This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa File: 34352e3137342e31362e302f32332d3233203d3e20323638383738.roa (raw, json) Hash identifier: keXIpMElmj/p1Ii/+at+te+ilCZkFZnEutXTtt+hJ0U= Subject key identifier: 68:CF:CC:7A:F2:97:73:D1:7A:06:58:2F:73:92:E7:3E:8C:2F:ED:0C Certificate issuer: /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Certificate serial: 1D56EC90C26A560F0A2F6A860511BA824F8421A2 Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa Signing time: Wed 26 Nov 2025 10:02:49 +0000 ROA not before: Wed 26 Nov 2025 09:57:49 +0000 ROA not after: Wed 25 Nov 2026 10:02:49 +0000 asID: 268878 IP address blocks: 45.174.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 02:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:56:ec:90:c2:6a:56:0f:0a:2f:6a:86:05:11:ba:82:4f:84:21:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Validity Not Before: Nov 26 09:57:49 2025 GMT Not After : Nov 25 10:02:49 2026 GMT Subject: CN=68CFCC7AF29773D17A06582F7392E73E8C2FED0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:da:94:1f:a1:12:3a:66:64:4a:99:5e:d7:12: 79:7d:52:b8:4f:38:20:9e:45:35:68:66:b9:fd:bb: 1d:8b:6d:b1:5f:99:6f:d4:3b:27:0d:f1:71:25:04: 0c:8e:18:d9:77:41:0c:4d:62:ae:71:8f:1b:6e:12: 6d:59:29:34:8a:35:46:1c:04:09:86:e9:76:70:87: e0:76:32:c4:48:d0:d7:f0:59:da:a4:71:72:3f:cf: 78:86:4d:c4:23:0e:05:23:b4:80:36:2b:85:74:c2: d9:bd:77:63:75:97:f6:99:b7:30:a2:aa:06:31:95: cf:94:b0:e7:98:03:33:4a:cf:4a:de:fa:68:fc:8a: 70:19:07:54:88:d8:b7:44:77:a8:55:8e:d9:51:a1: 0f:22:98:e4:47:1b:30:57:08:bf:a0:47:3d:32:d9: ac:2e:fd:e3:f3:e7:56:25:6f:94:b4:46:c7:5a:88: be:f7:42:19:ac:67:20:56:73:3b:0e:e1:e0:09:90: 82:58:41:a4:05:a3:e8:66:09:d2:de:a3:e5:8c:45: 6d:c7:9d:50:b0:9f:ac:29:0b:19:33:04:72:72:b1: 3c:0b:a2:22:3a:05:b2:3b:26:9d:00:84:e4:42:be: 52:16:98:df:12:58:0d:7e:b6:cf:6f:69:a8:39:0c: 0e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CF:CC:7A:F2:97:73:D1:7A:06:58:2F:73:92:E7:3E:8C:2F:ED:0C X509v3 Authority Key Identifier: keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.16.0/23 Signature Algorithm: sha256WithRSAEncryption 72:90:84:1f:dc:6d:dc:1a:11:28:d9:f6:61:09:1b:76:c6:73: b0:c3:49:c0:c7:67:37:79:2d:cc:96:fa:5d:6b:a7:16:ab:74: 2d:88:80:8b:04:20:34:4b:45:7e:7e:78:0a:cb:d7:e2:d8:27: 9c:bc:4b:7f:11:7a:2a:b6:50:1f:5d:19:e9:46:d9:fa:d5:25: 9e:6c:c5:32:00:d2:04:f7:d9:57:c2:bb:ae:82:9b:79:dd:3a: 9d:e4:88:63:c8:99:86:df:06:9c:f8:93:51:bb:1e:ff:b1:83: ce:ea:56:ae:92:d0:0c:35:94:ed:f8:98:b9:97:c5:67:2e:fb: 7a:7c:5c:57:87:0c:15:41:ab:b2:0c:73:92:b3:d3:39:c8:74: 7d:77:10:b3:ba:f6:42:77:fd:f7:0e:84:83:a5:0a:f1:9a:23: 65:c1:16:62:77:50:89:32:f6:1b:71:59:53:ae:ef:70:ce:05: 0a:a6:8d:6e:97:ac:58:ad:86:cd:ee:c2:0e:cc:d1:21:e7:f5: e7:c8:9e:ee:a6:9b:9e:62:23:58:1c:33:91:bb:7b:34:e7:86: 0e:cc:2f:89:0a:b7:bc:0b:57:77:f3:fc:7a:52:33:6f:1f:42: df:0f:77:a7:7b:2e:2c:a2:e7:e8:75:f8:03:3a:96:b5:9d:6b: 8e:cf:5f:d7 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUHVbskMJqVg8KL2qGBRG6gk+EIaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZCNTkwRkE3QTA0QzE1QTA3RTgwMjU5M0M0NDcyRDc3 RkFCNzgyMDAeFw0yNTExMjYwOTU3NDlaFw0yNjExMjUxMDAyNDlaMDMxMTAvBgNV BAMTKDY4Q0ZDQzdBRjI5NzczRDE3QTA2NTgyRjczOTJFNzNFOEMyRkVEMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm2pQfoRI6ZmRKmV7XEnl9UrhP OCCeRTVoZrn9ux2LbbFfmW/UOycN8XElBAyOGNl3QQxNYq5xjxtuEm1ZKTSKNUYc BAmG6XZwh+B2MsRI0NfwWdqkcXI/z3iGTcQjDgUjtIA2K4V0wtm9d2N1l/aZtzCi qgYxlc+UsOeYAzNKz0re+mj8inAZB1SI2LdEd6hVjtlRoQ8imORHGzBXCL+gRz0y 2awu/ePz51Ylb5S0RsdaiL73QhmsZyBWczsO4eAJkIJYQaQFo+hmCdLeo+WMRW3H nVCwn6wpCxkzBHJysTwLoiI6BbI7Jp0AhORCvlIWmN8SWA1+ts9vaag5DA4fAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUaM/MevKXc9F6Blgvc5LnPowv7QwwHwYDVR0j BBgwFoAUv7WQ+noEwVoH6AJZPERy13+reCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr Ym8vMC9CRkI1OTBGQTdBMDRDMTVBMDdFODAyNTkzQzQ0NzJENzdGQUI3ODIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQjU5MEZBN0EwNEMxNUEw N0U4MDI1OTNDNDQ3MkQ3N0ZBQjc4MjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv MzQzNTJlMzEzNzM0MmUzMTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4 MzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQBLa4QMA0GCSqGSIb3DQEBCwUAA4IBAQBykIQf3G3c GhEo2fZhCRt2xnOww0nAx2c3eS3Mlvpda6cWq3QtiICLBCA0S0V+fngKy9fi2Cec vEt/EXoqtlAfXRnpRtn61SWebMUyANIE99lXwruugpt53Tqd5IhjyJmG3wac+JNR ux7/sYPO6lauktAMNZTt+Ji5l8VnLvt6fFxXhwwVQauyDHOSs9M5yHR9dxCzuvZC d/33DoSDpQrxmiNlwRZid1CJMvYbcVlTru9wzgUKpo1ul6xYrYbN7sIOzNEh5/Xn yJ7uppueYiNYHDORu3s054YOzC+JCre8C1d38/x6UjNvH0LfD3eney4soufodfgD Opa1nWuOz1/X -----END CERTIFICATE-----Generated at Sat Dec 6 15:29:01 2025 by rpki-client