000
ROA not after:            Fri 29 Jan 2027 06:41:14 +0000
asID:                     262191
IP address blocks:        185.42.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Feb 2026 10:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d3:44:a1:23:35:42:7f:e2:c1:eb:a4:c4:87:8b:af:f1:27:93:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:14 2026 GMT
            Not After : Jan 29 06:41:14 2027 GMT
        Subject: CN=0342B46BE6AC917D1DD181819712627CBA9BE1EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:36:21:e8:f1:66:2a:e6:65:bc:f9:5b:0d:8e:
                    8b:67:e8:8d:53:31:6f:1a:fa:2d:6f:8f:b3:fb:24:
                    8e:92:d1:4e:50:cf:ad:0c:f1:82:6a:15:a8:a6:13:
                    55:9e:95:9b:76:e6:19:c6:53:96:44:60:d4:22:ef:
                    3b:33:2f:b7:47:38:4a:3d:c0:77:93:0b:5e:dd:05:
                    da:0c:11:6b:d4:f8:89:c7:8b:b8:12:4f:19:ff:52:
                    bb:08:a6:d0:64:ca:d6:ae:87:46:0c:2d:84:71:6c:
                    81:3e:d6:a8:1f:92:b4:1c:40:c2:0a:85:62:ca:32:
                    fe:69:a9:ab:36:4f:d0:3a:83:60:2e:dd:ca:5f:c6:
                    47:69:08:af:25:fa:1c:a4:cc:66:9f:cc:7d:69:be:
                    b3:4c:c3:14:1f:d4:0a:05:40:17:4b:07:4a:21:28:
                    0c:a6:3b:d0:55:d8:d0:b5:f2:09:f4:0a:63:2a:e5:
                    79:29:96:b9:ab:da:3a:e0:50:48:f3:c0:1a:2e:0c:
                    2e:36:b3:e9:7a:2e:4f:11:20:fa:24:39:aa:d7:3a:
                    7a:f2:18:82:9a:11:55:0b:bc:00:fb:23:22:ee:a6:
                    c0:57:a5:41:3e:a1:32:48:6a:e4:c1:a0:d2:cd:7c:
                    f5:71:76:a6:58:09:22:ce:fb:36:08:1e:27:e9:f7:
                    07:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:42:B4:6B:E6:AC:91:7D:1D:D1:81:81:97:12:62:7C:BA:9B:E1:EF
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138352e34322e32302e302f32322d3232203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.42.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:bc:b9:9d:22:25:47:c8:3e:1f:78:de:04:ab:e3:75:a7:
         e5:58:6a:e4:b3:c7:fd:7c:70:b4:57:73:81:cc:7c:62:1d:7b:
         63:a7:df:e1:d5:a5:0f:cc:99:80:3b:65:6b:02:fb:b5:f8:e1:
         73:ef:48:f9:0b:45:21:b6:26:e0:b0:45:6c:cf:51:41:74:f6:
         1e:2c:89:85:69:29:cd:48:14:db:1b:db:ea:d0:0d:45:8f:c2:
         e3:45:cd:b5:e4:e5:ca:15:66:78:93:82:ce:da:5f:46:11:c5:
         3c:62:50:b9:50:29:09:37:c8:d6:21:95:90:07:0f:b1:03:45:
         26:94:9f:77:3c:ae:6b:41:88:f4:b8:ff:a3:e3:fc:ab:24:93:
         c9:80:65:e4:1c:52:29:3a:0c:ad:ea:96:08:86:c7:6c:83:17:
         dc:a1:bb:78:b0:d8:12:8d:74:94:0d:2c:87:7a:cf:4d:12:81:
         5b:02:be:ea:f6:f1:bf:17:11:1f:7d:4d:7e:fa:80:88:87:ef:
         59:f8:ac:e2:85:98:26:e1:4c:d2:6c:e8:0c:e9:32:53:ad:ee:
         6e:65:a4:81:be:9a:5a:2e:f1:2a:42:02:f4:af:fe:98:34:67:
         1d:22:06:a9:6e:6b:ee:89:98:a7:ff:97:46:69:23:ff:68:3b:
         08:38:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:35:42 2026 by rpki-client