This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a653230303a3a2f33392d3339203d3e20323633323930.roa
File: 323830343a313638383a653230303a3a2f33392d3339203d3e20323633323930.roa (raw, json)
Hash identifier: dv4u/H0AY9llOSrsPLEScV4SswvliUTOeG+exJBbV1Q=
Subject key identifier: 93:F6:27:55:2F:F5:74:CE:34:58:08:36:BA:6F:70:A6:C4:2A:36:34
Certificate issuer: /CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Certificate serial: 5A20315D36F4853CD9CF4A5BF19FAC611B6D2FAC
Authority key identifier: B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a653230303a3a2f33392d3339203d3e20323633323930.roa
Signing time: Mon 17 Nov 2025 17:12:55 +0000
ROA not before: Mon 17 Nov 2025 17:07:55 +0000
ROA not after: Mon 16 Nov 2026 17:12:55 +0000
asID: 263290
IP address blocks: 2804:1688:e200::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:20:31:5d:36:f4:85:3c:d9:cf:4a:5b:f1:9f:ac:61:1b:6d:2f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Validity
Not Before: Nov 17 17:07:55 2025 GMT
Not After : Nov 16 17:12:55 2026 GMT
Subject: CN=93F627552FF574CE34580836BA6F70A6C42A3634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9f:f1:51:a9:30:2b:10:f4:6f:d4:b5:14:07:
98:7e:1c:7a:6a:5c:a0:fb:75:f1:7f:87:1f:7e:2b:
54:97:be:85:d2:dd:b5:1c:31:41:11:36:e4:da:7b:
e1:32:36:85:8c:a3:af:6d:39:2a:49:32:35:af:0e:
42:cd:62:50:28:e4:0d:24:91:64:e8:fd:7e:44:12:
5f:b6:d2:a1:c2:a2:dd:e0:81:4f:dd:06:fe:fd:6a:
46:c0:d7:15:c3:e5:b8:f5:77:26:bb:e1:a1:42:d5:
bc:97:14:46:41:41:93:64:6f:3f:6b:c7:9e:ac:f5:
19:ea:a3:a1:d9:fe:ee:7c:68:b4:88:ef:e7:15:86:
67:24:33:c3:03:1a:a6:43:2c:46:65:c9:7e:e8:f7:
7c:b4:ff:3d:1e:72:cd:1e:e2:48:27:2f:ec:83:2f:
cf:ef:23:2c:a0:f2:25:02:73:25:93:e5:90:78:56:
b3:0a:66:7e:9f:2c:fd:75:7d:0a:5e:76:8b:be:54:
95:d8:91:f2:b2:5c:c2:5a:0f:b1:ec:90:30:d5:35:
36:52:90:20:7e:5b:41:dc:2e:89:43:7b:b8:a9:11:
1c:6a:b5:0f:68:df:a0:80:3b:a8:62:08:07:ea:23:
58:44:24:23:1d:0c:94:22:44:f8:00:12:d8:dc:bc:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F6:27:55:2F:F5:74:CE:34:58:08:36:BA:6F:70:A6:C4:2A:36:34
X509v3 Authority Key Identifier:
keyid:B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a653230303a3a2f33392d3339203d3e20323633323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1688:e200::/39
Signature Algorithm: sha256WithRSAEncryption
94:66:30:66:7c:22:3b:56:8a:fc:e1:d1:d6:a6:1a:7c:3a:cf:
ae:20:df:9f:81:59:0a:37:21:fd:31:59:1e:0a:27:bd:ff:c3:
ca:22:15:c4:2c:68:73:b1:b6:df:a3:76:72:39:a8:76:eb:30:
a5:fd:f9:5b:eb:8f:cc:24:8c:64:eb:d9:09:0c:df:f4:98:91:
99:fd:9c:2f:e4:e8:4d:47:1a:d8:22:3d:c0:99:32:65:8d:cd:
02:8d:c8:85:5a:2d:a0:33:19:35:ea:73:75:f3:b3:f4:07:61:
48:a9:b1:95:d9:9b:20:81:fd:06:60:e5:cb:d3:19:b5:00:3d:
6e:96:d2:10:72:1d:d7:a5:29:49:bf:5a:ea:49:bf:ba:8a:8c:
c4:66:7b:2c:60:0a:8c:8f:c7:3c:95:38:01:44:35:4d:ed:d6:
b5:ab:24:14:67:d1:6e:7b:bc:df:cc:c5:4e:98:1c:92:8d:4b:
0c:39:c0:64:50:43:41:80:20:23:33:e1:62:0c:33:62:1f:f2:
35:06:1c:8e:1e:3b:21:42:24:af:6d:af:fa:7b:87:6b:ef:57:
3e:46:72:14:53:d1:df:2e:15:7d:f3:5a:c3:e3:24:d0:69:6f:
99:dc:47:a2:f9:96:d5:bb:91:32:89:b8:a7:12:68:aa:0a:77:
3e:f6:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:46:21 2025 by rpki-client