This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139322e302f32322d3234203d3e20323633303733.roa
File: 3136382e3132312e3139322e302f32322d3234203d3e20323633303733.roa (raw, json)
Hash identifier: TjeeiskVqBFhtmjU5Lj1uNvKkSY482N2jbbsHoqjyaw=
Subject key identifier: BB:AB:26:D5:46:70:10:CE:4B:E9:34:99:32:0C:97:66:51:48:EB:8C
Certificate issuer: /CN=E6A3BB875E3C099F0B7527B57175ACBC2C52C920
Certificate serial: 594CB9DA6F6F08A4D235CF1CEAE33CD4A15C1325
Authority key identifier: E6:A3:BB:87:5E:3C:09:9F:0B:75:27:B5:71:75:AC:BC:2C:52:C9:20
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139322e302f32322d3234203d3e20323633303733.roa
Signing time: Wed 31 Dec 2025 16:29:10 +0000
ROA not before: Wed 31 Dec 2025 16:24:10 +0000
ROA not after: Wed 30 Dec 2026 16:29:10 +0000
asID: 263073
IP address blocks: 168.121.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.crl
rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Jan 2026 08:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4c:b9:da:6f:6f:08:a4:d2:35:cf:1c:ea:e3:3c:d4:a1:5c:13:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6A3BB875E3C099F0B7527B57175ACBC2C52C920
Validity
Not Before: Dec 31 16:24:10 2025 GMT
Not After : Dec 30 16:29:10 2026 GMT
Subject: CN=BBAB26D5467010CE4BE93499320C97665148EB8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:92:f4:c7:38:30:9f:32:4f:b5:be:fe:7a:
c2:52:fa:84:23:5b:7b:d1:e4:70:11:6a:0e:2f:62:
e5:64:4a:02:d1:99:d2:cf:18:ba:19:66:59:8c:51:
71:d7:fb:0f:81:53:77:f1:54:cf:9a:1f:24:e4:a9:
99:98:f3:ca:59:2c:1d:0b:32:2f:ed:03:e6:8b:99:
0b:b5:98:84:c6:22:c6:dc:19:2f:e3:3c:01:a6:4c:
36:79:be:f6:06:44:49:57:c6:28:82:4e:8a:48:d5:
9f:b9:5e:d2:e1:b4:92:94:d1:1b:72:dc:a1:7a:e5:
4d:36:cd:1a:ed:33:c5:24:38:0e:8b:e0:9d:02:16:
9f:0f:87:93:0b:62:fd:aa:d1:98:24:bb:53:f3:17:
e1:25:02:aa:6e:70:34:81:7c:7d:d8:b9:15:77:59:
38:d3:5d:ab:98:69:eb:89:37:70:62:48:c0:c5:92:
d0:55:ce:b6:6a:87:96:a4:f3:8e:26:00:4e:62:e7:
e1:ac:e7:b6:a6:2d:41:d5:ed:93:d7:2d:af:de:89:
2e:58:9b:73:06:1f:5e:c8:41:85:b7:63:f4:8e:8f:
8f:ef:1f:bf:6f:28:c3:ce:7d:da:a2:22:ac:03:fb:
0e:b2:0a:56:3b:f3:ba:35:62:b6:f7:17:b8:30:f4:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AB:26:D5:46:70:10:CE:4B:E9:34:99:32:0C:97:66:51:48:EB:8C
X509v3 Authority Key Identifier:
keyid:E6:A3:BB:87:5E:3C:09:9F:0B:75:27:B5:71:75:AC:BC:2C:52:C9:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139322e302f32322d3234203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.192.0/22
Signature Algorithm: sha256WithRSAEncryption
54:81:94:0b:a0:d7:53:5a:fe:94:fd:00:d0:87:62:07:3a:b7:
74:82:10:b1:e4:84:d5:53:af:dc:59:cf:fd:5e:65:17:d4:7e:
f9:ae:8f:39:18:54:07:24:4a:b2:5b:1a:b4:1f:72:92:84:1c:
26:6e:a7:cc:14:fe:04:d5:c1:43:5e:6f:26:92:c8:7b:db:b4:
b3:73:b9:d9:6c:18:d6:35:c7:b6:5d:4d:b6:18:8b:95:c6:9a:
1e:0f:7a:36:58:33:a2:b0:f0:6e:39:e6:d0:53:e8:14:cd:33:
3b:c1:8d:8a:2b:75:92:09:01:3b:e9:c0:af:51:50:79:b0:b8:
62:8f:da:40:ad:4b:f1:22:1d:37:9c:48:1e:81:83:29:1f:bf:
13:5e:f3:9c:23:7d:6f:d2:c3:12:b5:00:ae:41:70:41:e8:b6:
fa:d7:c2:d2:97:b6:40:38:d9:c6:c9:b9:60:8d:33:fc:d7:86:
5b:f6:b0:7f:73:42:f7:51:06:a0:c8:58:14:19:5d:57:70:02:
e1:40:f4:c2:55:17:14:80:ff:30:71:fd:2f:ef:75:13:3a:00:
86:ec:18:82:33:27:d1:9e:a6:46:71:df:17:4a:35:f5:90:88:
fc:23:59:27:c4:13:dc:dd:97:45:1f:ea:59:0a:c6:85:04:9d:
02:67:0b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 22:40:27 2026 by rpki-client