This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/3136382e3132312e382e302f32322d3332203d3e20323635333035.roa File: 3136382e3132312e382e302f32322d3332203d3e20323635333035.roa (raw, json) Hash identifier: 1X8RdFoK5lRYZxMnHlMRUyaMfyx3BDEccbztiLtmlbk= Subject key identifier: A1:4E:C3:EA:F3:2D:B6:1B:A7:43:BD:05:FC:A5:E4:D5:95:FF:5E:DB Certificate issuer: /CN=8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E Certificate serial: 0E183FCA03B5331B5EF3E6926C8C1642CA197FEC Authority key identifier: 8C:FA:E2:B8:80:F5:0C:AE:44:5E:D2:38:F6:DB:F5:3F:BA:13:F2:9E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.cer Subject info access: rsync://rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/3136382e3132312e382e302f32322d3332203d3e20323635333035.roa Signing time: Mon 19 Jan 2026 18:03:22 +0000 ROA not before: Mon 19 Jan 2026 17:58:22 +0000 ROA not after: Mon 18 Jan 2027 18:03:22 +0000 asID: 265305 IP address blocks: 168.121.8.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.crl rsync://rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Jan 2026 00:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:18:3f:ca:03:b5:33:1b:5e:f3:e6:92:6c:8c:16:42:ca:19:7f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E Validity Not Before: Jan 19 17:58:22 2026 GMT Not After : Jan 18 18:03:22 2027 GMT Subject: CN=A14EC3EAF32DB61BA743BD05FCA5E4D595FF5EDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:25:52:e6:2e:11:c8:af:3e:ae:47:af:a9: a8:73:4c:8e:28:86:7a:c5:73:85:0c:bf:1c:24:75: 9e:ef:f1:ca:1e:e5:3e:3f:cd:69:39:59:c0:5e:cb: 65:12:61:12:5c:68:d2:62:52:19:38:c6:5e:48:62: b8:17:57:4a:31:0e:05:89:8d:be:b6:fb:76:70:62: 80:7f:57:d6:ce:cb:9a:65:0c:13:b6:e8:0d:00:89: 5c:e1:73:1f:3d:35:ee:f8:4f:79:1e:8b:66:17:62: 6f:61:84:6b:72:13:4a:6c:fe:a0:58:48:ed:5e:70: b4:1d:f4:3a:4b:16:4a:ea:d1:a0:0f:ae:85:dc:36: 7b:41:d8:c1:5d:56:dd:cb:b5:f8:7b:cd:23:ce:cd: 69:7b:f6:63:09:c8:36:6b:9d:d0:eb:5c:73:cf:91: 4e:69:ba:3f:62:94:38:11:fc:b8:b1:73:f5:60:e0: 48:58:ae:3a:ec:17:c6:c0:ef:6a:ac:a2:02:86:0f: f8:bd:a0:b5:a4:7a:87:9e:40:35:0e:76:76:f0:f8: 73:4a:29:86:e4:36:9e:be:51:01:d7:a7:b9:96:df: df:22:ce:fd:96:4b:53:a2:b6:1a:78:e3:93:54:62: 2e:90:08:b3:ca:ea:c5:2c:b5:68:c9:f1:13:f9:43: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4E:C3:EA:F3:2D:B6:1B:A7:43:BD:05:FC:A5:E4:D5:95:FF:5E:DB X509v3 Authority Key Identifier: keyid:8C:FA:E2:B8:80:F5:0C:AE:44:5E:D2:38:F6:DB:F5:3F:BA:13:F2:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CFAE2B880F50CAE445ED238F6DBF53FBA13F29E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HoKDNkDjQCZENuiHMD84B7YvVmDAFHDbXgDFXWzQqmd/0/3136382e3132312e382e302f32322d3332203d3e20323635333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.8.0/22 