This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32342d3234203d3e203238313834.roa File: 3138392e38392e36382e302f32342d3234203d3e203238313834.roa (raw, json) Hash identifier: cAs1n/XL3TQ5nAvrif3MDcCnfkp6/44cCisg/LFWxSA= Subject key identifier: FF:10:B0:04:6C:3A:42:A1:2A:63:47:35:2F:1E:22:20:F8:D7:EB:30 Certificate issuer: /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Certificate serial: 107FA0D468A454C3500D6A526A16F5D7E477717A Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32342d3234203d3e203238313834.roa Signing time: Thu 08 Jan 2026 20:45:36 +0000 ROA not before: Thu 08 Jan 2026 20:40:36 +0000 ROA not after: Thu 07 Jan 2027 20:45:36 +0000 asID: 28184 IP address blocks: 189.89.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Jan 2026 08:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:7f:a0:d4:68:a4:54:c3:50:0d:6a:52:6a:16:f5:d7:e4:77:71:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40 Validity Not Before: Jan 8 20:40:36 2026 GMT Not After : Jan 7 20:45:36 2027 GMT Subject: CN=FF10B0046C3A42A12A6347352F1E2220F8D7EB30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a3:1a:bf:0a:32:5f:34:af:7c:04:86:25:45: 4e:4e:97:f7:09:42:62:02:de:bc:4b:9d:33:10:b1: b1:c3:0b:1a:eb:26:35:dc:b6:b2:5c:29:bd:e2:8f: 0c:04:39:7d:11:46:93:8e:89:3d:c3:92:f9:d5:35: aa:8b:b8:f7:0c:ba:f4:ee:73:90:84:49:43:af:01: 96:f5:06:46:5e:44:b1:22:7d:62:01:94:b7:c7:ef: 75:3f:5a:60:74:65:cf:bd:5b:67:c3:1a:d6:aa:4f: 22:d3:ec:a0:57:0d:3e:16:2d:96:aa:fa:78:8f:2e: 63:a8:42:91:25:e7:1a:4b:e6:84:94:fd:27:ea:20: 15:df:13:6e:6f:5e:d8:d4:a0:25:10:a0:8f:77:bc: a6:9a:83:cf:01:4b:1d:22:60:d8:38:34:af:0d:b4: 74:2d:b2:5c:1d:2a:4e:60:9f:c7:a1:9d:a4:05:ef: 61:96:86:5d:92:94:f3:0e:8c:6b:7b:27:11:ed:a9: 53:04:4a:2b:a4:db:6b:f6:75:30:1e:7f:ab:d3:de: c1:23:75:9b:6b:e3:e6:c7:d5:62:ef:06:4f:e3:e3: 82:71:d2:6f:f2:7c:5d:b5:ac:a6:a1:ca:c2:d7:32: 8e:9a:5d:5e:1b:f2:34:e6:a0:9e:6e:b8:e9:49:b1: 47:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:10:B0:04:6C:3A:42:A1:2A:63:47:35:2F:1E:22:20:F8:D7:EB:30 X509v3 Authority Key Identifier: keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32342d3234203d3e203238313834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.89.68.0/24 Signature Algorithm: sha256WithRSAEncryption aa:be:67:20:fd:f1:e0:a3:30:89:7a:b1:5e:21:97:ec:b0:b8: 9e:65:a1:ce:de:67:e3:fc:9e:01:01:45:42:45:c4:46:9a:49: 4d:b4:81:9b:fe:24:73:ed:de:2f:9c:74:5d:fe:7a:5e:45:a9: 27:21:38:f6:35:75:f6:0a:2c:40:5f:3e:c7:84:76:d1:00:9b: bf:c0:b3:a0:76:03:26:0e:04:19:f9:94:b3:99:b8:87:89:1a: ac:ca:fa:b1:9f:89:57:32:7d:0f:38:53:7f:ce:e3:07:f9:65: a6:ed:43:54:0a:44:41:48:09:d3:f8:18:35:ff:95:b6:d4:ed: b9:8b:d0:2d:86:41:b1:d6:96:81:2d:28:d8:41:bf:a7:0f:9a: 20:b4:a6:91:7c:a3:9b:f2:53:b3:72:4d:f4:14:c1:fd:53:22: e5:84:41:ef:01:21:b4:07:de:09:e1:5e:81:d5:41:fc:29:6d: fa:5c:d5:41:0d:b1:3e:64:90:14:90:91:bc:90:6a:eb:f2:6c: 26:2d:72:a6:84:a2:01:fd:e0:d3:79:56:69:4b:39:5a:fe:7b: 7e:3f:d0:eb:db:43:35:7f:9f:8b:a2:29:24:46:d3:32:06:83: 20:3a:3b:3c:67:a8:ea:0b:b0:cb:1a:2c:9b:9d:b2:2a:96:3e: 47:13:02:9b -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUEH+g1GikVMNQDWpSahb11+R3cXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD QkYzOUY0MDAeFw0yNjAxMDgyMDQwMzZaFw0yNzAxMDcyMDQ1MzZaMDMxMTAvBgNV BAMTKEZGMTBCMDA0NkMzQTQyQTEyQTYzNDczNTJGMUUyMjIwRjhEN0VCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpoxq/CjJfNK98BIYlRU5Ol/cJ QmIC3rxLnTMQsbHDCxrrJjXctrJcKb3ijwwEOX0RRpOOiT3DkvnVNaqLuPcMuvTu c5CESUOvAZb1BkZeRLEifWIBlLfH73U/WmB0Zc+9W2fDGtaqTyLT7KBXDT4WLZaq +niPLmOoQpEl5xpL5oSU/SfqIBXfE25vXtjUoCUQoI93vKaag88BSx0iYNg4NK8N tHQtslwdKk5gn8ehnaQF72GWhl2SlPMOjGt7JxHtqVMESiuk22v2dTAef6vT3sEj dZtr4+bH1WLvBk/j44Jx0m/yfF21rKahysLXMo6aXV4b8jTmoJ5uuOlJsUe9AgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU/xCwBGw6QqEqY0c1Lx4iIPjX6zAwHwYDVR0j BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3 MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv MzEzODM5MmUzODM5MmUzNjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAL1ZRDANBgkqhkiG9w0BAQsFAAOCAQEAqr5nIP3x4KMw iXqxXiGX7LC4nmWhzt5n4/yeAQFFQkXERppJTbSBm/4kc+3eL5x0Xf56XkWpJyE4 9jV19gosQF8+x4R20QCbv8CzoHYDJg4EGfmUs5m4h4karMr6sZ+JVzJ9DzhTf87j B/llpu1DVApEQUgJ0/gYNf+VttTtuYvQLYZBsdaWgS0o2EG/pw+aILSmkXyjm/JT s3JN9BTB/VMi5YRB7wEhtAfeCeFegdVB/Clt+lzVQQ2xPmSQFJCRvJBq6/JsJi1y poSiAf3g03lWaUs5Wv57fj/Q69tDNX+fi6IpJEbTMgaDIDo7PGeo6guwyxosm52y KpY+RxMCmw== -----END CERTIFICATE-----Generated at Sat Jan 10 21:10:03 2026 by rpki-client