This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa File: 3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa (raw, json) Hash identifier: UoF7SOSrCd44zeXktu5ZCPyIu5hdVWA41pO5DzfhYJk= Subject key identifier: 10:E4:77:EF:FF:38:0D:57:52:67:58:2A:27:E6:F5:25:50:1E:75:91 Certificate issuer: /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90 Certificate serial: 16CF2C08F4DF895325D7458CB5AD872AAD2020F1 Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer Subject info access: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa Signing time: Fri 09 Jan 2026 06:20:12 +0000 ROA not before: Fri 09 Jan 2026 06:15:12 +0000 ROA not after: Fri 08 Jan 2027 06:20:12 +0000 asID: 266178 IP address blocks: 138.97.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 04:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:cf:2c:08:f4:df:89:53:25:d7:45:8c:b5:ad:87:2a:ad:20:20:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90 Validity Not Before: Jan 9 06:15:12 2026 GMT Not After : Jan 8 06:20:12 2027 GMT Subject: CN=10E477EFFF380D575267582A27E6F525501E7591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:c5:e5:e7:d4:81:91:23:2c:08:3c:6f:48: 81:bb:7c:0d:36:d3:a9:51:06:3e:94:48:63:ba:1f: 21:41:2b:4b:d5:74:70:a8:7e:e0:d5:3b:65:d7:29: 09:6a:95:e2:95:c5:af:da:b2:9a:b3:7b:77:ab:3d: 65:e3:b7:0e:38:25:14:b4:f4:bd:cf:69:59:ad:d7: 2d:71:84:8f:62:98:a6:85:85:f4:ad:2b:7a:a5:0a: d2:ce:3c:f4:0a:dd:2e:20:96:26:91:95:37:91:13: 6d:34:53:1d:5f:cb:52:cd:eb:33:68:d6:0c:64:43: e8:e1:77:be:b4:84:f5:f2:c8:be:2e:be:76:84:1d: ce:c3:de:45:fc:42:8d:ca:4e:c7:9b:6e:c5:c0:56: 61:55:86:26:ad:5f:ea:6c:84:1e:50:0c:97:ca:e1: 51:46:48:67:87:8c:4b:2c:b5:ee:82:79:15:0f:49: 69:4f:ca:09:94:19:a3:2e:b9:38:ff:33:7c:13:f2: 9b:8d:14:a6:39:e8:8c:c1:d6:63:59:99:b5:bc:27: 1e:8c:58:20:2e:f6:12:13:0b:8d:57:d8:84:ff:59: 8b:1e:d6:f2:fc:35:15:d3:35:f5:9b:c5:65:c3:f4: 04:5e:c5:2a:eb:50:28:ae:f0:b1:8b:94:cb:fc:80: 68:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E4:77:EF:FF:38:0D:57:52:67:58:2A:27:E6:F5:25:50:1E:75:91 X509v3 Authority Key Identifier: keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.147.0/24 Signature Algorithm: sha256WithRSAEncryption 91:70:0c:9d:c1:95:51:a8:d7:25:d6:f4:40:0f:c0:e0:7d:cf: 38:f2:12:d9:f2:b1:64:07:7a:c9:6e:43:9b:76:83:55:18:f3: b4:28:2a:c5:7a:ad:b9:92:aa:6e:f0:07:7b:a6:a5:e8:12:b8: fb:2d:69:89:ac:95:af:e3:5b:cc:a3:0c:29:f5:da:b8:7b:48: 