Signature Algorithm: sha256WithRSAEncryption 71:1c:84:ab:67:23:4d:19:e0:97:da:c1:51:08:d6:82:a9:b6: 5e:7c:9d:65:52:b7:ac:7c:fc:f0:66:2e:87:b0:a5:9b:20:5d: fe:58:2b:60:6b:9a:44:a6:6a:01:45:6b:91:c9:0a:4a:ce:09: c2:9b:07:64:a4:ab:87:af:8d:10:d4:72:51:9b:64:76:03:12: 6e:0f:cc:75:42:28:1e:91:cb:67:74:de:8e:59:1b:fc:78:2d: 20:51:98:3e:c5:09:08:db:d1:8d:76:53:12:7d:c4:31:3d:92: 3d:c3:23:0c:65:20:9c:00:e8:09:a6:12:01:2b:f1:98:71:f8: 66:75:60:60:f4:b6:7c:4a:de:6f:27:49:f8:06:dd:d5:e4:83: a6:d7:b9:98:fd:34:5b:42:8a:d7:dc:30:d2:49:3c:00:61:a1: c1:de:13:5f:b1:75:00:62:1b:01:37:43:51:83:53:c8:19:29: f5:c1:98:c6:8d:9f:d3:00:e2:c2:39:43:c0:06:d2:79:28:2a: c6:e6:aa:fc:ac:e0:6a:dd:c5:80:fb:d2:ab:ef:6f:ec:88:af: 9d:c9:dc:e6:3d:2c:f6:bf:2f:ac:50:a6:5c:2b:87:9e:f4:97: 41:8a:61:98:8f:f1:bd:4e:9e:8b:47:89:f7:fd:88:d1:7b:60: 74:ed:fe:77 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUDhg/ygO1Mxte8+aSbIwWQsoZf+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQUUyQjg4MEY1MENBRTQ0NUVEMjM4RjZEQkY1M0ZC QTEzRjI5RTAeFw0yNjAxMTkxNzU4MjJaFw0yNzAxMTgxODAzMjJaMDMxMTAvBgNV BAMTKEExNEVDM0VBRjMyREI2MUJBNzQzQkQwNUZDQTVFNEQ1OTVGRjVFREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4OyVS5i4RyK8+rkevqahzTI4o hnrFc4UMvxwkdZ7v8coe5T4/zWk5WcBey2USYRJcaNJiUhk4xl5IYrgXV0oxDgWJ jb62+3ZwYoB/V9bOy5plDBO26A0AiVzhcx89Ne74T3kei2YXYm9hhGtyE0ps/qBY SO1ecLQd9DpLFkrq0aAProXcNntB2MFdVt3Ltfh7zSPOzWl79mMJyDZrndDrXHPP kU5puj9ilDgR/Lixc/Vg4EhYrjrsF8bA72qsogKGD/i9oLWkeoeeQDUOdnbw+HNK KYbkNp6+UQHXp7mW398izv2WS1Oithp445NUYi6QCLPK6sUstWjJ8RP5Q/7ZAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUoU7D6vMtthunQ70F/KXk1ZX/XtswHwYDVR0j BBgwFoAUjPriuID1DK5EXtI49tv1P7oT8p4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkhvS0ROa0RqUUNaRU51aUhNRDg0QjdZdlZtREFGSERiWGdERlhXelFx bWQvMC84Q0ZBRTJCODgwRjUwQ0FFNDQ1RUQyMzhGNkRCRjUzRkJBMTNGMjlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRkFFMkI4ODBGNTBDQUU0 NDVFRDIzOEY2REJGNTNGQkExM0YyOUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZIb0tETmtEalFDWkVOdWlITUQ4NEI3WXZWbURBRkhEYlhnREZYV3pRcW1kLzAv MzEzNjM4MmUzMTMyMzEyZTM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM1 MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCqHkIMA0GCSqGSIb3DQEBCwUAA4IBAQBxHISrZyNN GeCX2sFRCNaCqbZefJ1lUresfPzwZi6HsKWbIF3+WCtga5pEpmoBRWuRyQpKzgnC mwdkpKuHr40Q1HJRm2R2AxJuD8x1QigekctndN6OWRv8eC0gUZg+xQkI29GNdlMS fcQxPZI9wyMMZSCcAOgJphIBK/GYcfhmdWBg9LZ8St5vJ0n4Bt3V5IOm17mY/TRb QorX3DDSSTwAYaHB3hNfsXUAYhsBN0NRg1PIGSn1wZjGjZ/TAOLCOUPABtJ5KCrG 5qr8rOBq3cWA+9Kr72/siK+dydzmPSz2vy+sUKZcK4ee9JdBimGYj/G9Tp6LR4n3 /YjRe2B07f53 -----END CERTIFICATE-----Generated at Mon Jan 26 05:59:50 2026 by rpki-client