This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130392e302f32342d3234203d3e203631353839.roa File: 34352e3233302e3130392e302f32342d3234203d3e203631353839.roa (raw, json) Hash identifier: Rz5AeqsN/U6Q7fHwqznwTvkzOd2IHb+57DDT39qCAR0= Subject key identifier: 17:B4:32:BA:83:64:7B:F7:2D:0A:E6:2E:1C:37:B5:8D:C1:38:8F:EB Certificate issuer: /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B Certificate serial: 68FE11088DCECD4131B5E1E46EC5BBA014C05C95 Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130392e302f32342d3234203d3e203631353839.roa Signing time: Tue 02 Dec 2025 19:03:46 +0000 ROA not before: Tue 02 Dec 2025 18:58:46 +0000 ROA not after: Tue 01 Dec 2026 19:03:46 +0000 asID: 61589 IP address blocks: 45.230.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 13:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fe:11:08:8d:ce:cd:41:31:b5:e1:e4:6e:c5:bb:a0:14:c0:5c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B Validity Not Before: Dec 2 18:58:46 2025 GMT Not After : Dec 1 19:03:46 2026 GMT Subject: CN=17B432BA83647BF72D0AE62E1C37B58DC1388FEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:7b:30:fc:0f:d1:b9:b7:e1:e2:48:28:f8: 84:e8:1e:fa:63:06:b1:03:d9:a5:d5:39:b8:ca:97: 03:d9:ce:46:72:6c:85:5c:97:b2:8f:41:06:2e:2f: bd:76:4e:dc:06:9c:cc:58:0d:7b:f1:df:75:c2:4d: 90:12:9a:fd:44:2a:f9:aa:0f:af:fc:2e:96:8a:3d: 2c:7a:ff:2b:ca:98:da:47:f4:16:49:71:24:20:91: 3f:07:92:e2:c4:52:73:16:3d:22:e3:34:f9:ad:2d: 87:61:22:0c:2a:c2:06:ea:f1:0a:9d:21:01:da:3f: 54:28:f7:4c:92:c8:83:18:87:19:1c:57:40:25:85: 43:12:d1:c1:5d:ea:82:0b:fd:87:51:d3:61:01:30: a7:41:e8:3d:af:60:c9:7b:55:35:86:22:a4:38:56: fe:73:31:73:d9:09:ce:10:41:3d:98:fb:08:cb:7f: 34:d3:1d:02:11:14:3a:1a:7f:81:f2:c0:c0:af:e8: 08:a3:46:07:84:da:10:98:88:93:1c:65:02:31:1f: 97:de:9a:5b:73:40:c3:b6:77:2e:97:5d:71:33:b7: f2:35:b9:83:db:86:a7:d8:18:85:df:d9:a4:b3:4a: db:a8:a2:15:fb:b8:9d:b1:a1:86:63:46:d1:91:b6: 12:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B4:32:BA:83:64:7B:F7:2D:0A:E6:2E:1C:37:B5:8D:C1:38:8F:EB X509v3 Authority Key Identifier: keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130392e302f32342d3234203d3e203631353839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.230.109.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:7c:40:23:91:30:2b:b7:2c:f8:b7:2a:82:bc:80:3d:d1:e4: 71:d8:29:9a:39:b3:41:31:de:e2:80:5b:e8:8f:64:a1:7f:15: f1:d6:e9:a5:e5:f7:47:cb:19:8b:3f:3d:15:1c:2a:fe:a9:9f: 06:68:85:bd:ad:45:5c:d9:08:2b:01:e2:f5:00:0c:3c:c0:fd: ce:03:d5:57:4e:1d:02:1c:63:70:a5:8c:b4:11:b6:f3:40:2e: fc:0f:42:20:aa:6f:3f:86:39:03:36:16:c0:b3:5d:ea:7d:a5: a1:2e:6e:ba:98:36:d6:e4:9c:03:57:25:65:c8:1f:16:a3:84: d0:97:96:7a:9a:94:ad:62:3e:ca:26:43:45:30:92:95:a3:70: d7:ca:f4:36:c2:95:13:eb:0e:d2:4f:7b:cd:94:ed:d2:31:c5: 41:e9:76:a2:dc:ca:fd:92:6f:14:7d:a3:83:b5:93:d0:f9:4b: 31:f4:9b:bd:f7:62:0c:64:ff:f9:76:57:6c:f2:c0:40:af:ab: e1:b0:4f:cf:60:8e:df:38:19:e8:3b:ef:b2:43:b0:83:fc:78: 8e:01:ea:3e:be:75:b6:0c:fd:13:11:9a:23:6e:b6:11:a0:67: 63:0a:c1:51:d2:f8:09:39:5a:66:5b:1f:2e:4d:c3:70:fd:b0: 6c:6d:21:dd -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUaP4RCI3OzUExteHkbsW7oBTAXJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYxMUU1NThGQzc1RDlEQTE1MDM5RUE1OEQ1QTE2NkE2 RjVFRjEwQjAeFw0yNTEyMDIxODU4NDZaFw0yNjEyMDExOTAzNDZaMDMxMTAvBgNV BAMTKDE3QjQzMkJBODM2NDdCRjcyRDBBRTYyRTFDMzdCNThEQzEzODhGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpw3sw/A/Rubfh4kgo+IToHvpj BrED2aXVObjKlwPZzkZybIVcl7KPQQYuL712TtwGnMxYDXvx33XCTZASmv1EKvmq D6/8LpaKPSx6/yvKmNpH9BZJcSQgkT8HkuLEUnMWPSLjNPmtLYdhIgwqwgbq8Qqd IQHaP1Qo90ySyIMYhxkcV0AlhUMS0cFd6oIL/YdR02EBMKdB6D2vYMl7VTWGIqQ4 Vv5zMXPZCc4QQT2Y+wjLfzTTHQIRFDoaf4HywMCv6AijRgeE2hCYiJMcZQIxH5fe mltzQMO2dy6XXXEzt/I1uYPbhqfYGIXf2aSzStuoohX7uJ2xoYZjRtGRthK3AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUF7QyuoNke/ctCuYuHDe1jcE4j+swHwYDVR0j BBgwFoAUHxHlWPx12doVA56ljVoWam9e8QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY ZTYvMC8xRjExRTU1OEZDNzVEOURBMTUwMzlFQTU4RDVBMTY2QTZGNUVGMTBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMTFFNTU4RkM3NUQ5REEx NTAzOUVBNThENUExNjZBNkY1RUYxMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv MzQzNTJlMzIzMzMwMmUzMTMwMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx MzUzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALeZtMA0GCSqGSIb3DQEBCwUAA4IBAQAPfEAjkTAr tyz4tyqCvIA90eRx2CmaObNBMd7igFvoj2ShfxXx1uml5fdHyxmLPz0VHCr+qZ8G aIW9rUVc2QgrAeL1AAw8wP3OA9VXTh0CHGNwpYy0EbbzQC78D0Igqm8/hjkDNhbA s13qfaWhLm66mDbW5JwDVyVlyB8Wo4TQl5Z6mpStYj7KJkNFMJKVo3DXyvQ2wpUT 6w7ST3vNlO3SMcVB6Xai3Mr9km8UfaODtZPQ+Usx9Ju992IMZP/5dlds8sBAr6vh sE/PYI7fOBnoO++yQ7CD/HiOAeo+vnW2DP0TEZojbrYRoGdjCsFR0vgJOVpmWx8u TcNw/bBsbSHd -----END CERTIFICATE-----Generated at Sat Dec 6 23:05:47 2025 by rpki-client