88:be:3c:11:b9:0c:ec:05:04:db:e1:26:ea:63:45:f7:2b:21: c1:18:4a:e3:71:d7:5a:76:37:9b:06:4b:15:af:2e:d1:29:28: 18:ac:e7:82:65:a2:20:7c:6f:63:df:c7:05:73:e9:c8:51:be: b0:f5:d2:61:4e:95:8d:13:77:52:fe:df:f1:e5:7d:f1:64:d1: 99:3a:ec:4e:a8:21:ee:7e:36:7d:2c:f8:af:d5:39:1d:26:4e: f8:f6:5d:99:b5:0a:52:1b:b4:c9:57:8a:42:44:23:52:da:a7: 0f:19:ba:4f:90:72:57:4c:e9:e5:05:1f:30:e5:ed:d7:31:6b: 24:58:16:f2:d2:be:34:c6:25:cb:31:0c:21:2d:30:aa:29:1f: 6e:48:e4:3a:c7:6d:a4:81:e2:14:19:99:83:64:0b:48:0a:5f: a2:b9:81:79:08:3b:33:8f:44:b6:6f:d5:07:b4:6a:9b:06:bd: 42:f2:46:53 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUFs8sCPTfiVMl10WMta2HKq0gIPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJCMjNGQjBGMzhGN0NERTE3ODUyREM2MUJEMjM0RENF QkMzQkI5MDAeFw0yNjAxMDkwNjE1MTJaFw0yNzAxMDgwNjIwMTJaMDMxMTAvBgNV BAMTKDEwRTQ3N0VGRkYzODBENTc1MjY3NTgyQTI3RTZGNTI1NTAxRTc1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCstMXl59SBkSMsCDxvSIG7fA02 06lRBj6USGO6HyFBK0vVdHCofuDVO2XXKQlqleKVxa/aspqze3erPWXjtw44JRS0 9L3PaVmt1y1xhI9imKaFhfStK3qlCtLOPPQK3S4gliaRlTeRE200Ux1fy1LN6zNo 1gxkQ+jhd760hPXyyL4uvnaEHc7D3kX8Qo3KTsebbsXAVmFVhiatX+pshB5QDJfK 4VFGSGeHjEsste6CeRUPSWlPygmUGaMuuTj/M3wT8puNFKY56IzB1mNZmbW8Jx6M WCAu9hITC41X2IT/WYse1vL8NRXTNfWbxWXD9ARexSrrUCiu8LGLlMv8gGi3AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUEOR37/84DVdSZ1gqJ+b1JVAedZEwHwYDVR0j BBgwFoAUi7I/sPOPfN4XhS3GG9I03OvDu5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzFFQ2VOYTZKRnJRTk55U1pndVNpODJTejExNGdBNWpSeFFZTTJQb3Ix cVEvMS84QkIyM0ZCMEYzOEY3Q0RFMTc4NTJEQzYxQkQyMzREQ0VCQzNCQjkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQjIzRkIwRjM4RjdDREUx Nzg1MkRDNjFCRDIzNERDRUJDM0JCOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzMxRUNlTmE2SkZyUU5OeVNaZ3VTaTgyU3oxMTRnQTVqUnhRWU0yUG9yMXFRLzEv MzEzMzM4MmUzOTM3MmUzMTM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzYzMTM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKYZMwDQYJKoZIhvcNAQELBQADggEBAJFwDJ3B lVGo1yXW9EAPwOB9zzjyEtnysWQHesluQ5t2g1UY87QoKsV6rbmSqm7wB3umpegS uPstaYmsla/jW8yjDCn12rh7SIi+PBG5DOwFBNvhJupjRfcrIcEYSuNx11p2N5sG SxWvLtEpKBis54JloiB8b2PfxwVz6chRvrD10mFOlY0Td1L+3/HlffFk0Zk67E6o Ie5+Nn0s+K/VOR0mTvj2XZm1ClIbtMlXikJEI1Lapw8Zuk+QcldM6eUFHzDl7dcx ayRYFvLSvjTGJcsxDCEtMKopH25I5DrHbaSB4hQZmYNkC0gKX6K5gXkIOzOPRLZv 1Qe0apsGvULyRlM= -----END CERTIFICATE-----Generated at Sun Jan 25 20:22:33 2026 by rpki-client