This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/AS28165.roa File: AS28165.roa (raw, json) Hash identifier: x106vdNIeVcrfBWvC/jy9L5WhfZBpipECUg8M5quVDA= Subject key identifier: 0A:63:4A:17:20:06:DB:72:FA:E4:9C:23:A8:21:9D:E9:A1:80:9C:82 Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Certificate serial: 6EFD0FF3F7207D2A90872D205CB871BA437DEAD3 Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/AS28165.roa Signing time: Fri 26 Dec 2025 22:15:31 +0000 ROA not before: Fri 26 Dec 2025 22:10:31 +0000 ROA not after: Fri 25 Dec 2026 22:15:31 +0000 asID: 28165 IP address blocks: 131.255.100.0/22 maxlen: 22 131.255.100.0/23 maxlen: 23 131.255.100.0/24 maxlen: 24 131.255.101.0/24 maxlen: 24 131.255.102.0/23 maxlen: 23 131.255.102.0/24 maxlen: 24 131.255.103.0/24 maxlen: 24 138.59.148.0/23 maxlen: 23 138.59.148.0/24 maxlen: 24 138.59.149.0/24 maxlen: 24 138.204.92.0/22 maxlen: 22 138.204.92.0/23 maxlen: 23 138.204.92.0/24 maxlen: 24 138.204.93.0/24 maxlen: 24 138.204.94.0/23 maxlen: 23 138.204.94.0/24 maxlen: 24 138.204.95.0/24 maxlen: 24 170.81.170.0/23 maxlen: 23 170.81.170.0/24 maxlen: 24 170.81.171.0/24 maxlen: 24 177.184.196.0/22 maxlen: 22 177.184.196.0/24 maxlen: 24 177.184.197.0/24 maxlen: 24 177.184.198.0/24 maxlen: 24 177.184.199.0/24 maxlen: 24 177.184.200.0/22 maxlen: 22 177.184.200.0/24 maxlen: 24 177.184.201.0/24 maxlen: 24 177.184.202.0/24 maxlen: 24 177.184.203.0/24 maxlen: 24 177.222.16.0/21 maxlen: 21 177.222.16.0/24 maxlen: 24 177.222.17.0/24 maxlen: 24 177.222.18.0/24 maxlen: 24 177.222.19.0/24 maxlen: 24 177.222.20.0/24 maxlen: 24 177.222.21.0/24 maxlen: 24 177.222.22.0/24 maxlen: 24 177.222.23.0/24 maxlen: 24 177.222.28.0/22 maxlen: 22 177.222.28.0/24 maxlen: 24 177.222.29.0/24 maxlen: 24 177.222.30.0/24 maxlen: 24 177.222.31.0/24 maxlen: 24 187.62.208.0/20 maxlen: 20 187.62.208.0/21 maxlen: 21 187.62.208.0/24 maxlen: 24 187.62.209.0/24 maxlen: 24 187.62.210.0/24 maxlen: 24 187.62.211.0/24 maxlen: 24 187.62.212.0/24 maxlen: 24 187.62.213.0/24 maxlen: 24 187.62.214.0/24 maxlen: 24 187.62.215.0/24 maxlen: 24 187.62.216.0/21 maxlen: 21 187.62.216.0/24 maxlen: 24 187.62.217.0/24 maxlen: 24 187.62.218.0/24 maxlen: 24 187.62.219.0/24 maxlen: 24 187.62.220.0/24 maxlen: 24 187.62.221.0/24 maxlen: 24 187.62.222.0/24 maxlen: 24 187.62.223.0/24 maxlen: 24 191.240.144.0/21 maxlen: 21 191.240.144.0/24 maxlen: 24 191.240.145.0/24 