This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262509.roa
File:                     AS262509.roa (raw, json)
Hash identifier:          +emGKg5QwQr2SIUSxrq366FvErMuDp/tpJi/8StFwTQ=
Subject key identifier:   8C:73:98:0F:62:95:88:53:AF:FC:0A:6F:FF:08:F1:53:56:48:73:F3
Certificate issuer:       /CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
Certificate serial:       37AFF4BD525275BCD3EEE94F5BD73A557EC31BB0
Authority key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262509.roa
Signing time:             Mon 12 Jan 2026 17:37:37 +0000
ROA not before:           Mon 12 Jan 2026 17:32:37 +0000
ROA not after:            Mon 11 Jan 2027 17:37:37 +0000
asID:                     262509
IP address blocks:        131.196.76.0/22 maxlen: 22
                          131.196.76.0/23 maxlen: 23
                          131.196.78.0/23 maxlen: 23
                          168.121.52.0/22 maxlen: 22
                          170.247.52.0/22 maxlen: 22
                          177.67.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:af:f4:bd:52:52:75:bc:d3:ee:e9:4f:5b:d7:3a:55:7e:c3:1b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
        Validity
            Not Before: Jan 12 17:32:37 2026 GMT
            Not After : Jan 11 17:37:37 2027 GMT
        Subject: CN=8C73980F62958853AFFC0A6FFF08F153564873F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:94:eb:25:1d:0e:4c:70:b0:69:1b:2d:da:20:
                    aa:3b:4c:af:6d:24:62:e0:42:59:05:db:a4:f6:40:
                    49:79:a0:08:58:ea:13:76:74:3d:9c:6a:b0:ce:1e:
                    1f:09:55:cb:f1:40:8c:c7:70:f8:58:0f:7d:b0:d0:
                    c4:bd:4a:fc:90:91:18:25:ae:ea:2c:96:0c:39:5d:
                    75:20:79:f7:1c:0e:2c:6e:a7:40:12:6e:bc:1a:56:
                    eb:25:dd:96:aa:d0:18:00:43:ca:7f:88:dd:12:97:
                    63:6d:88:13:43:cc:d0:f2:7a:9d:9f:1f:9a:46:9a:
                    51:39:6d:af:00:fc:a3:f1:e9:a6:a9:43:e7:ef:84:
                    f6:44:e4:35:ba:6f:7a:c4:76:ae:f8:44:b0:a1:84:
                    9c:f6:3b:0a:14:90:30:3b:55:ae:db:56:43:55:70:
                    ed:5b:00:58:d4:9d:9b:ac:09:11:e8:af:ef:36:5d:
                    85:33:88:a5:0a:f4:17:17:1c:a9:8e:0c:fe:e4:ae:
                    85:2b:3c:73:d0:2b:11:a6:32:44:18:dc:95:28:d8:
                    de:d3:97:66:c0:1e:23:7e:04:7b:36:34:ab:2a:97:
                    ea:5b:0e:fa:15:7b:67:ae:48:db:73:05:5c:3e:39:
                    20:3e:01:f6:92:c1:16:94:1f:ac:ce:b2:68:ff:2b:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:73:98:0F:62:95:88:53:AF:FC:0A:6F:FF:08:F1:53:56:48:73:F3
            X509v3 Authority Key Identifier:
                keyid:F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22
                  168.121.52.0/22
                  170.247.52.0/22
                  177.67.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:47:92:81:fa:58:69:5e:17:ea:24:f9:36:eb:0f:b5:fd:fc:
         7f:c7:71:89:81:b7:90:52:b4:e1:b0:d0:0b:cd:1a:9a:da:48:
         b7:25:74:c9:f0:4f:a4:62:cd:27:52:51:80:e0:b2:7e:99:4d:
         6e:d3:86:e8:e3:06:72:e0:69:1c:7b:40:91:b2:bc:74:aa:4c:
         f8:0f:a6:00:64:b5:d1:17:1a:30:b1:b5:63:61:b9:c8:23:88:
         62:67:07:f2:24:58:53:78:0b:9a:c8:5a:94:0d:37:d9:0e:a6:
         b1:38:14:dc:99:5d:07:45:9e:7a:fc:8b:a9:cc:7a:72:05:f9:
         7d:b9:1a:4f:6e:89:a9:09:b7:db:86:eb:53:30:4c:2b:04:b6:
         0a:94:55:09:99:0c:27:e1:53:3e:7e:eb:a3:f2:a3:6d:9b:f8:
         ca:82:03:f9:e0:a0:71:34:e3:f2:2a:08:54:27:37:2e:7e:ed:
         33:ee:a7:8b:e7:1a:28:65:42:79:40:63:e2:00:91:9e:dc:d6:
         c4:98:ed:86:00:8e:85:2c:73:6d:1e:53:5d:b2:26:2b:54:de:
         b3:02:f9:99:ba:2e:58:31:67:43:78:0c:0b:91:5a:89:f3:c2:
         c7:7a:d0:09:2a:47:bd:80:0a:5c:8e:5b:b8:49:7f:84:e3:02:
         9b:1b:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:05:18 2026 by rpki-client