This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e36352e3136382e302f32322d3234203d3e203532353733.roa File: 34352e36352e3136382e302f32322d3234203d3e203532353733.roa (raw, json) Hash identifier: S+Dy1TJJca9o2oNbw3yecwIAVn/LTq4Cj2U+T/e7jiI= Subject key identifier: 55:4E:1C:42:B4:8B:C5:3A:3A:44:FD:60:A9:FB:AE:22:D0:FB:01:E7 Certificate issuer: /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Certificate serial: 5072B65F4E792FA11B6AEBB9F9985A0F3B4BAAC2 Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e36352e3136382e302f32322d3234203d3e203532353733.roa Signing time: Wed 07 Jan 2026 22:22:49 +0000 ROA not before: Wed 07 Jan 2026 22:17:49 +0000 ROA not after: Wed 06 Jan 2027 22:22:49 +0000 asID: 52573 IP address blocks: 45.65.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Jan 2026 15:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:72:b6:5f:4e:79:2f:a1:1b:6a:eb:b9:f9:98:5a:0f:3b:4b:aa:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Validity Not Before: Jan 7 22:17:49 2026 GMT Not After : Jan 6 22:22:49 2027 GMT Subject: CN=554E1C42B48BC53A3A44FD60A9FBAE22D0FB01E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8a:6e:db:46:bd:59:2b:6e:2c:5f:24:61:7f: fa:44:60:8b:3d:34:51:ec:18:0f:67:90:72:46:61: 53:dd:b2:b8:0d:8f:e9:94:0c:b4:ce:01:0f:9c:c3: 41:94:5d:32:ab:da:a5:5d:7b:42:e5:49:24:99:c9: f1:63:71:42:d8:2b:12:f1:69:eb:59:03:34:71:f0: c9:e8:50:a8:3d:11:68:45:50:c3:8d:b3:d1:41:b9: 9c:47:4d:55:e3:09:ce:1f:9b:33:8f:75:cb:eb:0e: 51:41:e6:d8:32:e8:1b:41:bf:56:dd:9d:f2:61:ba: 05:f4:db:3b:ed:31:8d:bf:74:db:ef:45:98:ae:87: 40:56:d2:1c:8d:fa:d8:e3:0c:66:54:54:c5:42:b7: b5:83:32:43:98:ad:46:61:c7:2e:fe:1c:9c:14:71: 46:49:9c:ff:2b:64:e3:99:45:bc:3e:50:89:bb:2c: 0a:04:e5:79:bf:d6:98:f0:b2:1a:d0:36:ed:26:16: 4b:26:e0:29:5a:8a:3f:cb:43:5b:3d:8b:1d:47:48: bd:be:bc:ce:09:3b:80:e8:1a:27:db:25:7b:4c:07: 90:c3:9d:53:66:ed:f3:21:c7:a1:ea:fb:2d:77:c6: 62:d2:61:3c:cd:55:7e:ef:a3:2b:00:9f:14:12:47: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4E:1C:42:B4:8B:C5:3A:3A:44:FD:60:A9:FB:AE:22:D0:FB:01:E7 X509v3 Authority Key Identifier: keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e36352e3136382e302f32322d3234203d3e203532353733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.168.0/22 Signature Algorithm: sha256WithRSAEncryption b1:17:78:85:c7:0d:ce:71:4c:89:7d:f1:0e:86:98:31:19:9e: 24:59:2f:a5:f8:b0:6d:e8:82:25:fb:a5:db:75:51:56:28:b4: 5e:66:c3:59:24:70:fb:ca:81:81:4a:9b:c3:0e:10:25:38:9d: 