maxlen: 24 191.240.146.0/24 maxlen: 24 191.240.147.0/24 maxlen: 24 191.240.148.0/24 maxlen: 24 191.240.149.0/24 maxlen: 24 191.240.150.0/24 maxlen: 24 191.240.151.0/24 maxlen: 24 191.240.152.0/22 maxlen: 22 191.240.152.0/24 maxlen: 24 191.240.153.0/24 maxlen: 24 191.240.154.0/24 maxlen: 24 191.240.155.0/24 maxlen: 24 191.240.156.0/23 maxlen: 23 191.240.156.0/24 maxlen: 24 191.240.157.0/24 maxlen: 24 200.229.228.0/22 maxlen: 22 200.229.228.0/24 maxlen: 24 200.229.229.0/24 maxlen: 24 200.229.230.0/24 maxlen: 24 200.229.231.0/24 maxlen: 24 200.229.232.0/21 maxlen: 21 200.229.232.0/24 maxlen: 24 200.229.233.0/24 maxlen: 24 200.229.234.0/24 maxlen: 24 200.229.235.0/24 maxlen: 24 200.229.236.0/24 maxlen: 24 200.229.237.0/24 maxlen: 24 200.229.238.0/24 maxlen: 24 200.229.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 19:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fd:0f:f3:f7:20:7d:2a:90:87:2d:20:5c:b8:71:ba:43:7d:ea:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Validity Not Before: Dec 26 22:10:31 2025 GMT Not After : Dec 25 22:15:31 2026 GMT Subject: CN=0A634A172006DB72FAE49C23A8219DE9A1809C82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:30:92:b9:d9:ae:c9:c4:19:6e:01:82:15:e7: bb:21:6a:49:7f:0e:8c:97:2a:11:32:d9:e3:e9:c9: 97:99:a8:2f:b1:eb:2a:64:32:8a:57:d3:46:46:e8: b3:f4:89:61:7f:7a:c0:4f:2b:1c:b9:91:98:58:6a: 76:0b:06:02:3c:61:3b:b8:b7:51:5b:9f:82:97:6c: 2d:c9:09:9b:21:d5:e9:6e:9c:43:85:30:50:4b:96: 48:38:c3:4d:d2:68:c6:cb:97:17:5c:03:8d:62:15: 8e:53:5c:3f:28:99:46:ee:97:73:ae:1b:d6:33:33: 8b:64:97:a6:1a:b4:62:bb:21:6e:e7:09:60:8a:1d: 58:78:76:19:be:e4:c6:44:89:cf:c3:d0:1d:c4:6b: 57:cd:24:90:a6:19:9d:65:7b:73:2b:49:72:3e:34: 57:35:d9:f7:2c:cd:6a:e3:69:c4:de:4b:bf:97:3d: 71:49:bf:de:13:2b:7e:cd:7f:27:61:9e:d6:e3:17: bb:3f:d9:94:b1:c9:f4:39:75:e5:e2:43:fe:e9:6b: 9d:8d:f9:d4:b5:15:7c:5c:10:ce:c7:1b:e0:21:74: d0:83:92:b7:41:75:5c:bf:67:da:ef:87:01:6e:0b: d7:af:11:5b:80:72:71:21:2e:1a:f1:ec:25:51:ac: 59:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:63:4A:17:20:06:DB:72:FA:E4:9C:23:A8:21:9D:E9:A1:80:9C:82 X509v3 Authority Key Identifier: keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/AS28165.