This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3133382e3138352e3135342e302f32342d3234203d3e20323638323537.roa
File: 3133382e3138352e3135342e302f32342d3234203d3e20323638323537.roa (raw, json)
Hash identifier: mQRPa2e5wXP29YtYmtbkxoInz1vwzBu52NGF+VVy5Pw=
Subject key identifier: 53:94:58:C5:4F:B0:F5:A5:8C:49:24:4E:E2:CC:A1:FD:39:64:19:6D
Certificate issuer: /CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0
Certificate serial: 047E94568E9010CA5E47BA9C88092F1270A8837B
Authority key identifier: 95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3133382e3138352e3135342e302f32342d3234203d3e20323638323537.roa
Signing time: Fri 05 Dec 2025 18:03:00 +0000
ROA not before: Fri 05 Dec 2025 17:58:00 +0000
ROA not after: Fri 04 Dec 2026 18:03:00 +0000
asID: 268257
IP address blocks: 138.185.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl
rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 22:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7e:94:56:8e:90:10:ca:5e:47:ba:9c:88:09:2f:12:70:a8:83:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0
Validity
Not Before: Dec 5 17:58:00 2025 GMT
Not After : Dec 4 18:03:00 2026 GMT
Subject: CN=539458C54FB0F5A58C49244EE2CCA1FD3964196D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:40:b6:2f:38:00:10:71:f6:60:3a:44:ff:
2b:17:a2:ad:9b:f6:93:17:7f:b5:08:20:eb:a8:4c:
43:13:6a:c7:c9:b7:fc:5d:6c:21:8a:63:e3:35:bd:
4b:55:bd:e2:98:d4:a7:0e:a4:a4:ed:9c:6d:fc:08:
5d:63:2e:2f:5d:e6:06:7b:38:c2:7d:c2:1a:90:4d:
40:c0:f5:af:4c:ad:18:85:82:cb:36:f8:b9:71:90:
41:a1:fc:0a:41:fd:2b:5f:a3:dc:38:8f:3f:ce:7e:
73:72:95:63:a2:3f:83:2b:73:69:49:6f:06:ef:ec:
77:19:bf:ec:6c:5e:18:fb:6f:ad:77:df:6f:08:7a:
fb:1a:b5:78:a8:9d:bc:a3:5d:ce:9c:e2:cc:19:ec:
bd:15:b5:40:17:c2:27:b0:c8:63:13:af:28:66:ae:
51:ee:80:5b:55:1e:40:37:8b:f9:9e:9a:d8:b6:ba:
c5:6d:8e:64:f2:c3:c1:72:e2:68:ca:85:8c:0d:10:
01:ee:c9:ba:12:c9:8e:25:31:27:50:10:b9:dd:ce:
20:21:ff:40:36:a9:7e:58:6f:72:7a:9a:1e:c8:8c:
36:af:91:d3:61:cb:98:9d:7d:95:97:fb:2d:f7:2f:
8e:56:be:e2:35:82:d3:be:7c:0f:0a:01:86:0b:9e:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:94:58:C5:4F:B0:F5:A5:8C:49:24:4E:E2:CC:A1:FD:39:64:19:6D
X509v3 Authority Key Identifier:
keyid:95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3133382e3138352e3135342e302f32342d3234203d3e20323638323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.154.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8f:5c:3a:ea:00:f1:8b:9e:ec:e2:59:22:16:6c:20:7a:9d:
45:ae:02:36:d7:59:38:ba:46:5a:a1:5d:51:74:b0:3f:0f:7a:
b6:7c:03:cc:c4:c3:e9:eb:3e:30:09:5b:62:9f:fb:b4:f9:e3:
d3:8c:09:5a:55:74:46:0e:a4:36:4c:f2:3c:73:90:ca:ba:f9:
a4:e5:d8:95:46:bf:49:3a:02:52:61:53:4f:94:0f:e0:ec:03:
d1:21:ca:49:fb:42:68:d6:72:34:c0:6e:f0:c3:cf:cd:73:c0:
3e:54:58:97:fa:99:8d:fb:4d:d7:6e:6d:ce:0e:ff:d6:d4:7e:
d8:1b:37:f8:4b:ea:ee:2f:6b:75:ec:b4:35:3b:f9:b4:26:22:
6f:7f:63:9d:c8:8e:1f:f2:1f:e2:fc:6f:e6:80:cf:72:1d:45:
1c:4b:d5:af:cd:3e:f0:4d:af:1d:88:08:8b:c4:eb:81:39:22:
ee:f7:82:3d:86:72:82:fa:a1:e8:cd:89:7c:38:d2:e8:d5:28:
bc:ec:50:e2:42:cf:83:90:84:0d:cf:b3:da:8d:b5:82:27:47:
ba:e8:b1:b2:93:ce:93:58:c1:7d:32:a8:48:b5:a5:64:6b:74:
73:93:63:95:b8:38:71:f5:0a:95:84:5c:5f:3d:fb:26:9f:7f:
c1:62:82:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:51:37 2025 by rpki-client