This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/323830343a346237633a3a2f33322d313238203d3e203238323237.roa File: 323830343a346237633a3a2f33322d313238203d3e203238323237.roa (raw, json) Hash identifier: 77iPd4aLxfm7LKUbWKYSvRhK8QjguJyfn6gRCsckjV0= Subject key identifier: A9:E5:F0:81:A1:59:4E:2C:DD:F5:04:F1:E2:55:1B:8F:81:BD:3B:40 Certificate issuer: /CN=E4195C7AEC20ACF2FE3778AC72F036A58D056588 Certificate serial: 182DCD904EF4FBF2BBD279B9A4E1ABEC6F043155 Authority key identifier: E4:19:5C:7A:EC:20:AC:F2:FE:37:78:AC:72:F0:36:A5:8D:05:65:88 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer Subject info access: rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/323830343a346237633a3a2f33322d313238203d3e203238323237.roa Signing time: Fri 09 Jan 2026 13:15:43 +0000 ROA not before: Fri 09 Jan 2026 13:10:43 +0000 ROA not after: Fri 08 Jan 2027 13:15:43 +0000 asID: 28227 IP address blocks: 2804:4b7c::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.crl rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 06:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:2d:cd:90:4e:f4:fb:f2:bb:d2:79:b9:a4:e1:ab:ec:6f:04:31:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4195C7AEC20ACF2FE3778AC72F036A58D056588 Validity Not Before: Jan 9 13:10:43 2026 GMT Not After : Jan 8 13:15:43 2027 GMT Subject: CN=A9E5F081A1594E2CDDF504F1E2551B8F81BD3B40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:2e:77:00:b8:f3:7b:67:ff:1f:f6:2a:5a: c9:18:43:16:45:e5:ef:96:eb:c3:16:a9:43:2c:43: 00:aa:0f:af:44:2e:a6:fe:a0:1e:d7:9b:2b:49:38: f9:96:8b:31:e5:c4:ca:40:cd:0a:7d:53:0f:5c:71: 03:ae:0e:0e:0c:ee:4b:1a:cc:ed:1e:1e:9d:00:2d: df:ef:ab:e2:93:63:62:5d:3e:87:4d:cb:7a:ce:53: ce:f1:e7:3e:41:0e:11:9b:90:6b:2c:fc:46:03:ce: 55:c9:c3:30:e7:c7:43:5c:64:ca:96:43:42:87:fe: be:2b:80:2e:22:de:c1:17:65:22:49:1a:5f:29:03: 55:1a:cf:5c:c7:7f:47:b2:b9:ee:6c:d1:cd:2b:5c: 41:6e:41:0b:d8:4e:dd:5d:cd:1f:4a:d9:78:1a:3a: db:84:1c:a9:86:eb:1f:63:a6:bc:96:2c:9f:86:b9: d8:37:d5:50:c8:13:b4:74:11:f6:dc:e0:06:76:9f: 68:4e:39:54:96:c8:2e:40:69:aa:28:53:69:d6:58: 5b:cb:3f:4a:4f:83:93:c1:79:5b:20:aa:25:98:43: bd:39:f0:a8:01:35:ac:a9:ca:88:fd:40:ac:b8:e2: 5a:e9:db:66:f9:a6:b2:2e:e3:95:9d:95:7b:2d:88: 62:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E5:F0:81:A1:59:4E:2C:DD:F5:04:F1:E2:55:1B:8F:81:BD:3B:40 X509v3 Authority Key Identifier: keyid:E4:19:5C:7A:EC:20:AC:F2:FE:37:78:AC:72:F0:36:A5:8D:05:65:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/E4195C7AEC20ACF2FE3778AC72F036A58D056588.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4195C7AEC20ACF2FE3778AC72F036A58D056588.