This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/AS271724.roa File: AS271724.roa (raw, json) Hash identifier: DnCDgnIavhDNYsp1F/X0COzjBPhAAPmui26EtRmjv78= Subject key identifier: 99:20:44:D3:B6:11:D8:05:57:30:F3:30:3C:43:38:23:DC:C9:EB:BE Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 7D7BFE1660CC2EFA500228790008C321C50D86DF Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/AS271724.roa Signing time: Thu 09 Oct 2025 21:02:30 +0000 ROA not before: Thu 09 Oct 2025 20:57:30 +0000 ROA not after: Thu 08 Oct 2026 21:02:30 +0000 asID: 271724 IP address blocks: 131.221.68.0/22 maxlen: 22 138.117.124.0/22 maxlen: 22 143.255.112.0/22 maxlen: 22 170.0.204.0/22 maxlen: 22 170.245.100.0/22 maxlen: 22 177.75.192.0/20 maxlen: 20 177.75.208.0/20 maxlen: 20 179.191.128.0/20 maxlen: 20 179.191.144.0/20 maxlen: 20 187.110.208.0/20 maxlen: 20 189.50.144.0/20 maxlen: 20 Validation: Failed, certificate revoked on Sat 18 Oct 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7b:fe:16:60:cc:2e:fa:50:02:28:79:00:08:c3:21:c5:0d:86:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 9 20:57:30 2025 GMT Not After : Oct 8 21:02:30 2026 GMT Subject: CN=992044D3B611D8055730F3303C433823DCC9EBBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:df:b4:57:5b:83:e0:ae:02:82:dd:0d:a1:06: 65:9d:3e:db:5c:30:5e:03:b6:fc:37:b6:79:b5:f8: a5:0f:71:49:0d:be:e6:c0:7d:fa:f9:75:55:64:f8: 9f:87:ce:f4:ec:cb:5c:b8:fe:4a:2e:9a:6b:dd:58: c3:02:4b:34:ee:03:cb:1c:1d:1d:e7:11:50:cb:52: 4f:e2:47:53:21:88:23:24:50:c7:b5:2b:6f:ad:a5: c5:b6:e3:65:85:e9:cd:68:6e:26:69:17:0e:f8:2c: 19:2f:85:05:92:5a:67:f7:4c:ee:8f:0e:ff:51:07: e0:f6:36:7f:9c:3f:98:7b:b0:49:8b:64:52:89:98: 74:97:f6:b3:e2:94:c7:a4:28:7c:b4:23:4c:1b:50: 64:7f:e6:0d:7b:f8:41:c5:3c:80:60:62:d2:34:5e: ce:d0:81:c5:94:a7:d6:66:a3:3e:9e:b6:9d:ef:04: 91:37:39:3f:14:a6:e3:ba:61:ce:33:fe:c4:37:0f: 42:25:bb:d8:ec:25:df:4f:c0:aa:95:f2:3f:37:d4: 88:c5:f4:67:aa:11:c8:b2:13:b8:5d:56:91:95:56: 9c:88:78:19:e1:33:3d:31:34:1f:3d:0b:df:cf:5c: 93:aa:44:06:fa:75:84:90:62:51:aa:6a:3e:af:cd: 40:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:20:44:D3:B6:11:D8:05:57:30:F3:30:3C:43:38:23:DC:C9:EB:BE X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/AS271724.