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.100.0/22 138.59.148.0/23 138.204.92.0/22 170.81.170.0/23 177.184.196.0-177.184.203.255 177.222.16.0/21 177.222.28.0/22 187.62.208.0/20 191.240.144.0-191.240.157.255 200.229.228.0-200.229.239.255 Signature Algorithm: sha256WithRSAEncryption 2e:0b:29:92:7f:65:6b:49:83:aa:2e:79:ce:98:85:7b:c0:d9: d5:14:33:85:34:7f:de:1b:7a:7d:83:f3:86:a0:67:98:ff:a7: 1f:f9:82:45:d5:7e:dd:e0:a2:20:5e:60:1a:bc:73:7e:e7:92: 0e:48:04:4e:90:f9:2d:bf:14:69:42:e8:d1:6d:63:73:19:8b: 9e:52:b4:b2:04:2d:8c:50:5b:62:d0:91:fd:a0:0a:87:e5:cb: 1b:92:6e:d3:32:b3:5a:32:f6:85:f8:9f:02:fc:41:56:24:ae: 23:5f:79:f9:12:30:43:a9:93:a4:d2:61:04:1e:bb:6d:ca:91: 36:69:db:8f:50:19:4e:92:63:f2:6c:26:97:c8:e6:b9:d4:ab: 23:a9:84:b4:6f:fe:5a:6e:6b:70:a4:16:c3:57:b9:0a:ef:db: 27:c3:dc:b5:4e:cc:33:95:5f:31:6c:26:a5:f6:39:a2:71:9f: 6c:05:2e:eb:08:cd:7a:d5:37:cd:cd:f6:51:61:ba:bb:ad:9b: 71:ab:18:4d:a8:64:1a:d2:04:2d:c4:72:d8:aa:c0:e9:9a:dc: ca:8c:75:38:eb:20:42:c3:51:06:df:c0:56:15:16:68:23:cc: 18:36:49:10:76:fa:a1:67:30:73:1e:c2:1a:5e:04:5c:3b:29: a9:0c:e6:9e -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUbv0P8/cgfSqQhy0gXLhxukN96tMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1 NUNCQzIwNzAeFw0yNTEyMjYyMjEwMzFaFw0yNjEyMjUyMjE1MzFaMDMxMTAvBgNV BAMTKDBBNjM0QTE3MjAwNkRCNzJGQUU0OUMyM0E4MjE5REU5QTE4MDlDODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNMJK52a7JxBluAYIV57shakl/ DoyXKhEy2ePpyZeZqC+x6ypkMopX00ZG6LP0iWF/esBPKxy5kZhYanYLBgI8YTu4 t1Fbn4KXbC3JCZsh1elunEOFMFBLlkg4w03SaMbLlxdcA41iFY5TXD8omUbul3Ou G9YzM4tkl6YatGK7IW7nCWCKHVh4dhm+5MZEic/D0B3Ea1fNJJCmGZ1le3MrSXI+ NFc12fcszWrjacTeS7+XPXFJv94TK37NfydhntbjF7s/2ZSxyfQ5deXiQ/7pa52N +dS1FXxcEM7HG+AhdNCDkrdBdVy/Z9rvhwFuC9evEVuAcnEhLhrx7CVRrFmRAgMB AAGjggJpMIICZTAdBgNVHQ4EFgQUCmNKFyAG23L65JwjqCGd6aGAnIIwHwYDVR0j BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BcFBw WFJSY3VHOVExbVhxeHpReEhLbzN1cDhXVXQzdDRWNEVteXh0RG5Kai8wL0FTMjgx NjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwbQYIKwYBBQUHAQcBAf8E XjBcMFoEAgABMFQDBAKD/2QDBAGKO5QDBAKKzFwDBAGqUaowDAMEArG4xAMEArG4 yAMEA7HeEAMEArHeHAMEBLs+0DAMAwQEv/CQAwQBv/CcMAwDBALI5eQDBATI5eAw DQYJKoZIhvcNAQELBQADggEBAC4LKZJ/ZWtJg6ouec6YhXvA2dUUM4U0f94ben2D 84agZ5j/px/5gkXVft3goiBeYBq8c37nkg5IBE6Q+S2/FGlC6NFtY3MZi55StLIE LYxQW2LQkf2gCoflyxuSbtMys1oy9oX4nwL8QVYkriNfefkSMEOpk6TSYQQeu23K kTZp249QGU6SY/JsJpfI5rnUqyOphLRv/lpua3CkFsNXuQrv2yfD3LVOzDOVXzFs JqX2OaJxn2wFLusIzXrVN83N9lFhurutm3GrGE2oZBrSBC3EctiqwOma3MqMdTjr IELDUQbfwFYVFmgjzBg2SRB2+qFnMHMewhpeBFw7KakM5p4= -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:55 2026 by rpki-client