This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS28270.roa File: AS28270.roa (raw, json) Hash identifier: VYwiitz8VSKNHioJMM/TzjsELYkLSFvSBXacpRNoVcE= Subject key identifier: 25:08:31:AE:FC:03:6C:CF:6E:BB:D2:14:51:5C:DA:AA:29:94:14:6B Certificate issuer: /CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E Certificate serial: 0F4B058ADC20B3725EA1C8AC2F251D5AD6B9116D Authority key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS28270.roa Signing time: Mon 12 Jan 2026 17:38:04 +0000 ROA not before: Mon 12 Jan 2026 17:33:04 +0000 ROA not after: Mon 11 Jan 2027 17:38:04 +0000 asID: 28270 IP address blocks: 131.221.68.0/22 maxlen: 22 138.117.124.0/22 maxlen: 22 138.121.220.0/22 maxlen: 22 138.121.220.0/24 maxlen: 24 138.122.236.0/22 maxlen: 22 138.122.236.0/24 maxlen: 24 138.122.237.0/24 maxlen: 24 143.255.112.0/22 maxlen: 22 160.238.220.0/22 maxlen: 22 168.228.128.0/22 maxlen: 22 168.232.116.0/22 maxlen: 22 170.0.204.0/22 maxlen: 22 170.245.100.0/22 maxlen: 22 177.66.64.0/21 maxlen: 21 177.70.128.0/20 maxlen: 20 177.75.192.0/20 maxlen: 20 177.75.208.0/20 maxlen: 20 177.87.144.0/21 maxlen: 21 177.130.192.0/19 maxlen: 19 179.191.128.0/20 maxlen: 20 179.191.144.0/20 maxlen: 20 187.18.128.0/17 maxlen: 17 187.18.212.0/22 maxlen: 22 187.108.96.0/20 maxlen: 20 187.110.208.0/20 maxlen: 20 189.45.64.0/18 maxlen: 18 189.50.144.0/20 maxlen: 20 200.94.240.0/22 maxlen: 22 201.149.120.0/22 maxlen: 22 2804:880::/32 maxlen: 32 2804:880:fc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 10:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:4b:05:8a:dc:20:b3:72:5e:a1:c8:ac:2f:25:1d:5a:d6:b9:11:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E Validity Not Before: Jan 12 17:33:04 2026 GMT Not After : Jan 11 17:38:04 2027 GMT Subject: CN=250831AEFC036CCF6EBBD214515CDAAA2994146B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:db:91:a6:21:20:2f:3a:f3:35:84:6f:d5:2d: de:21:93:a6:c6:be:88:ef:d1:56:9d:f8:ac:d1:22: 50:bb:e9:85:78:81:63:1d:9b:73:04:7e:98:f4:b3: e0:15:ed:e6:e1:57:28:2d:59:98:ee:5d:7f:42:f5: fb:f5:94:88:65:2f:bf:7a:f5:81:cc:d0:26:d8:8a: 73:43:ec:df:40:35:03:fb:0b:26:63:b5:8d:bc:7d: 79:0c:15:1a:ab:22:a1:37:53:21:8e:4f:4b:d6:e9: 2d:ec:8a:10:2e:6a:e8:1e:ec:3d:c4:cb:a4:0f:b9: 70:a4:21:2e:c3:74:25:96:a0:99:64:16:e1:cc:be: ee:db:61:a1:7f:95:71:4c:8f:bc:2a:f8:d1:ad:d6: 26:d6:73:e0:d4:58:d0:a6:95:0f:6d:f8:dd:e4:a9: 16:13:5b:3f:5b:d7:0b:54:87:53:cc:57:90:fb:ff: df:a4:34:57:f8:ae:d3:4c:e9:d7:70:37:f8:0a:b1: 83:84:16:e7:c4:78:fd:fe:a1:fc:ce:10:1c:93:74: a9:90:9b:d1:c2:71:b9:6d:96:36:3b:42:a1:f5:ee: c8:41:43:10:47:dd:a1:dc:76:34:07:9d:05:13:f9: 47:f5:ab:65:fe:b0:e1:3d:2d:13:85:ec:d0:4c:50: bd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:08:31:AE:FC:03:6C:CF:6E:BB:D2:14:51:5C:DA:AA:29:94:14:6B X509v3 Authority Key Identifier: keyid:F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS28270.