This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/3133382e302e38362e302f32342d3332203d3e20323733383133.roa
File: 3133382e302e38362e302f32342d3332203d3e20323733383133.roa (raw, json)
Hash identifier: +zmQQgp1pzC/oJegqS+YnxHVn4SpV8s6CcUzbMFknQI=
Subject key identifier: 88:34:7B:F2:8F:D9:AE:C0:54:6B:AF:33:02:1F:DF:56:91:34:92:EE
Certificate issuer: /CN=2E695AEE7F6218C09E7A716B618263704B801257
Certificate serial: 649DC045B1028CEB301CD43AD9242F2062C95E83
Authority key identifier: 2E:69:5A:EE:7F:62:18:C0:9E:7A:71:6B:61:82:63:70:4B:80:12:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E695AEE7F6218C09E7A716B618263704B801257.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/3133382e302e38362e302f32342d3332203d3e20323733383133.roa
Signing time: Mon 05 Jan 2026 18:25:57 +0000
ROA not before: Mon 05 Jan 2026 18:20:57 +0000
ROA not after: Mon 04 Jan 2027 18:25:57 +0000
asID: 273813
IP address blocks: 138.0.86.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/2E695AEE7F6218C09E7A716B618263704B801257.crl
rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/2E695AEE7F6218C09E7A716B618263704B801257.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E695AEE7F6218C09E7A716B618263704B801257.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Jan 2026 14:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:9d:c0:45:b1:02:8c:eb:30:1c:d4:3a:d9:24:2f:20:62:c9:5e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E695AEE7F6218C09E7A716B618263704B801257
Validity
Not Before: Jan 5 18:20:57 2026 GMT
Not After : Jan 4 18:25:57 2027 GMT
Subject: CN=88347BF28FD9AEC0546BAF33021FDF56913492EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:6a:40:5a:e3:50:1d:42:fd:45:41:28:a5:
af:c4:50:24:58:67:b6:6b:a9:7a:13:96:a7:3b:b0:
9c:b2:cf:2f:24:dd:b9:3e:91:18:87:67:4e:97:60:
b7:21:83:dc:9a:c6:18:46:01:21:be:22:44:ed:80:
a5:90:3e:1f:6c:0d:01:18:3f:b6:f5:2a:66:40:e6:
51:d6:5f:f8:43:40:90:b2:10:ea:47:85:e0:91:ef:
c9:dc:6d:a1:94:20:d8:76:2d:13:a4:a9:61:2a:ba:
d7:0b:b2:23:6e:39:55:8b:70:f3:c0:bc:e4:e5:9b:
57:6b:cd:28:96:43:7a:09:c8:b9:df:6e:b7:5d:73:
a1:aa:1a:fb:9c:43:d0:53:10:1f:28:c0:ca:ed:52:
75:95:7a:19:e4:32:91:38:09:cc:f6:14:0d:03:f4:
d0:38:66:f8:30:dc:0e:ae:57:e6:0a:52:2d:28:25:
a5:2b:bc:1c:45:a1:13:d6:24:84:6c:6c:41:cf:cc:
76:06:c8:b8:18:a3:00:e2:f9:27:22:e3:10:cd:c7:
9b:cb:ae:c9:cf:e0:a8:0a:eb:48:33:d9:53:09:2e:
e0:e3:9d:ca:7b:42:90:de:b9:f3:1a:81:3b:ed:09:
97:24:ba:3b:fc:8b:7c:d0:62:a2:0f:c6:af:a2:6f:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:34:7B:F2:8F:D9:AE:C0:54:6B:AF:33:02:1F:DF:56:91:34:92:EE
X509v3 Authority Key Identifier:
keyid:2E:69:5A:EE:7F:62:18:C0:9E:7A:71:6B:61:82:63:70:4B:80:12:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/2E695AEE7F6218C09E7A716B618263704B801257.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E695AEE7F6218C09E7A716B618263704B801257.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/3133382e302e38362e302f32342d3332203d3e20323733383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.86.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:85:42:62:e3:fd:d3:15:85:9c:de:2f:8d:bf:3d:20:84:a1:
fd:1f:3d:22:e3:1b:10:db:a8:61:b2:fb:9f:83:c4:2c:f6:27:
c6:f2:8d:18:6b:ec:59:2e:fc:8e:be:71:9f:2a:78:21:14:ae:
ec:d3:ce:d3:45:05:5f:bc:d4:4e:fa:9b:da:64:ae:c0:9a:78:
5c:f3:8b:90:ad:9d:00:93:48:4b:9d:04:e0:fd:cf:01:c0:f4:
ba:5d:c7:f2:08:75:c8:08:fe:55:4b:de:19:33:80:9a:a2:3b:
fe:a7:50:52:e7:19:20:13:34:d8:ce:2b:db:d9:ba:85:c8:95:
c7:17:e7:0b:0c:1a:8b:af:c9:3d:bb:06:92:27:7a:99:6d:bb:
ff:80:d3:44:5d:c1:57:36:d3:16:32:79:fb:78:bd:3a:55:c0:
60:80:0b:3a:b9:dd:e0:b0:d7:ef:e9:f9:00:8a:5a:df:8f:17:
8e:02:5b:69:b3:b8:25:d9:66:24:e2:f0:0d:93:59:07:17:58:
01:9f:74:05:08:ad:0c:7e:ac:04:77:6f:a8:ed:82:43:12:53:
3d:8d:27:34:4c:bc:54:97:37:8e:80:2d:43:51:e0:ec:17:50:
df:d1:76:ea:c2:47:7f:c1:9a:a8:00:99:f3:d9:7c:fa:d9:75:
b7:9d:f4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:00:51 2026 by rpki-client