This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138352e34322e32302e302f32322d3232203d3e20323632313931.roa
File:                     3138352e34322e32302e302f32322d3232203d3e20323632313931.roa (raw, json)
Hash identifier:          HLcRsYuwxg0bAy1Tanbo7fbPZi351rksolkIPcv2DXQ=
Subject key identifier:   7A:2E:A7:A8:A5:ED:DE:08:DA:BE:DF:F6:43:48:97:C0:D7:CF:6B:0B
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       740340C1D2D4027D9D439901E53141931AE82B5A
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138352e34322e32302e302f32322d3232203d3e20323632313931.roa
Signing time:             Mon 15 Dec 2025 16:35:00 +0000
ROA not before:           Mon 15 Dec 2025 16:30:00 +0000
ROA not after:            Mon 14 Dec 2026 16:35:00 +0000
asID:                     262191
IP address blocks:        185.42.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:03:40:c1:d2:d4:02:7d:9d:43:99:01:e5:31:41:93:1a:e8:2b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Dec 15 16:30:00 2025 GMT
            Not After : Dec 14 16:35:00 2026 GMT
        Subject: CN=7A2EA7A8A5EDDE08DABEDFF6434897C0D7CF6B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:07:2a:85:51:f1:ac:cb:8b:aa:31:64:27:88:
                    38:9d:ec:df:d5:2a:9b:32:d8:3e:b5:c9:ee:bb:9e:
                    d8:1d:91:46:f6:2f:f7:57:40:82:0d:98:dd:12:56:
                    22:8c:b0:99:5e:81:d0:eb:32:27:69:47:06:de:b6:
                    42:a8:31:b5:31:a7:02:ee:b6:77:cb:39:a3:53:8c:
                    d1:2d:95:84:c8:13:85:08:bd:12:94:f2:e6:3f:a2:
                    78:2b:8f:f3:ec:5b:6a:f7:14:ec:d6:9f:b7:d8:6c:
                    a1:6b:0f:b3:51:99:8c:d6:c9:e9:4f:5a:d4:53:ce:
                    ac:26:83:7f:fb:e4:b1:a6:60:96:45:d3:fd:70:b6:
                    67:73:11:c2:05:74:e4:6c:d2:cf:bc:14:b5:a8:e8:
                    38:e0:0d:bf:6c:38:7f:21:18:42:22:3f:0f:0d:e5:
                    2f:62:cc:b4:ea:55:e4:63:8f:26:6a:02:65:66:dc:
                    ce:90:1b:f1:9e:25:14:b1:42:4e:4a:67:96:09:37:
                    d4:9d:88:aa:f8:3c:a0:74:e6:ef:d4:bc:70:66:b0:
                    85:dc:d4:d9:67:df:98:c3:0c:0c:e7:cd:6a:8e:79:
                    c8:c0:1a:cb:cc:75:d4:f7:01:b6:7e:c0:84:1b:97:
                    f4:be:d0:90:2e:fe:35:9d:63:06:1e:4a:4a:12:59:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2E:A7:A8:A5:ED:DE:08:DA:BE:DF:F6:43:48:97:C0:D7:CF:6B:0B
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138352e34322e32302e302f32322d3232203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.42.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:ef:59:37:cc:6e:51:8a:54:c9:21:c3:b2:88:40:ef:8a:6d:
         41:c1:25:b9:bb:2f:3c:75:3f:38:7b:21:32:29:9f:fc:8b:7a:
         5c:25:cb:2d:19:44:b6:8d:7a:4a:23:21:a0:f7:22:96:e9:32:
         db:c1:02:ac:07:c6:e3:6f:18:65:d9:ae:c4:85:7f:e7:87:b5:
         76:d5:55:36:2b:cd:15:1a:ca:29:4d:d8:35:c6:20:af:ac:45:
         29:f6:2d:0e:9d:61:3a:e7:11:f0:c7:ee:40:5e:c5:23:43:3f:
         bf:b8:f5:48:6e:4c:5b:b0:30:ca:cd:18:2e:51:f0:ea:ad:9f:
         3d:f9:e0:1f:21:c0:02:5b:d2:9a:a2:1c:32:bf:8b:f1:8e:d2:
         14:89:66:66:1a:c7:bd:0d:35:e3:f6:03:1f:ca:c4:6b:06:3e:
         eb:08:98:1a:04:0f:0f:f8:50:0d:e4:1b:7d:ed:c9:c4:2b:6a:
         a1:47:32:24:e9:9b:9d:f4:f9:40:39:02:20:b7:cd:e2:60:60:
         47:f7:20:c8:78:74:2a:6c:8d:f9:b5:3d:13:8e:7f:8a:ef:de:
         17:ce:4b:33:cc:89:63:3d:3a:be:c7:ed:c3:e1:d2:7a:1e:5d:
         85:a1:02:92:ab:ae:1c:2e:a1:34:76:72:4f:a1:ae:f5:3e:e9:
         d7:bf:7c:38
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdANAwdLUAn2dQ5kB5TFBkxroK1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNTEyMTUxNjMwMDBaFw0yNjEyMTQxNjM1MDBaMDMxMTAvBgNV
BAMTKDdBMkVBN0E4QTVFRERFMDhEQUJFREZGNjQzNDg5N0MwRDdDRjZCMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMByqFUfGsy4uqMWQniDid7N/V
Kpsy2D61ye67ntgdkUb2L/dXQIINmN0SViKMsJlegdDrMidpRwbetkKoMbUxpwLu
tnfLOaNTjNEtlYTIE4UIvRKU8uY/ongrj/PsW2r3FOzWn7fYbKFrD7NRmYzWyelP
WtRTzqwmg3/75LGmYJZF0/1wtmdzEcIFdORs0s+8FLWo6DjgDb9sOH8hGEIiPw8N
5S9izLTqVeRjjyZqAmVm3M6QG/GeJRSxQk5KZ5YJN9SdiKr4PKB05u/UvHBmsIXc
1Nln35jDDAznzWqOecjAGsvMddT3AbZ+wIQbl/S+0JAu/jWdYwYeSkoSWXFVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUei6nqKXt3gjavt/2Q0iXwNfPawswHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMxMzgzNTJlMzQzMjJlMzIzMDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMjMxMzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkqFDAN
BgkqhkiG9w0BAQsFAAOCAQEADe9ZN8xuUYpUySHDsohA74ptQcElubsvPHU/OHsh
Mimf/It6XCXLLRlEto16SiMhoPciluky28ECrAfG428YZdmuxIV/54e1dtVVNivN
FRrKKU3YNcYgr6xFKfYtDp1hOucR8MfuQF7FI0M/v7j1SG5MW7Awys0YLlHw6q2f
PfngHyHAAlvSmqIcMr+L8Y7SFIlmZhrHvQ014/YDH8rEawY+6wiYGgQPD/hQDeQb
fe3JxCtqoUcyJOmbnfT5QDkCILfN4mBgR/cgyHh0KmyN+bU9E45/iu/eF85LM8yJ
Yz06vsftw+HSeh5dhaECkquuHC6hNHZyT6Gu9T7p1798OA==
-----END CERTIFICATE-----
Generated at Wed Dec 17 20:10:27 2025 by rpki-client