This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/34352e3137302e3131322e302f32342d3234203d3e20323638313538.roa
File: 34352e3137302e3131322e302f32342d3234203d3e20323638313538.roa (raw, json)
Hash identifier: 7396WsIscU8WwdvrvgptZSrS+NH1AsP0euJbrIpnoRM=
Subject key identifier: 17:87:4C:02:24:DD:F5:ED:3D:E6:1A:9F:45:D5:5E:A2:13:76:CE:94
Certificate issuer: /CN=87FAD8F85A284E3B305BEB86544D2840BEA7FA2F
Certificate serial: 396DAFC02A1A6CB765D207F4D8C94A63B1C1779E
Authority key identifier: 87:FA:D8:F8:5A:28:4E:3B:30:5B:EB:86:54:4D:28:40:BE:A7:FA:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/34352e3137302e3131322e302f32342d3234203d3e20323638313538.roa
Signing time: Fri 16 Jan 2026 17:05:37 +0000
ROA not before: Fri 16 Jan 2026 17:00:37 +0000
ROA not after: Fri 15 Jan 2027 17:05:37 +0000
asID: 268158
IP address blocks: 45.170.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.crl
rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 20:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:6d:af:c0:2a:1a:6c:b7:65:d2:07:f4:d8:c9:4a:63:b1:c1:77:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87FAD8F85A284E3B305BEB86544D2840BEA7FA2F
Validity
Not Before: Jan 16 17:00:37 2026 GMT
Not After : Jan 15 17:05:37 2027 GMT
Subject: CN=17874C0224DDF5ED3DE61A9F45D55EA21376CE94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:5a:73:ae:08:b3:97:0a:3a:88:9d:64:77:
5e:df:97:98:3f:93:11:65:90:82:99:9a:9f:de:a0:
e9:47:87:fa:f0:32:bf:f6:87:6a:27:b8:ce:b6:6c:
07:d2:88:d0:2a:84:30:da:12:73:59:17:d7:c7:de:
f7:d8:da:a6:e2:46:0c:00:5b:58:94:7b:f8:74:c1:
90:b5:a3:32:a2:99:c7:b4:04:5e:f9:8f:fe:d7:ed:
07:a0:a6:8a:4a:b1:d9:b6:2e:3f:fa:11:b5:ec:8d:
bd:a4:3c:f1:cf:10:a7:b9:f5:10:37:a3:e9:58:ec:
41:d4:e5:5f:9f:e8:b6:e1:26:f8:82:06:b9:df:d1:
46:8d:81:d9:d7:d6:b2:20:1f:92:e6:c6:d1:27:a7:
8f:7e:91:50:ba:45:8b:94:f4:48:54:ac:ad:5e:18:
bc:5c:49:d3:85:f2:41:a4:6b:d2:ab:65:67:97:6e:
4d:56:42:a8:37:39:ba:1e:e8:4a:93:d7:3f:25:94:
2d:a1:57:37:94:5c:72:02:a3:d9:30:3b:f4:bd:56:
0e:84:b4:8b:bf:23:08:ca:fd:64:71:41:0b:9c:26:
f8:c6:ba:c4:bd:0e:b9:f4:3d:91:eb:b2:16:73:73:
f5:0d:15:5f:f6:3f:a7:63:84:d9:58:a7:6e:3d:aa:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:87:4C:02:24:DD:F5:ED:3D:E6:1A:9F:45:D5:5E:A2:13:76:CE:94
X509v3 Authority Key Identifier:
keyid:87:FA:D8:F8:5A:28:4E:3B:30:5B:EB:86:54:4D:28:40:BE:A7:FA:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/34352e3137302e3131322e302f32342d3234203d3e20323638313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.112.0/24
Signature Algorithm: sha256WithRSAEncryption
25:81:b9:ae:48:9c:b8:cf:fe:ee:d7:9f:6d:cb:48:51:f0:c9:
cd:e3:11:c8:fb:2d:8d:dd:4c:21:52:74:10:c4:83:11:c2:ad:
a1:6c:dc:a0:fc:f2:ef:39:89:3e:60:73:f5:24:28:ef:09:98:
fd:b4:af:48:1a:83:10:87:9b:a9:ed:9c:b0:bf:c4:3f:94:66:
e9:16:da:95:20:5b:42:2a:2d:c8:35:4a:b5:6f:17:ef:ef:f6:
ed:46:43:12:ec:26:22:b4:80:bb:3d:10:00:24:9c:05:1c:9a:
cf:af:96:fe:5d:a7:b2:9c:2e:a8:4f:04:19:98:09:78:c3:b2:
c3:e3:21:8a:ae:09:c8:f0:54:b1:da:a3:ef:6a:0a:b1:b5:d9:
24:98:fb:30:7d:3f:10:18:c9:d7:17:85:99:a0:b8:f4:99:e2:
87:62:61:46:ce:49:00:f1:34:86:b6:01:6a:8e:c5:bb:79:0b:
dd:a7:a5:e1:bb:ce:a8:c5:af:37:e1:63:e0:ec:03:0b:bf:c6:
3c:b7:99:9d:09:cb:6a:72:48:32:34:c5:37:d2:05:46:80:e1:
5c:49:4e:3a:76:06:0f:0c:1b:92:ce:b2:33:e9:cf:26:14:5b:
09:06:50:b9:38:f6:be:ab:3b:ac:44:86:65:ff:aa:8a:b6:03:
d6:81:e7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:23:12 2026 by rpki-client