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hEGyP8k4orCvxZe1Je9834aisNAp9zRkm5pmvYorZ1r/0/323830343a346237633a3a2f33322d313238203d3e203238323237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4b7c::/32 Signature Algorithm: sha256WithRSAEncryption 04:15:04:7e:2c:e0:46:b3:c9:6d:51:35:47:0f:94:e4:1b:05: d9:1b:8a:96:2d:de:79:95:37:9f:3d:ed:97:65:cf:75:13:be: fe:20:09:70:c2:82:bc:41:3f:8b:f3:d9:11:e2:13:8b:64:55: e4:a3:fd:22:0c:c4:5c:c7:f6:e1:e6:f5:3a:d8:4c:13:85:3b: d8:d6:23:91:43:50:16:b4:8e:e6:88:f9:d9:38:95:c4:15:a6: 7a:fb:54:c1:15:c5:a2:f4:b5:36:0f:cb:0d:6d:52:c4:96:f0: 13:ae:6a:80:a4:d0:e9:a1:c1:0f:8e:07:d0:4d:fb:fb:5e:76: db:9f:1c:f5:b2:3d:45:7e:29:8c:57:4a:21:0f:8b:03:e7:6f: c7:a0:5a:9e:f4:f7:ed:26:84:10:12:29:81:a7:92:94:e6:14: 4e:07:29:2b:d8:1a:e4:e9:8d:d6:52:fe:a0:e0:92:06:32:74: f6:52:3f:11:73:aa:47:a9:77:1d:e1:46:dc:1d:9d:3c:14:7b: 01:41:ea:ae:7e:16:ee:49:28:aa:27:ca:37:fa:71:7d:d1:a9: 15:58:d2:43:b3:a8:d0:41:df:2d:1b:29:81:63:dd:e2:d0:f0: 15:70:79:39:99:99:8c:a0:eb:9b:e6:bb:7a:50:c6:d1:5b:19: 23:19:de:93 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUGC3NkE70+/K70nm5pOGr7G8EMVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQxOTVDN0FFQzIwQUNGMkZFMzc3OEFDNzJGMDM2QTU4 RDA1NjU4ODAeFw0yNjAxMDkxMzEwNDNaFw0yNzAxMDgxMzE1NDNaMDMxMTAvBgNV BAMTKEE5RTVGMDgxQTE1OTRFMkNEREY1MDRGMUUyNTUxQjhGODFCRDNCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhy53ALjze2f/H/YqWskYQxZF 5e+W68MWqUMsQwCqD69ELqb+oB7XmytJOPmWizHlxMpAzQp9Uw9ccQOuDg4M7ksa zO0eHp0ALd/vq+KTY2JdPodNy3rOU87x5z5BDhGbkGss/EYDzlXJwzDnx0NcZMqW Q0KH/r4rgC4i3sEXZSJJGl8pA1Uaz1zHf0eyue5s0c0rXEFuQQvYTt1dzR9K2Xga OtuEHKmG6x9jpryWLJ+Gudg31VDIE7R0Efbc4AZ2n2hOOVSWyC5AaaooU2nWWFvL P0pPg5PBeVsgqiWYQ7058KgBNaypyoj9QKy44lrp22b5prIu45WdlXstiGJtAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUqeXwgaFZTizd9QTx4lUbj4G9O0AwHwYDVR0j BBgwFoAU5BlceuwgrPL+N3iscvA2pY0FZYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmhFR3lQOGs0b3JDdnhaZTFKZTk4MzRhaXNOQXA5elJrbTVwbXZZb3Ja MXIvMC9FNDE5NUM3QUVDMjBBQ0YyRkUzNzc4QUM3MkYwMzZBNThEMDU2NTg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0MTk1QzdBRUMyMEFDRjJG RTM3NzhBQzcyRjAzNkE1OEQwNTY1ODguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJoRUd5UDhrNG9yQ3Z4WmUxSmU5ODM0YWlzTkFwOXpSa201cG12WW9yWjFyLzAv MzIzODMwMzQzYTM0NjIzNzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM4 MzIzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARLfDANBgkqhkiG9w0BAQsFAAOCAQEABBUEfizg RrPJbVE1Rw+U5BsF2RuKli3eeZU3nz3tl2XPdRO+/iAJcMKCvEE/i/PZEeITi2RV 5KP9IgzEXMf24eb1OthME4U72NYjkUNQFrSO5oj52TiVxBWmevtUwRXFovS1Ng/L DW1SxJbwE65qgKTQ6aHBD44H0E37+152258c9bI9RX4pjFdKIQ+LA+dvx6BanvT3 7SaEEBIpgaeSlOYUTgcpK9ga5OmN1lL+oOCSBjJ09lI/EXOqR6l3HeFG3B2dPBR7 AUHqrn4W7kkoqifKN/pxfdGpFVjSQ7Oo0EHfLRspgWPd4tDwFXB5OZmZjKDrm+a7 elDG0VsZIxnekw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:52:36 2026 by rpki-client