This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/34352e37312e3130382e302f32322d3332203d3e20323637363134.roa File: 34352e37312e3130382e302f32322d3332203d3e20323637363134.roa (raw, json) Hash identifier: +9i5baoQ76LPHXat54IeXbmPwQVh5eZtKk1FYvLeE24= Subject key identifier: D0:C2:00:71:49:74:9B:BF:AD:F9:8C:C7:0E:1A:2C:80:12:EC:E5:A4 Certificate issuer: /CN=2C81EC9836B1F0AFD457980B96A9DDF3A60D681B Certificate serial: 66003FD66A5F58E5EF965CEF8E115435BAC0EA25 Authority key identifier: 2C:81:EC:98:36:B1:F0:AF:D4:57:98:0B:96:A9:DD:F3:A6:0D:68:1B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C81EC9836B1F0AFD457980B96A9DDF3A60D681B.cer Subject info access: rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/34352e37312e3130382e302f32322d3332203d3e20323637363134.roa Signing time: Fri 23 Jan 2026 15:20:39 +0000 ROA not before: Fri 23 Jan 2026 15:15:39 +0000 ROA not after: Fri 22 Jan 2027 15:20:39 +0000 asID: 267614 IP address blocks: 45.71.108.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/2C81EC9836B1F0AFD457980B96A9DDF3A60D681B.crl rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/2C81EC9836B1F0AFD457980B96A9DDF3A60D681B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C81EC9836B1F0AFD457980B96A9DDF3A60D681B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Jan 2026 00:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:00:3f:d6:6a:5f:58:e5:ef:96:5c:ef:8e:11:54:35:ba:c0:ea:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C81EC9836B1F0AFD457980B96A9DDF3A60D681B Validity Not Before: Jan 23 15:15:39 2026 GMT Not After : Jan 22 15:20:39 2027 GMT Subject: CN=D0C2007149749BBFADF98CC70E1A2C8012ECE5A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:d2:31:e2:b0:58:99:21:21:33:6f:7d:67: b0:bd:72:0b:af:ae:a4:d2:23:ac:b4:3f:e7:55:57: 1e:f4:81:b1:4d:7f:a2:81:81:86:1a:e4:42:9a:56: e3:0e:1b:2c:c6:64:ec:9b:1f:e4:3c:5d:6e:b1:ff: 16:8c:9c:a3:43:d9:cf:a6:47:ba:b5:f3:09:19:13: 58:8e:f1:1f:f1:ae:36:a2:b0:dd:09:5a:39:ed:9b: 37:90:98:6d:0a:ea:e4:20:e5:ad:7f:c9:33:4b:63: 76:85:ba:5a:67:aa:5c:8d:18:04:c9:91:7b:6d:29: ce:09:b9:10:7c:85:da:35:35:b2:c8:7b:ad:1b:d8: be:2a:41:34:96:a3:0f:1f:97:38:42:ae:6a:15:62: fe:86:c4:aa:4e:a6:76:5f:0e:54:88:f2:3f:08:54: 96:ca:8f:66:db:86:1b:46:91:7c:3e:52:4f:56:e7: 70:2e:27:3c:e9:f9:6c:63:1f:65:01:26:9a:56:65: 23:37:66:a9:42:36:2c:24:5c:7a:18:e4:3b:eb:ad: c6:47:57:78:1f:28:4b:11:a0:4d:b3:bf:79:b0:cb: f7:f8:bf:04:72:4c:4c:2e:26:bc:1d:37:41:fe:f7: b8:f8:20:dc:c6:3d:16:28:74:48:ed:a5:d7:5f:47: 62:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C2:00:71:49:74:9B:BF:AD:F9:8C:C7:0E:1A:2C:80:12:EC:E5:A4 X509v3 Authority Key Identifier: keyid:2C:81:EC:98:36:B1:F0:AF:D4:57:98:0B:96:A9:DD:F3:A6:0D:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/2C81EC9836B1F0AFD457980B96A9DDF3A60D681B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C81EC9836B1F0AFD457980B96A9DDF3A60D681B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/34352e37312e3130382e302f32322d3332203d3e20323637363134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.108.0/22 