This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3230392e302f32342d3234203d3e20323633323930.roa
File: 3137302e3135302e3230392e302f32342d3234203d3e20323633323930.roa (raw, json)
Hash identifier: QC6JlhziQzqcw2FGX9bdDV7NXilAbiiEzjpiF1xEM9Y=
Subject key identifier: E1:F7:6F:3D:52:D2:5C:F1:54:5F:52:27:8F:FD:E1:C2:8F:DF:D9:8F
Certificate issuer: /CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Certificate serial: 5E2A56196E0A607797FB61D06B970FEB1D5F091B
Authority key identifier: B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3230392e302f32342d3234203d3e20323633323930.roa
Signing time: Mon 17 Nov 2025 17:12:54 +0000
ROA not before: Mon 17 Nov 2025 17:07:54 +0000
ROA not after: Mon 16 Nov 2026 17:12:54 +0000
asID: 263290
IP address blocks: 170.150.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:2a:56:19:6e:0a:60:77:97:fb:61:d0:6b:97:0f:eb:1d:5f:09:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Validity
Not Before: Nov 17 17:07:54 2025 GMT
Not After : Nov 16 17:12:54 2026 GMT
Subject: CN=E1F76F3D52D25CF1545F52278FFDE1C28FDFD98F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a2:98:18:35:97:d6:0a:2e:02:e5:c6:3c:52:
a4:f5:7c:43:d5:c7:07:6a:4b:cc:4f:77:f1:a8:b1:
57:55:f6:ff:23:df:7f:a7:c6:e8:67:84:d6:16:6a:
9c:c3:90:bf:58:2a:cd:2c:54:ff:f5:72:e4:c7:1b:
6b:0f:b2:ab:75:f0:0e:77:39:3a:18:c8:4d:4c:da:
a3:3b:13:7d:53:66:09:6f:c1:af:f1:26:ef:77:09:
00:15:bd:bd:49:1d:90:2d:d2:3e:d5:22:96:5b:1d:
f9:a8:b3:03:8c:c6:e7:05:73:d7:2f:80:f0:d6:f3:
3f:e6:e8:f4:14:00:e2:d2:82:72:39:4e:bd:63:38:
8e:37:1a:dd:dc:a3:21:e8:53:1d:1b:de:2c:34:e4:
2e:b3:8f:c8:dc:35:c8:14:ba:a6:0c:c7:c1:d5:29:
96:27:3f:6d:dd:a6:d0:d1:11:55:8f:ec:f3:4e:67:
df:0b:c5:d0:54:84:41:37:3e:e9:02:54:9c:06:f3:
69:4a:75:13:23:b7:8b:d0:d2:15:da:b1:46:5b:a7:
20:3e:26:4e:50:9d:a9:9e:59:7b:1a:c8:4d:29:3f:
4d:be:a4:1c:3f:3e:5e:64:f6:75:bd:92:4d:48:34:
f0:fb:93:2c:da:6a:d9:a0:f2:02:24:48:dd:1b:5b:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F7:6F:3D:52:D2:5C:F1:54:5F:52:27:8F:FD:E1:C2:8F:DF:D9:8F
X509v3 Authority Key Identifier:
keyid:B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/3137302e3135302e3230392e302f32342d3234203d3e20323633323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.209.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:46:f2:50:84:b8:88:4a:ae:93:3d:b7:14:48:1e:e1:5d:06:
f2:a3:dc:ef:4e:a6:72:b7:8f:aa:2e:36:9e:23:00:94:fa:ef:
50:73:0d:53:f4:0e:3b:70:a3:28:80:c9:00:a8:c7:fe:e5:3e:
fb:de:53:80:74:fa:26:af:d7:f2:17:48:3c:04:0c:95:10:d9:
ab:a0:5f:52:90:2f:f5:96:47:52:7d:55:2a:47:5a:3e:d6:84:
85:0d:f0:16:6a:fc:45:2b:a1:78:70:0e:0d:cf:20:fd:54:f7:
92:40:18:a7:28:c8:8b:62:b9:cf:e0:3c:c7:65:e1:5d:3b:a3:
2c:fd:c5:22:f9:59:8b:64:87:13:e5:03:88:24:15:fc:86:63:
d9:8f:6c:51:18:bf:e5:9e:a5:4f:b8:51:1b:32:55:b9:2c:15:
25:5a:92:ce:46:12:7a:67:30:6e:32:c0:13:b0:f4:e0:e6:2d:
34:eb:e0:19:05:43:6a:6d:b2:ac:ae:b8:f8:f5:5f:cc:c3:48:
df:4d:26:fd:c8:58:fb:75:58:d1:52:bb:20:cc:3b:94:07:23:
35:eb:00:39:c6:a3:57:63:06:11:47:35:d9:cc:69:70:cd:38:
81:92:4c:4e:d6:fe:95:69:e3:45:fd:c7:c8:d9:19:91:b7:15:
72:22:7e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:44 2025 by rpki-client