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.68.0/22 138.117.124.0/22 138.121.220.0/22 138.122.236.0/22 143.255.112.0/22 160.238.220.0/22 168.228.128.0/22 168.232.116.0/22 170.0.204.0/22 170.245.100.0/22 177.66.64.0/21 177.70.128.0/20 177.75.192.0/19 177.87.144.0/21 177.130.192.0/19 179.191.128.0/19 187.18.128.0/17 187.108.96.0/20 187.110.208.0/20 189.45.64.0/18 189.50.144.0/20 200.94.240.0/22 201.149.120.0/22 IPv6: 2804:880::/32 Signature Algorithm: sha256WithRSAEncryption 59:2a:79:e7:04:14:64:b6:31:c9:10:cc:8c:24:a3:06:04:19: f8:67:86:73:fa:82:2e:c9:06:d8:f5:0a:52:b8:44:9e:f8:cf: dd:26:61:f3:1e:83:73:d2:59:50:b8:51:94:87:7d:4c:db:1f: cf:1b:e8:e8:f1:e7:f4:cf:d0:8b:83:a5:da:6c:b8:bc:56:08: 89:fe:83:3c:e9:e3:58:b7:4b:3d:05:3d:1e:eb:a0:2f:3a:71: a3:71:41:88:80:94:6b:bb:ab:98:b1:9c:7d:a9:6f:a2:5c:cd: 94:44:ba:c5:c6:4e:09:15:23:5a:56:f9:11:06:e1:17:b3:e4: d8:91:d1:d0:15:bd:27:c2:75:e7:8d:b1:eb:8c:87:70:cc:64: 33:9b:46:f2:e4:d9:c2:6d:5f:ea:1d:c5:53:57:32:b3:fa:d5: 3d:8c:da:d9:79:a5:6f:d5:ba:dc:69:78:6c:d2:91:a1:15:c7: 1d:d6:28:a1:c4:c2:2c:73:74:88:5e:6f:7a:e5:8e:57:64:72: e6:71:c4:ab:f3:6e:bf:41:9e:f7:48:ef:c9:e4:11:9b:4e:c1: 93:a1:6f:0a:55:f4:f6:35:d3:96:41:ff:c7:1a:8c:5c:f0:2b: b8:a5:c0:31:9f:ee:b2:be:23:90:56:70:64:ed:6a:35:04:df: 84:a1:a9:e4 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgIUD0sFitwgs3JeocisLyUdWta5EW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYyRkE1NDBFNTlCODU3MDIwQzRCMjA5NTQyMzBFMEMw QUU4Q0EwRTAeFw0yNjAxMTIxNzMzMDRaFw0yNzAxMTExNzM4MDRaMDMxMTAvBgNV BAMTKDI1MDgzMUFFRkMwMzZDQ0Y2RUJCRDIxNDUxNUNEQUFBMjk5NDE0NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP25GmISAvOvM1hG/VLd4hk6bG vojv0Vad+KzRIlC76YV4gWMdm3MEfpj0s+AV7ebhVygtWZjuXX9C9fv1lIhlL796 9YHM0CbYinND7N9ANQP7CyZjtY28fXkMFRqrIqE3UyGOT0vW6S3sihAuauge7D3E y6QPuXCkIS7DdCWWoJlkFuHMvu7bYaF/lXFMj7wq+NGt1ibWc+DUWNCmlQ9t+N3k qRYTWz9b1wtUh1PMV5D7/9+kNFf4rtNM6ddwN/gKsYOEFufEeP3+ofzOEByTdKmQ m9HCcbltljY7QqH17shBQxBH3aHcdjQHnQUT+Uf1q2X+sOE9LROF7NBMUL3pAgMB AAGjggKzMIICrzAdBgNVHQ4EFgQUJQgxrvwDbM9uu9IUUVzaqimUFGswHwYDVR0j BBgwFoAU9i+lQOWbhXAgxLIJVCMODAroyg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF ZUIvMC9GNjJGQTU0MEU1OUI4NTcwMjBDNEIyMDk1NDIzMEUwQzBBRThDQTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2MkZBNTQwRTU5Qjg1NzAy MEM0QjIwOTU0MjMwRTBDMEFFOENBMEUuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTMjgy NzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgbYGCCsGAQUFBwEHAQH/ BIGmMIGjMIGRBAIAATCBigMEAoPdRAMEAop1fAMEAop53AMEAop67AMEAo//cAME AqDu3AMEAqjkgAMEAqjodAMEAqoAzAMEAqr1ZAMEA7FCQAMEBLFGgAMEBbFLwAME A7FXkAMEBbGCwAMEBbO/gAMEB7sSgAMEBLtsYAMEBLtu0AMEBr0tQAMEBL0ykAME Ashe8AMEAsmVeDANBAIAAjAHAwUAKAQIgDANBgkqhkiG9w0BAQsFAAOCAQEAWSp5 5wQUZLYxyRDMjCSjBgQZ+GeGc/qCLskG2PUKUrhEnvjP3SZh8x6Dc9JZULhRlId9 TNsfzxvo6PHn9M/Qi4Ol2my4vFYIif6DPOnjWLdLPQU9HuugLzpxo3FBiICUa7ur mLGcfalvolzNlES6xcZOCRUjWlb5EQbhF7Pk2JHR0BW9J8J1542x64yHcMxkM5tG 8uTZwm1f6h3FU1cys/rVPYza2Xmlb9W63Gl4bNKRoRXHHdYoocTCLHN0iF5veuWO V2Ry5nHEq/Nuv0Ge90jvyeQRm07Bk6FvClX09jXTlkH/xxqMXPAruKXAMZ/usr4j kFZwZO1qNQTfhKGp5A== -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:20 2026 by rpki-client