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.68.0/22 138.117.124.0/22 143.255.112.0/22 170.0.204.0/22 170.245.100.0/22 177.75.192.0/19 179.191.128.0/19 187.110.208.0/20 189.50.144.0/20 Signature Algorithm: sha256WithRSAEncryption 86:a1:c4:e8:54:01:15:e9:46:d9:0d:5c:21:1e:92:0a:b2:1c: 87:b5:eb:27:0b:30:e0:e2:87:a9:cd:c3:97:6b:90:c7:2c:bc: 4d:4b:19:32:4e:2f:57:9a:ad:7f:96:aa:69:55:a4:44:d7:8c: 2f:39:7d:26:b6:b4:46:32:9b:b4:56:e6:86:83:4e:aa:9d:dd: 7a:09:99:eb:21:0e:8e:71:9e:9e:5e:9a:0c:9b:a0:4a:e8:90: c6:2f:d3:58:aa:2d:dc:ad:b2:c4:73:70:da:a4:1a:a5:fc:00: 13:2f:61:05:73:fd:25:6f:c0:48:fb:7e:e5:ad:ed:30:59:42: 97:31:17:b6:e8:1a:b0:56:09:c9:6a:e8:2b:c0:ac:a6:f4:75: 38:9d:e4:1c:16:bc:12:67:d6:be:6f:bc:e2:db:4e:3e:bc:f8: a3:92:1d:89:82:a1:0c:6e:67:c3:32:09:c6:5d:e3:3b:c8:81: d1:81:07:44:02:ba:1a:9f:49:49:82:aa:8a:23:ec:8f:bb:84: 2f:df:0b:fb:ad:90:15:39:33:d4:01:19:b7:f3:76:7e:16:ad: 6a:af:a4:e6:cb:c6:89:64:ea:f3:17:7f:9b:e4:db:8e:bd:82: 62:b0:6c:ac:57:2a:07:fe:22:83:85:15:28:ea:d0:40:d8:dc: ec:27:7f:ea -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUfXv+FmDMLvpQAih5AAjDIcUNht8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMDkyMDU3MzBaFw0yNjEwMDgyMTAyMzBaMDMxMTAvBgNV BAMTKDk5MjA0NEQzQjYxMUQ4MDU1NzMwRjMzMDNDNDMzODIzRENDOUVCQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY37RXW4PgrgKC3Q2hBmWdPttc MF4Dtvw3tnm1+KUPcUkNvubAffr5dVVk+J+HzvTsy1y4/koummvdWMMCSzTuA8sc HR3nEVDLUk/iR1MhiCMkUMe1K2+tpcW242WF6c1obiZpFw74LBkvhQWSWmf3TO6P Dv9RB+D2Nn+cP5h7sEmLZFKJmHSX9rPilMekKHy0I0wbUGR/5g17+EHFPIBgYtI0 Xs7QgcWUp9Zmoz6etp3vBJE3OT8UpuO6Yc4z/sQ3D0Ilu9jsJd9PwKqV8j831IjF 9GeqEciyE7hdVpGVVpyIeBnhMz0xNB89C9/PXJOqRAb6dYSQYlGqaj6vzUChAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUmSBE07YR2AVXMPMwPEM4I9zJ674wHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zWjlu RVFWY0dzVkc3c1JDVGtZMlp2dm1ESGhvRTVaZ2JqREtGcU1GdDdERi8wL0FTMjcx NzI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/ BEAwPjA8BAIAATA2AwQCg91EAwQCinV8AwQCj/9wAwQCqgDMAwQCqvVkAwQFsUvA AwQFs7+AAwQEu27QAwQEvTKQMA0GCSqGSIb3DQEBCwUAA4IBAQCGocToVAEV6UbZ DVwhHpIKshyHtesnCzDg4oepzcOXa5DHLLxNSxkyTi9Xmq1/lqppVaRE14wvOX0m trRGMpu0VuaGg06qnd16CZnrIQ6OcZ6eXpoMm6BK6JDGL9NYqi3crbLEc3DapBql /AATL2EFc/0lb8BI+37lre0wWUKXMRe26BqwVgnJaugrwKym9HU4neQcFrwSZ9a+ b7zi204+vPijkh2JgqEMbmfDMgnGXeM7yIHRgQdEAroan0lJgqqKI+yPu4Qv3wv7 rZAVOTPUARm383Z+Fq1qr6Tmy8aJZOrzF3+b5NuOvYJisGysVyoH/iKDhRUo6tBA 2NzsJ3/q -----END CERTIFICATE-----Generated at Tue Dec 30 10:53:18 2025 by rpki-client