This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137372e38342e31362e302f32322d3332203d3e203533303035.roa
File: 3137372e38342e31362e302f32322d3332203d3e203533303035.roa (raw, json)
Hash identifier: xdqJ8oOZJjIqwF4q52n1wbTakKWDvc0ZSBrsVNn7uaU=
Subject key identifier: D1:5B:8F:37:8B:FE:71:39:6A:0C:C6:C7:36:D5:03:7B:AD:36:5D:86
Certificate issuer: /CN=AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A
Certificate serial: 17B59099EBC5B6030D209D5DBD643033BC0B7DD6
Authority key identifier: AF:8C:9B:C6:ED:BF:FD:E9:8F:E3:84:11:B6:AB:6C:7B:9F:52:C5:3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137372e38342e31362e302f32322d3332203d3e203533303035.roa
Signing time: Sun 28 Dec 2025 10:01:03 +0000
ROA not before: Sun 28 Dec 2025 09:56:03 +0000
ROA not after: Sun 27 Dec 2026 10:01:03 +0000
asID: 53005
IP address blocks: 177.84.16.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.crl
rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Jan 2026 07:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b5:90:99:eb:c5:b6:03:0d:20:9d:5d:bd:64:30:33:bc:0b:7d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A
Validity
Not Before: Dec 28 09:56:03 2025 GMT
Not After : Dec 27 10:01:03 2026 GMT
Subject: CN=D15B8F378BFE71396A0CC6C736D5037BAD365D86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:14:74:29:2d:87:4a:29:81:12:7b:63:ac:
9a:fa:93:33:fe:95:62:71:86:19:b7:c2:21:eb:71:
02:80:4d:99:2d:bf:d3:11:a3:15:3d:5e:01:83:06:
ad:10:33:3c:ee:48:38:fc:9a:94:8c:dd:51:62:52:
85:1e:5d:fa:f1:c5:16:32:b7:02:a6:36:97:d6:26:
19:6a:63:18:08:dc:fe:3e:cf:9f:2e:ad:f0:20:35:
23:3c:d6:ec:04:46:bb:2c:5d:28:56:1e:2c:8e:1b:
e6:21:c6:05:80:bc:0b:f6:3f:15:52:af:71:f3:43:
ae:8e:66:64:64:8e:e1:b8:09:a6:ae:ff:24:b4:69:
16:d4:fc:b2:a1:d3:53:41:d0:c4:a1:b0:bc:d9:cc:
86:dc:b8:96:51:0e:0d:61:7c:94:86:95:2a:f1:50:
56:80:cd:18:bc:f3:9e:f7:46:a9:6b:21:97:a0:4d:
23:3b:7a:b6:40:9f:4e:80:a1:98:4d:58:8c:3a:94:
e9:94:11:5a:8e:b3:40:3b:ed:12:5f:f4:a2:07:bc:
db:33:5e:a5:2b:00:ba:0d:52:ea:1b:e2:5f:a9:d8:
ea:44:69:d6:f2:7c:d4:48:ec:ed:98:dc:e4:2a:1e:
50:81:34:40:12:44:61:88:60:29:2d:dc:ba:be:67:
3f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5B:8F:37:8B:FE:71:39:6A:0C:C6:C7:36:D5:03:7B:AD:36:5D:86
X509v3 Authority Key Identifier:
keyid:AF:8C:9B:C6:ED:BF:FD:E9:8F:E3:84:11:B6:AB:6C:7B:9F:52:C5:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137372e38342e31362e302f32322d3332203d3e203533303035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.84.16.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:50:56:b2:c0:45:c4:e2:33:8b:30:56:2d:98:0d:99:f6:cc:
72:7d:ad:b0:55:b6:a3:2d:e0:54:44:65:7d:4d:09:78:03:c0:
ee:0f:6c:f1:2f:1d:21:97:ac:b4:d9:74:07:5f:92:57:d8:c9:
66:b0:ec:55:6d:f6:fb:d3:d9:99:af:4c:0b:7c:03:e4:30:84:
df:51:17:3f:4b:64:10:07:60:61:43:f4:f7:9d:5c:41:c4:94:
1c:ca:d7:35:1a:d0:a2:4b:d1:7c:a8:21:51:f4:d6:4b:b8:df:
73:2d:45:6f:d0:29:50:bd:1d:ba:23:3c:61:2e:14:d5:e1:ba:
73:34:57:25:ba:27:89:6f:d0:ab:11:7e:00:56:db:fb:95:f4:
d0:ea:e7:04:6b:7f:f2:dc:88:d7:4b:a4:9d:86:d2:25:89:24:
c0:41:27:c1:65:2f:5c:3f:09:f1:fc:71:bf:3d:de:7c:c6:5a:
c1:d6:b2:6c:bb:1f:36:22:d4:20:d7:df:94:32:e7:bc:40:ac:
46:e7:78:e7:06:82:9d:81:06:15:da:cc:dd:7e:ba:41:50:1d:
07:94:c7:b2:5c:73:ab:ca:99:ac:d7:9f:5e:0d:57:79:ca:a6:
eb:3e:27:78:9d:9f:97:c9:81:f2:cd:7f:6e:2f:a9:2d:38:10:
1e:dc:61:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:29:00 2026 by rpki-client