This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133303a3a2f34362d3436203d3e20323638353638.roa
File: 323830343a353332633a3133303a3a2f34362d3436203d3e20323638353638.roa (raw, json)
Hash identifier: H9CzJw7r4D25KNRW3mdt4AXXDzfCv3xL4fGG1V9wzeE=
Subject key identifier: 29:A6:AB:57:33:C9:DF:98:A7:81:20:69:DA:4E:7F:9C:70:CA:43:22
Certificate issuer: /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial: 529D6007B3B4C86D328EB7B697744652D84833DE
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133303a3a2f34362d3436203d3e20323638353638.roa
Signing time: Mon 15 Dec 2025 12:56:06 +0000
ROA not before: Mon 15 Dec 2025 12:51:06 +0000
ROA not after: Mon 14 Dec 2026 12:56:06 +0000
asID: 268568
IP address blocks: 2804:532c:130::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 11:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:9d:60:07:b3:b4:c8:6d:32:8e:b7:b6:97:74:46:52:d8:48:33:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Validity
Not Before: Dec 15 12:51:06 2025 GMT
Not After : Dec 14 12:56:06 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:a9:43:6d:80:c2:b2:75:5c:6d:1a:8a:91:
6e:7f:9f:77:6e:6a:2d:9c:20:3e:bd:87:f7:66:59:
6b:29:71:b5:54:1d:24:d3:c2:83:e3:49:b8:38:6b:
23:17:b0:11:20:37:9a:2e:45:b0:7a:ac:7b:5d:64:
58:62:7e:c4:cb:c1:35:e6:20:5c:2d:55:34:cb:64:
3d:0b:00:37:f7:75:4a:a5:36:ae:e1:f5:05:cd:84:
c9:fd:69:73:af:02:c2:25:60:46:f8:9d:26:70:00:
16:61:9b:48:88:03:1c:42:a2:32:3e:12:d1:8d:40:
ee:ed:af:54:22:2b:45:2a:01:76:71:ec:1d:6a:14:
04:ac:67:e1:60:89:da:0c:e7:d4:50:41:5c:79:a5:
09:e2:94:cf:11:e3:8a:85:78:6f:95:3b:e3:10:9e:
43:0c:ce:de:6b:fd:19:8a:cb:86:df:47:a8:6b:74:
ee:cd:c2:90:3f:35:93:90:03:c8:8b:f3:13:5b:86:
62:9c:c3:d2:da:bd:44:37:da:96:f9:66:ea:e4:7f:
78:8e:59:72:a3:4e:c7:70:b1:cb:84:08:17:fd:de:
aa:90:fd:c7:05:6f:d1:b7:4d:eb:05:b1:8f:44:c9:
97:5c:4a:cf:f0:cd:ac:0f:09:32:0d:92:bc:1e:19:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A6:AB:57:33:C9:DF:98:A7:81:20:69:DA:4E:7F:9C:70:CA:43:22
X509v3 Authority Key Identifier:
keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133303a3a2f34362d3436203d3e20323638353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:532c:130::/46
Signature Algorithm: sha256WithRSAEncryption
d9:ac:e2:da:a5:36:07:89:f4:9b:98:df:8c:48:db:6d:4e:a5:
eb:85:91:f2:37:be:41:09:03:79:3a:5a:66:81:71:28:36:5e:
49:9d:6c:1d:ef:18:32:60:69:72:be:55:ef:cd:ea:d5:9b:6e:
b4:dc:4f:84:25:31:b8:c9:2c:62:c6:cb:36:73:74:1f:79:99:
47:7e:c0:a5:2b:76:e0:f0:4e:61:50:07:cc:cb:2b:71:f4:5d:
a0:e6:bd:23:60:ea:71:0f:76:f4:41:67:33:28:f5:5a:24:a8:
71:4c:5c:f8:f5:1c:df:c0:51:c1:c2:c8:50:58:24:f0:39:79:
9e:d2:a0:ef:38:f0:ea:71:3f:96:24:88:cf:af:93:02:88:bf:
75:de:3f:71:80:29:6d:ea:ce:bd:cc:3d:a3:72:3a:69:9f:ff:
dd:27:a7:eb:d8:40:c1:ed:60:6b:58:40:fc:bf:d9:cb:6e:00:
cc:c5:fa:f8:54:80:1a:f2:5a:d0:58:1d:f3:a4:39:e1:6a:ea:
5f:04:a8:42:e2:e1:02:95:b2:c4:fd:ac:07:cb:01:28:65:36:
21:f4:de:5f:06:5b:83:a3:20:6e:12:8f:98:8d:80:8c:02:c4:
95:46:45:92:5c:71:44:25:4d:26:f4:a0:c3:d1:d1:0f:d7:18:
40:78:b2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:51:52 2025 by rpki-client