This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/3138392e3132362e3230382e302f32302d3332203d3e203238323237.roa
File: 3138392e3132362e3230382e302f32302d3332203d3e203238323237.roa (raw, json)
Hash identifier: z5WT02ECH4y5EWMWT0olN+gx1W+kUd49Y/UkwmEGAZA=
Subject key identifier: 9B:D4:66:17:73:C0:B2:00:03:6C:00:8E:55:6F:70:BC:9A:2F:86:E8
Certificate issuer: /CN=E4195C7AEC20ACF2FE3778AC72F036A58D056588
Certificate serial: 1E3BF6FA69C3EF77EAE713EE053DE8A2AF2CAF27
Authority key identifier: E4:19:5C:7A:EC:20:AC:F2:FE:37:78:AC:72:F0:36:A5:8D:05:65:88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/3138392e3132362e3230382e302f32302d3332203d3e203238323237.roa
Signing time: Fri 09 Jan 2026 13:14:38 +0000
ROA not before: Fri 09 Jan 2026 13:09:38 +0000
ROA not after: Fri 08 Jan 2027 13:14:38 +0000
asID: 28227
IP address blocks: 189.126.208.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.crl
rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 06:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:3b:f6:fa:69:c3:ef:77:ea:e7:13:ee:05:3d:e8:a2:af:2c:af:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4195C7AEC20ACF2FE3778AC72F036A58D056588
Validity
Not Before: Jan 9 13:09:38 2026 GMT
Not After : Jan 8 13:14:38 2027 GMT
Subject: CN=9BD4661773C0B200036C008E556F70BC9A2F86E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:2e:18:85:2e:c0:3b:55:0b:d0:72:a2:47:
4b:3e:e3:5d:ac:62:fd:98:fc:7c:3b:44:40:3e:c5:
ee:58:36:47:cd:fb:fa:1d:06:60:ea:52:a4:88:92:
1a:cf:45:3a:ae:da:82:55:39:5b:2e:81:16:83:ce:
86:ee:56:4f:aa:4a:53:c0:47:2d:d2:38:cd:1f:5f:
c0:fe:9c:f0:a5:16:79:47:ab:86:2c:fa:20:21:9c:
ab:6e:cb:90:a6:c7:e0:c0:c4:a8:ee:33:0c:ac:89:
89:51:f4:6f:74:cc:e8:fd:6b:04:d7:2b:05:8f:44:
4f:1d:39:91:53:a1:a5:12:ed:35:ab:82:6b:16:b2:
47:b4:b0:31:7b:9f:22:20:4a:be:2b:c4:4d:1a:d4:
0d:fd:46:8f:c8:12:b1:0e:5e:12:36:df:7b:ea:82:
85:ff:6f:62:e6:9a:46:8a:15:73:3e:e4:5e:6e:74:
08:59:24:6b:7a:2d:82:36:ef:fa:5a:19:e7:5f:ac:
5e:c9:38:2b:ea:08:f9:d4:d9:6e:a0:5b:a3:d2:98:
a2:e6:a4:fa:65:c4:f8:27:18:01:89:e2:65:ba:c2:
c9:2e:39:89:df:21:bf:69:bd:db:a4:94:f0:74:d9:
43:cf:cb:a8:04:8a:82:ba:3a:12:29:b5:5c:96:11:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D4:66:17:73:C0:B2:00:03:6C:00:8E:55:6F:70:BC:9A:2F:86:E8
X509v3 Authority Key Identifier:
keyid:E4:19:5C:7A:EC:20:AC:F2:FE:37:78:AC:72:F0:36:A5:8D:05:65:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/3138392e3132362e3230382e302f32302d3332203d3e203238323237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.208.0/20
Signature Algorithm: sha256WithRSAEncryption
37:78:4f:08:79:d5:8d:27:2c:87:3d:2b:28:5a:e4:6c:bc:65:
f8:ff:78:e6:a6:32:52:b5:6c:a8:bf:3a:12:38:cb:7b:a5:b5:
39:95:48:c7:17:79:a4:76:c1:48:1f:ed:f6:b4:14:14:40:ce:
fa:42:a3:7c:cf:c6:d6:7c:b0:3b:7d:0f:fb:86:2a:43:10:ab:
37:ea:07:9a:1f:c7:25:58:36:0c:10:e5:c6:58:4a:87:3c:3f:
3f:1d:cc:ed:7a:04:d0:1e:eb:49:52:83:f0:22:11:e7:a1:c3:
29:90:a0:06:c2:d6:9b:d2:25:68:33:c5:b5:1c:1d:5c:f4:91:
53:cc:50:41:83:2d:4b:03:ff:77:72:4a:00:e0:c1:ed:5b:f7:
19:96:27:16:29:8c:93:b7:1e:b5:41:c7:d8:6c:46:55:60:27:
37:ae:45:f8:de:b8:38:af:64:92:a7:c1:39:f4:ee:9c:cc:2d:
be:79:f9:20:26:89:73:ee:57:b3:97:a4:ae:c6:60:2f:68:26:
6a:3e:a9:0a:c7:02:9d:9b:10:ab:a0:56:07:34:fe:02:3b:6d:
48:f1:ae:3a:b7:a3:6c:35:8d:78:8a:00:82:70:86:93:66:9c:
7b:97:ba:69:52:e2:c9:4b:e5:54:aa:fe:9e:51:f6:1a:76:f7:
dd:31:39:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:22 2026 by rpki-client