This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa
File: 3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa (raw, json)
Hash identifier: zB6eUg6igB8LlAcT6vaIoyKLPui0pid3mafOAmHtPqQ=
Subject key identifier: B7:97:11:AC:89:7C:CD:25:55:E7:D8:1B:2F:B9:61:EC:A8:C7:2F:EB
Certificate issuer: /CN=4940EEB21B4128216F8FFB3B0A997946697632F5
Certificate serial: 091AC0D4B841F453B1F44EE846F39F729F52001A
Authority key identifier: 49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa
Signing time: Tue 20 Jan 2026 13:43:30 +0000
ROA not before: Tue 20 Jan 2026 13:38:30 +0000
ROA not after: Tue 19 Jan 2027 13:43:30 +0000
asID: 2716
IP address blocks: 200.128.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl
rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Feb 2026 17:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:1a:c0:d4:b8:41:f4:53:b1:f4:4e:e8:46:f3:9f:72:9f:52:00:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940EEB21B4128216F8FFB3B0A997946697632F5
Validity
Not Before: Jan 20 13:38:30 2026 GMT
Not After : Jan 19 13:43:30 2027 GMT
Subject: CN=B79711AC897CCD2555E7D81B2FB961ECA8C72FEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:07:1a:68:b4:2e:b3:24:6c:8c:c7:53:cc:
3f:f0:b8:02:de:9a:bd:3a:be:1e:51:95:bb:05:eb:
5b:41:a7:3f:aa:2a:b4:e8:4f:95:6b:a5:59:4a:f7:
f7:52:87:2e:6a:89:eb:2c:da:93:3e:f4:40:74:bf:
44:77:be:0a:c3:e6:60:94:1d:0e:15:e8:77:7e:b3:
80:d5:df:52:2e:a7:b1:a0:e7:6a:76:a7:e1:2e:00:
98:40:bd:44:9d:cb:46:cf:5d:36:f1:0b:1e:4c:b2:
49:95:df:1f:22:de:9f:28:d9:93:cb:06:e1:da:82:
6e:d3:26:94:ba:d5:be:05:16:9b:df:c8:13:54:d5:
4a:24:e6:fc:a2:1d:86:6e:44:69:2b:04:b4:b4:9b:
b4:83:cd:9f:e3:36:91:83:5b:5e:9e:1e:94:e6:6b:
46:8a:3e:22:6f:b2:16:ca:3f:5e:cc:70:c9:1f:c6:
be:14:18:4f:e1:40:b4:2b:53:27:a3:d8:cb:0c:5e:
10:6a:f1:c6:0c:6b:14:ec:47:33:c9:70:9a:3d:c7:
d7:65:94:f6:c1:46:5c:8a:64:9d:66:39:90:22:7b:
40:d0:97:61:91:61:3d:b1:f5:6d:36:54:e6:56:e3:
2f:c9:f9:b1:4f:2c:ab:c6:83:b6:c2:8c:06:9d:ed:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:97:11:AC:89:7C:CD:25:55:E7:D8:1B:2F:B9:61:EC:A8:C7:2F:EB
X509v3 Authority Key Identifier:
keyid:49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.128.240.0/20
Signature Algorithm: sha256WithRSAEncryption
24:f6:32:36:e4:07:0e:ad:36:f2:e9:09:5d:e7:d7:79:3a:75:
32:6a:9a:09:f2:4a:6d:6a:0f:2b:4c:74:e0:09:5f:ed:ef:5f:
4c:24:43:97:21:67:ab:2e:d9:df:71:4a:db:cb:78:a2:82:e5:
26:1c:00:bd:8b:d3:8d:23:c2:38:f0:e9:ab:65:4c:df:d7:db:
e2:40:f4:9a:2b:42:f5:8b:26:c3:bd:6d:f3:2f:59:be:c8:3c:
b3:19:c7:d1:41:30:f8:f2:eb:64:84:83:2a:47:71:d6:e7:c6:
86:86:d4:bd:32:5e:88:ee:17:55:d6:b0:e3:7f:3c:f8:f5:4b:
32:9b:d6:d0:71:7b:16:de:34:e6:a3:7b:dc:dc:1f:f0:ea:14:
19:9d:36:26:0e:eb:76:32:d7:62:7a:c3:64:03:dd:bf:36:8f:
e0:2e:9a:a0:5b:2c:bc:2a:a8:4c:a8:ca:3b:80:4f:d8:9a:94:
14:9b:2f:4b:ce:32:31:46:07:4f:04:38:a1:9b:98:a9:ff:35:
25:57:55:85:75:15:bb:2e:a0:a5:1d:ec:4d:f2:6f:17:5f:5c:
bf:08:fb:a6:d8:5b:f1:d3:e0:47:1b:a7:8d:25:50:c4:25:11:
0e:6a:75:c9:ee:c1:24:c2:68:69:5e:d8:ca:b4:e3:56:c4:e5:
0b:a2:e6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:58:55 2026 by rpki-client