53:3a:ca:f1:3f:6a:a5:60:25:79:3a:00:a8:8b:fd:9b:d5:bb: bb:de:19:88:45:55:70:50:62:a7:b0:36:ad:08:3a:9e:3a:69: 74:4c:e2:8c:04:f2:79:6d:93:1a:f8:36:5b:6b:77:a7:e2:cc: b6:dc:85:1a:87:7b:31:f7:53:85:7e:f2:94:7d:f3:fe:8f:d6: 4b:96:41:a5:c6:93:0c:77:62:fc:bd:a0:a9:75:6d:e5:97:fc: 9f:92:3b:30:cb:be:1f:f8:b0:4c:99:58:b6:16:31:43:8d:19: 2c:09:4e:d3:61:bc:8c:7d:9d:46:65:a1:35:9c:44:99:a3:c2: fb:9f:03:a4:76:e1:ba:8a:4e:b0:b0:d1:0f:37:02:e0:10:0a: f2:ad:bb:41:99:f9:b6:ae:aa:c6:e4:e0:28:a5:3b:7e:45:15: 4f:86:f7:a5:cb:23:d8:05:fd:16:66:9a:92:25:4e:00:76:9c: 9c:4f:68:b7:64:83:89:e4:3a:5b:bd:a0:c3:44:fd:96:73:67: cf:2c:33:63 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUUHK2X055L6Ebauu5+ZhaDztLqsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4NkYyRDFDOEQ2RjBFMTgyMDBEN0JBM0I0RTEzOEE4 NjdFMjVDNzAeFw0yNjAxMDcyMjE3NDlaFw0yNzAxMDYyMjIyNDlaMDMxMTAvBgNV BAMTKDU1NEUxQzQyQjQ4QkM1M0EzQTQ0RkQ2MEE5RkJBRTIyRDBGQjAxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxim7bRr1ZK24sXyRhf/pEYIs9 NFHsGA9nkHJGYVPdsrgNj+mUDLTOAQ+cw0GUXTKr2qVde0LlSSSZyfFjcULYKxLx aetZAzRx8MnoUKg9EWhFUMONs9FBuZxHTVXjCc4fmzOPdcvrDlFB5tgy6BtBv1bd nfJhugX02zvtMY2/dNvvRZiuh0BW0hyN+tjjDGZUVMVCt7WDMkOYrUZhxy7+HJwU cUZJnP8rZOOZRbw+UIm7LAoE5Xm/1pjwshrQNu0mFksm4Claij/LQ1s9ix1HSL2+ vM4JO4DoGifbJXtMB5DDnVNm7fMhx6Hq+y13xmLSYTzNVX7voysAnxQSR1MZAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUVU4cQrSLxTo6RP1gqfuuItD7AecwHwYDVR0j BBgwFoAU1oby0cjW8OGCANe6O04TioZ+JccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkpmeWJDaDRQMWZhaHZpUUNQOE5MSDloaDRxU0t1NEdqQkNWR2U4WnZF ZVovMC9ENjg2RjJEMUM4RDZGMEUxODIwMEQ3QkEzQjRFMTM4QTg2N0UyNUM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODZGMkQxQzhENkYwRTE4 MjAwRDdCQTNCNEUxMzhBODY3RTI1QzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJKZnliQ2g0UDFmYWh2aVFDUDhOTEg5aGg0cVNLdTRHakJDVkdlOFp2RWVaLzAv MzQzNTJlMzYzNTJlMzEzNjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM1 MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAi1BqDANBgkqhkiG9w0BAQsFAAOCAQEAsRd4hccNznFM iX3xDoaYMRmeJFkvpfiwbeiCJful23VRVii0XmbDWSRw+8qBgUqbww4QJTidUzrK 8T9qpWAleToAqIv9m9W7u94ZiEVVcFBip7A2rQg6njppdEzijATyeW2TGvg2W2t3 p+LMttyFGod7MfdThX7ylH3z/o/WS5ZBpcaTDHdi/L2gqXVt5Zf8n5I7MMu+H/iw TJlYthYxQ40ZLAlO02G8jH2dRmWhNZxEmaPC+58DpHbhuopOsLDRDzcC4BAK8q27 QZn5tq6qxuTgKKU7fkUVT4b3pcsj2AX9FmaakiVOAHacnE9ot2SDieQ6W72gw0T9 lnNnzywzYw== -----END CERTIFICATE-----Generated at Mon Jan 12 08:15:59 2026 by rpki-client