This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e32382e302f32342d3234203d3e203532353837.roa File: 3137302e37382e32382e302f32342d3234203d3e203532353837.roa (raw, json) Hash identifier: fmyiRBx3ikOjVKsXkQ8cpvxr8wjsvyIXdzNlU8vv5+g= Subject key identifier: EF:51:DA:10:8E:27:D5:A4:9B:0C:4B:D7:72:E5:06:07:7B:CB:2F:80 Certificate issuer: /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96 Certificate serial: 2D99F0585916F85610B5EECD8D935D47A3FC318D Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer Subject info access: rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e32382e302f32342d3234203d3e203532353837.roa Signing time: Mon 29 Dec 2025 19:33:40 +0000 ROA not before: Mon 29 Dec 2025 19:28:40 +0000 ROA not after: Mon 28 Dec 2026 19:33:40 +0000 asID: 52587 IP address blocks: 170.78.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 16:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:99:f0:58:59:16:f8:56:10:b5:ee:cd:8d:93:5d:47:a3:fc:31:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96 Validity Not Before: Dec 29 19:28:40 2025 GMT Not After : Dec 28 19:33:40 2026 GMT Subject: CN=EF51DA108E27D5A49B0C4BD772E506077BCB2F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:5b:60:05:4b:dd:a9:62:79:d7:43:ef:0f: 65:eb:92:36:0c:f2:fe:2a:a4:75:44:ea:70:b8:ea: f9:07:0b:63:42:07:1a:2a:66:23:98:c2:a7:c8:2b: ae:24:8b:67:12:36:f4:f0:ab:46:e2:2f:3f:f9:6f: 17:75:d7:7d:87:f9:5e:78:29:f1:c5:15:aa:c1:a4: b9:a8:c7:25:6d:2a:3e:0c:39:58:56:80:86:36:6f: a4:07:b3:8a:51:89:91:e3:53:bd:9e:33:98:51:67: 0e:0f:b9:38:32:42:4f:4c:3c:95:3b:7e:4a:89:6d: 8c:85:25:6b:f2:a5:59:ac:c1:fe:b9:9d:3b:c3:28: b9:b4:11:0b:71:f9:81:73:1d:7d:75:03:30:f5:4f: f3:b3:12:79:68:a4:d6:39:94:c8:33:7e:fc:01:68: 35:b3:e0:98:9b:95:42:22:0f:dd:15:ea:00:11:9c: ad:bd:db:3b:f4:a0:c7:d4:ed:24:a8:65:e1:b5:3a: ef:5d:b7:06:0d:ff:8c:85:6c:c7:59:93:a5:65:82: d6:94:ac:8b:69:29:c1:71:f3:43:64:8d:c5:00:e3: b0:70:ef:b5:70:ff:a5:f2:4e:4f:3c:f5:25:77:37: e2:09:75:f1:2d:4f:10:5f:62:1e:6a:d2:27:35:23: be:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:51:DA:10:8E:27:D5:A4:9B:0C:4B:D7:72:E5:06:07:7B:CB:2F:80 X509v3 Authority Key Identifier: keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e32382e302f32342d3234203d3e203532353837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.78.28.