This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31382e302f32342d3234203d3e203532333335.roa
File:                     3138352e37342e31382e302f32342d3234203d3e203532333335.roa (raw, json)
Hash identifier:          A9ubWd6zXRextJ/B+1lIfmXt9WeNTj1eBcTgamTQDXo=
Subject key identifier:   2A:A1:F9:14:27:3B:D2:8B:58:52:6A:E1:BA:8B:90:B4:79:B4:EE:42
Certificate issuer:       /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Certificate serial:       041086307FA582F5A6F5DBC8815B65F15A27F17E
Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31382e302f32342d3234203d3e203532333335.roa
Signing time:             Tue 06 Jan 2026 19:02:14 +0000
ROA not before:           Tue 06 Jan 2026 18:57:14 +0000
ROA not after:            Tue 05 Jan 2027 19:02:14 +0000
asID:                     52335
IP address blocks:        185.74.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:10:86:30:7f:a5:82:f5:a6:f5:db:c8:81:5b:65:f1:5a:27:f1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
        Validity
            Not Before: Jan  6 18:57:14 2026 GMT
            Not After : Jan  5 19:02:14 2027 GMT
        Subject: CN=2AA1F914273BD28B58526AE1BA8B90B479B4EE42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:93:45:b9:2b:f2:5d:61:96:87:fb:26:76:1a:
                    e8:2e:38:f7:98:05:05:0e:a0:7e:e5:94:64:53:f2:
                    db:de:5f:8e:32:51:c2:6d:ca:71:75:2c:6a:3b:0c:
                    8b:d0:90:60:73:de:d3:1b:a3:65:ea:b8:ca:31:ed:
                    a0:64:87:0d:3e:fb:6a:57:17:c1:1f:0a:02:dc:75:
                    05:8a:d6:55:c5:3d:11:68:30:17:13:95:70:d0:d2:
                    6c:67:7f:d3:31:9c:fa:53:d4:15:15:2f:27:18:8e:
                    bf:b6:63:00:42:9d:57:8f:ed:a3:dd:a7:a8:44:18:
                    79:0f:f1:e6:7a:45:4e:e7:60:6b:93:1c:1e:f2:e2:
                    3d:b3:ab:43:81:9d:59:fb:b9:84:d4:ba:ea:65:cc:
                    2b:1c:56:c2:e9:63:b1:1e:50:17:0d:3e:7b:64:9b:
                    92:74:6b:a5:ae:d0:18:77:ef:09:ed:d0:b0:a5:94:
                    5c:c5:a2:5b:c6:3f:de:de:7a:48:7c:a5:51:0f:65:
                    a8:c1:fd:05:44:33:71:e3:b4:4c:98:33:9d:0b:bb:
                    9c:d9:05:d6:02:fb:50:14:9c:ac:0c:07:10:e2:be:
                    53:6f:98:39:e2:c3:93:75:a7:7d:1a:84:16:48:7a:
                    cf:85:09:94:68:68:4c:15:07:9e:1a:cc:f7:00:e0:
                    12:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A1:F9:14:27:3B:D2:8B:58:52:6A:E1:BA:8B:90:B4:79:B4:EE:42
            X509v3 Authority Key Identifier:
                keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31382e302f32342d3234203d3e203532333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.74.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:a9:1b:e1:74:f2:65:d7:b5:1f:c5:6b:ef:4e:28:a2:21:9a:
         28:bd:2b:1c:55:f5:c7:af:af:af:06:21:33:8f:e4:f1:20:18:
         1d:9b:03:e7:bf:1b:52:48:c9:bd:9f:6b:02:b2:5c:bf:06:0a:
         d9:88:6a:70:98:96:68:0a:f0:63:f8:5f:0b:67:dc:af:9b:aa:
         0b:7f:31:dc:16:06:b5:5e:e0:d5:34:3f:2b:a4:45:4b:0f:81:
         bd:17:86:d6:44:5f:e7:17:52:f4:92:e7:5e:13:00:e2:21:6b:
         fa:e6:ad:ec:5a:f6:bd:76:37:7a:54:2c:fa:6b:21:a2:57:68:
         49:aa:7a:22:05:59:22:18:63:c9:1d:88:05:95:b1:85:39:1d:
         bb:40:f7:6b:14:a1:eb:2a:f5:e7:34:91:e2:be:39:71:4d:0d:
         76:35:05:7d:ad:c1:c4:fc:fc:c1:a9:91:54:3f:b8:ca:95:06:
         4d:e9:4a:12:5e:a2:4b:a3:43:f2:60:4d:b3:d1:f1:1e:dc:93:
         c1:95:f0:a9:eb:c5:b7:60:ca:61:91:a1:36:0d:ed:b1:1b:9a:
         98:ff:b0:e9:3e:40:95:8c:57:be:55:a3:90:e6:69:bc:69:5d:
         04:b7:ce:62:f1:63:1b:31:64:14:14:6c:df:ad:85:ef:fc:a2:
         45:e2:bc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:47:33 2026 by rpki-client