This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130372e302f32342d3234203d3e203533313037.roa File: 3133382e39372e3130372e302f32342d3234203d3e203533313037.roa (raw, json) Hash identifier: DDnsQgJ3x9VZCX1wZn00S9Cl8m0xWNVnSg0crp3qUok= Subject key identifier: DB:7F:E7:83:22:7F:77:1C:9D:8F:3E:5F:EB:A0:E8:23:33:D7:6F:B5 Certificate issuer: /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Certificate serial: 4FA9B7A2F4C9854A692F8D4B54608684734FCB54 Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject info access: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130372e302f32342d3234203d3e203533313037.roa Signing time: Thu 05 Feb 2026 01:24:23 +0000 ROA not before: Thu 05 Feb 2026 01:19:23 +0000 ROA not after: Thu 04 Feb 2027 01:24:23 +0000 asID: 53107 IP address blocks: 138.97.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 06 Feb 2026 19:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a9:b7:a2:f4:c9:85:4a:69:2f:8d:4b:54:60:86:84:73:4f:cb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Validity Not Before: Feb 5 01:19:23 2026 GMT Not After : Feb 4 01:24:23 2027 GMT Subject: CN=DB7FE783227F771C9D8F3E5FEBA0E82333D76FB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:90:62:f0:c2:f6:09:b7:a2:1a:29:b7:bd: e8:d9:b9:f9:d1:32:ee:84:f6:fb:cb:6d:f3:2a:c0: 90:71:27:d7:01:6d:6e:f0:a6:c7:ca:2b:be:1e:72: fe:56:07:e1:8a:96:2b:23:0a:9d:32:bd:19:94:e7: 45:58:dd:75:04:d4:3e:71:75:8c:5e:0b:41:d4:35: da:d9:6c:05:f0:04:82:1d:60:ab:33:04:be:ad:41: d7:c5:9b:cb:90:ad:81:cc:d4:4a:c0:48:ca:ff:fd: 90:16:25:39:71:c3:3a:a4:51:a6:c4:bf:b8:cf:3b: 54:5e:ec:6d:7a:43:01:67:54:1f:8b:e3:a1:a5:2f: 81:c1:d7:1b:00:80:f2:1b:c5:c3:d2:22:be:22:26: 65:54:3b:4a:36:fc:81:77:6a:86:96:1e:89:60:6c: f8:2d:cf:d7:ec:b9:88:2e:b2:e1:04:ea:26:32:28: 4c:58:13:9a:cc:85:ca:36:a8:e5:2b:f9:7a:b0:7f: af:1b:45:10:fe:4a:8e:ab:fa:56:d6:b9:df:7a:aa: 81:38:9c:91:a8:03:45:58:91:03:e4:28:09:94:e8: 9c:87:a0:e5:06:88:86:15:0b:9e:60:57:b1:94:42: 9a:85:f5:1a:e4:11:45:44:e6:52:f7:2d:46:ac:64: d7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7F:E7:83:22:7F:77:1C:9D:8F:3E:5F:EB:A0:E8:23:33:D7:6F:B5 X509v3 Authority Key Identifier: keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130372e302f32342d3234203d3e203533313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.107.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:66:1a:28:a5:fa:f1:84:5f:ea:f0:5c:63:a1:af:fe:df:b3: 35:85:cc:73:f6:85:e5:6c:d0:6d:53:10:fc:16:b9:94:d4:8e: 04:77:e9:9a:d2:5e:5c:ca:93:8e:d4:54:da:ad:b0:49:8d:4f: 5d:80:24:84:7e:fb:f8:12:5b:fa:ca:2a:92:1c:d9:4d:62:6b: b8:41:80:83:f7:5f:3c:8d:71:d5:82:47:66:58:17:51:40:92: 1d:5e:c1:96:24:16:45:e3:4c:b8:a8:45:a7:93:80:5e:04:01: e4:ee:ad:19:2e:27:61:a0:bd:d1:c1:92:17:58:5f:8c:23:36: 34:c2:a0:4e:e3:69:4e:3d:be:81:35:0e:f0:e3:2d:80:9d:b3: 76:cf:56:f1:2c:bb:8a:15:1e:2b:80:0d:b3:51:7b:5e:f6:8f: 50:37:4b:49:43:e6:30:f5:c9:12:88:95:84:d7:a8:b5:a7:b1: 24:70:46:c4:c9:9b:0d:29:e6:58:be:d5:54:5b:09:3e:5f:45: b0:9f:20:d9:c3:9e:65:e8:ce:dc:ff:ae:75:fb:9e:44:a6:da: f4:0c:84:ae:c6:83:bb:d4:5c:f7:80:74:af:4f:1c:59:20:91: 00:fe:c0:4c:f9:63:d0:59:5f:c8:bf:36:e2:63:c9:af:90:bd: 3c:2b:9b:70 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUT6m3ovTJhUppL41LVGCGhHNPy1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEyNUJFRERGRUMyOUMwQTRDRjU5MUU1RUI0MDgzOEJG RTNDN0FDMTAeFw0yNjAyMDUwMTE5MjNaFw0yNzAyMDQwMTI0MjNaMDMxMTAvBgNV BAMTKERCN0ZFNzgzMjI3Rjc3MUM5RDhGM0U1RkVCQTBFODIzMzNENzZGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk95Bi8ML2CbeiGim3vejZufnR Mu6E9vvLbfMqwJBxJ9cBbW7wpsfKK74ecv5WB+GKlisjCp0yvRmU50VY3XUE1D5x dYxeC0HUNdrZbAXwBIIdYKszBL6tQdfFm8uQrYHM1ErASMr//ZAWJTlxwzqkUabE v7jPO1Re7G16QwFnVB+L46GlL4HB1xsAgPIbxcPSIr4iJmVUO0o2/IF3aoaWHolg bPgtz9fsuYgusuEE6iYyKExYE5rMhco2qOUr+Xqwf68bRRD+So6r+lbWud96qoE4 nJGoA0VYkQPkKAmU6JyHoOUGiIYVC55gV7GUQpqF9RrkEUVE5lL3LUasZNfJAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU23/ngyJ/dxydjz5f66DoIzPXb7UwHwYDVR0j BBgwFoAUcSW+3f7CnApM9ZHl60CDi/48esEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRi eksvMS83MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxMjVCRURERkVDMjlDMEE0 Q0Y1OTFFNUVCNDA4MzhCRkUzQzdBQzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hIZ0pxeG9kWnRudTJLaXJUaFI4c3A3S1F2RENyaVhRSkVmUGZGQzVUYnpLLzEv MzEzMzM4MmUzOTM3MmUzMTMwMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAimFrMA0GCSqGSIb3DQEBCwUAA4IBAQA+Zhoopfrx hF/q8Fxjoa/+37M1hcxz9oXlbNBtUxD8FrmU1I4Ed+ma0l5cypOO1FTarbBJjU9d gCSEfvv4Elv6yiqSHNlNYmu4QYCD9188jXHVgkdmWBdRQJIdXsGWJBZF40y4qEWn k4BeBAHk7q0ZLidhoL3RwZIXWF+MIzY0wqBO42lOPb6BNQ7w4y2AnbN2z1bxLLuK FR4rgA2zUXte9o9QN0tJQ+Yw9ckSiJWE16i1p7EkcEbEyZsNKeZYvtVUWwk+X0Ww nyDZw55l6M7c/651+55Eptr0DISuxoO71Fz3gHSvTxxZIJEA/sBM+WPQWV/Ivzbi Y8mvkL08K5tw -----END CERTIFICATE-----Generated at Fri Feb 6 00:12:02 2026 by rpki-client