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:59:a5:05:12:33:56:ba:c7:ff:b2:d3:2e:9b:24:44:cb:6a: 9b:0b:40:9d:7f:a8:c2:29:7e:66:77:8c:59:e4:db:83:6c:ff: 66:81:da:98:86:ef:ff:f7:9e:bc:27:ad:d3:93:ea:2c:6a:48: 94:5d:eb:12:0b:6e:52:9b:b8:c2:56:f3:60:d9:54:b1:03:6e: 22:f8:47:32:cb:91:fe:04:3f:34:ed:e1:8e:ac:9c:d1:35:9e: bc:a3:b8:63:18:14:3c:30:d7:1c:4d:81:8b:14:d5:3b:f3:2b: 75:bd:b1:3d:97:b5:86:71:9a:9b:e8:ed:d0:73:8b:58:2b:ad: 52:86:cd:f9:81:e7:a4:f1:d0:8a:9c:57:57:53:c2:b7:a7:d2: 6a:47:ec:d6:3f:6f:92:1e:7f:81:91:f1:73:2a:f1:4a:ee:ec: 50:57:b0:d9:7a:45:ac:d2:7d:ba:68:ce:13:51:05:c6:d1:e0: 80:ba:d9:77:cf:9d:e1:01:91:28:e9:02:01:bb:44:97:ec:54: ea:94:ed:e7:f4:9b:28:30:25:3a:24:80:f2:85:fb:3f:50:66: cd:04:45:1a:40:1c:28:c3:af:70:e1:38:55:d2:4e:f3:07:4b: 1c:20:15:a1:81:c8:67:92:5f:77:04:41:72:d4:77:b4:30:54: 41:75:99:52 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIULZnwWFkW+FYQte7NjZNdR6P8MY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENGM0RBREJGNkY0MUREQkZCMjIxMDdENjgyQkFCNDg1 OUVCRUY5NjAeFw0yNTEyMjkxOTI4NDBaFw0yNjEyMjgxOTMzNDBaMDMxMTAvBgNV BAMTKEVGNTFEQTEwOEUyN0Q1QTQ5QjBDNEJENzcyRTUwNjA3N0JDQjJGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm41tgBUvdqWJ510PvD2XrkjYM 8v4qpHVE6nC46vkHC2NCBxoqZiOYwqfIK64ki2cSNvTwq0biLz/5bxd1132H+V54 KfHFFarBpLmoxyVtKj4MOVhWgIY2b6QHs4pRiZHjU72eM5hRZw4PuTgyQk9MPJU7 fkqJbYyFJWvypVmswf65nTvDKLm0EQtx+YFzHX11AzD1T/OzEnlopNY5lMgzfvwB aDWz4JiblUIiD90V6gARnK292zv0oMfU7SSoZeG1Ou9dtwYN/4yFbMdZk6VlgtaU rItpKcFx80NkjcUA47Bw77Vw/6XyTk889SV3N+IJdfEtTxBfYh5q0ic1I75jAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU71HaEI4n1aSbDEvXcuUGB3vLL4AwHwYDVR0j BBgwFoAUDPPa2/b0Hdv7IhB9aCurSFnr75YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXJBeXRxWkgxdGlFVFdhbWo4WTgxVk1uUjlDVXB5V3M3U1o1c0Zad2dT a00vMS8wQ0YzREFEQkY2RjQxRERCRkIyMjEwN0Q2ODJCQUI0ODU5RUJFRjk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDRjNEQURCRjZGNDFEREJG QjIyMTA3RDY4MkJBQjQ4NTlFQkVGOTYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlyQXl0cVpIMXRpRVRXYW1qOFk4MVZNblI5Q1VweVdzN1NaNXNGWndnU2tNLzEv MzEzNzMwMmUzNzM4MmUzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM1 MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAKpOHDANBgkqhkiG9w0BAQsFAAOCAQEAP1mlBRIzVrrH /7LTLpskRMtqmwtAnX+owil+ZneMWeTbg2z/ZoHamIbv//eevCet05PqLGpIlF3r EgtuUpu4wlbzYNlUsQNuIvhHMsuR/gQ/NO3hjqyc0TWevKO4YxgUPDDXHE2BixTV O/Mrdb2xPZe1hnGam+jt0HOLWCutUobN+YHnpPHQipxXV1PCt6fSakfs1j9vkh5/ gZHxcyrxSu7sUFew2XpFrNJ9umjOE1EFxtHggLrZd8+d4QGRKOkCAbtEl+xU6pTt 5/SbKDAlOiSA8oX7P1BmzQRFGkAcKMOvcOE4VdJO8wdLHCAVoYHIZ5JfdwRBctR3 tDBUQXWZUg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:55:05 2026 by rpki-client