Signature Algorithm: sha256WithRSAEncryption ae:b2:be:34:a0:9f:bc:50:e2:34:a6:41:26:81:00:09:f0:dd: fb:78:00:b0:86:1c:8a:df:ee:22:be:08:71:d9:2c:44:e0:d1: d5:2d:02:34:08:f1:7d:51:0f:10:da:8e:e9:5c:52:2a:0b:ad: 6e:e0:25:05:0d:94:25:98:6d:56:35:58:53:3a:7d:9d:d9:f0: df:fd:66:3e:11:c6:fd:f9:4a:e8:f0:21:8e:a8:ec:4a:2d:98: df:25:23:53:33:2f:a9:6e:05:bf:dd:08:4d:1c:8d:ea:45:e1: d1:31:39:60:25:dc:cc:78:d8:26:20:01:8e:cb:bf:ae:93:c7: e8:d6:27:f9:99:41:ab:21:0f:89:56:a4:20:f1:b2:04:d9:27: de:72:58:53:d8:cc:fb:69:07:19:96:e8:12:47:d5:d7:7c:54: 4e:23:6d:72:52:b8:87:c2:e8:53:2f:12:8a:65:6b:54:ea:8a: 8a:b4:f3:7f:aa:44:33:11:dd:aa:ec:41:f7:61:da:9c:44:4c: e3:96:2c:6c:4a:ad:14:da:b3:0a:86:ee:69:fe:35:29:61:cc: ff:af:d8:4d:cf:dc:31:7d:78:76:9a:79:3b:7f:19:77:d3:52: 77:51:4e:06:85:3f:71:4c:2a:82:cd:46:47:33:45:4b:30:12: 79:5f:ee:4d -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUZgA/1mpfWOXvllzvjhFUNbrA6iUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM4MUVDOTgzNkIxRjBBRkQ0NTc5ODBCOTZBOURERjNB NjBENjgxQjAeFw0yNjAxMjMxNTE1MzlaFw0yNzAxMjIxNTIwMzlaMDMxMTAvBgNV BAMTKEQwQzIwMDcxNDk3NDlCQkZBREY5OENDNzBFMUEyQzgwMTJFQ0U1QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8o9Ix4rBYmSEhM299Z7C9cguv rqTSI6y0P+dVVx70gbFNf6KBgYYa5EKaVuMOGyzGZOybH+Q8XW6x/xaMnKND2c+m R7q18wkZE1iO8R/xrjaisN0JWjntmzeQmG0K6uQg5a1/yTNLY3aFulpnqlyNGATJ kXttKc4JuRB8hdo1NbLIe60b2L4qQTSWow8flzhCrmoVYv6GxKpOpnZfDlSI8j8I VJbKj2bbhhtGkXw+Uk9W53AuJzzp+WxjH2UBJppWZSM3ZqlCNiwkXHoY5DvrrcZH V3gfKEsRoE2zv3mwy/f4vwRyTEwuJrwdN0H+97j4INzGPRYodEjtpddfR2LNAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU0MIAcUl0m7+t+YzHDhosgBLs5aQwHwYDVR0j BBgwFoAULIHsmDax8K/UV5gLlqnd86YNaBswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1NNNzJ6Y2hXNHRhbmlveGJweTc4UFJkSmduc2lOTkpja0JGdEdhMTFi SEIvMC8yQzgxRUM5ODM2QjFGMEFGRDQ1Nzk4MEI5NkE5RERGM0E2MEQ2ODFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDODFFQzk4MzZCMUYwQUZE NDU3OTgwQjk2QTlEREYzQTYwRDY4MUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NTTTcyemNoVzR0YW5pb3hicHk3OFBSZEpnbnNpTk5KY2tCRnRHYTExYkhCLzAv MzQzNTJlMzczMTJlMzEzMDM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM3 MzYzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLUdsMA0GCSqGSIb3DQEBCwUAA4IBAQCusr40oJ+8 UOI0pkEmgQAJ8N37eACwhhyK3+4ivghx2SxE4NHVLQI0CPF9UQ8Q2o7pXFIqC61u 4CUFDZQlmG1WNVhTOn2d2fDf/WY+Ecb9+Uro8CGOqOxKLZjfJSNTMy+pbgW/3QhN HI3qReHRMTlgJdzMeNgmIAGOy7+uk8fo1if5mUGrIQ+JVqQg8bIE2SfeclhT2Mz7 aQcZlugSR9XXfFROI21yUriHwuhTLxKKZWtU6oqKtPN/qkQzEd2q7EH3YdqcREzj lixsSq0U2rMKhu5p/jUpYcz/r9hNz9wxfXh2mnk7fxl301J3UU4GhT9xTCqCzUZH M0VLMBJ5X+5N -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:40 2026 by rpki-client