This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a316436383a3a2f33322d3438203d3e20323632393037.roa
File: 323830343a316436383a3a2f33322d3438203d3e20323632393037.roa (raw, json)
Hash identifier: ub+s8KgziIA1uqEe1X9HV4N2r6W4/9JFOW73P2InCpY=
Subject key identifier: EF:59:92:9E:A1:8E:77:39:8E:57:6D:DC:3D:6D:BA:04:8C:63:3B:EC
Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial: 37E9EA06BCAF455216236516B5562B20E2577385
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a316436383a3a2f33322d3438203d3e20323632393037.roa
Signing time: Mon 19 Jan 2026 17:32:56 +0000
ROA not before: Mon 19 Jan 2026 17:27:56 +0000
ROA not after: Mon 18 Jan 2027 17:32:56 +0000
asID: 262907
IP address blocks: 2804:1d68::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 18:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e9:ea:06:bc:af:45:52:16:23:65:16:b5:56:2b:20:e2:57:73:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Validity
Not Before: Jan 19 17:27:56 2026 GMT
Not After : Jan 18 17:32:56 2027 GMT
Subject: CN=EF59929EA18E77398E576DDC3D6DBA048C633BEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:ad:0d:50:a7:70:44:4b:5f:3f:22:5f:d6:
1b:b6:52:aa:1c:ea:bb:15:9c:8e:a8:67:56:d8:c6:
29:79:56:fb:86:67:33:26:ee:b0:b6:9e:98:de:b5:
fe:53:bc:b8:57:53:a0:bc:67:b2:13:77:ff:a2:6b:
ed:29:7f:40:a0:1b:43:05:12:53:f9:84:7d:bc:58:
29:f0:b9:f3:93:d5:4c:26:f5:26:2c:df:8f:9c:98:
bf:2c:06:cc:cb:fc:8f:fa:5b:f3:ce:d2:d4:6e:2e:
96:c4:7e:cd:1e:ae:84:f9:de:53:85:c9:98:66:b9:
a9:6b:3f:a5:75:fa:b5:5d:ac:89:7f:04:6c:55:16:
9d:28:31:e0:bd:14:81:9e:6f:bd:2a:8c:27:d8:44:
16:3d:a3:2f:7e:2b:f8:e7:b0:d9:fa:57:a2:a8:b1:
dd:b5:d3:c5:31:90:09:f8:ca:65:d6:a4:68:57:63:
9a:b2:47:81:14:d5:4d:cf:4a:9c:ca:ce:58:6a:d9:
65:92:b9:ac:7f:73:52:9e:ae:59:ed:10:e2:6a:ab:
57:7e:b8:b9:e6:b3:1c:78:3b:b6:9a:4a:0f:76:fd:
ca:14:6e:50:3f:74:f7:69:68:13:7a:e4:95:a5:5e:
a5:2f:f9:5e:93:9f:2c:ec:aa:3c:1e:6d:be:38:53:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:59:92:9E:A1:8E:77:39:8E:57:6D:DC:3D:6D:BA:04:8C:63:3B:EC
X509v3 Authority Key Identifier:
keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a316436383a3a2f33322d3438203d3e20323632393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1d68::/32
Signature Algorithm: sha256WithRSAEncryption
27:cc:85:10:c4:b7:80:fc:62:3d:fb:b2:0c:cd:b7:0a:d3:d2:
35:2e:c1:4d:03:f8:38:26:0d:43:6c:89:68:2f:63:7e:1b:1e:
31:e6:b3:3a:ec:2e:d1:ad:b6:e8:f8:3f:8c:05:a1:9e:c7:4b:
ed:30:2a:4f:8d:10:bd:a9:e2:88:4b:67:22:6e:7c:6e:58:3c:
b7:eb:12:b5:a5:0c:f2:db:9f:46:7a:6a:94:e4:b9:14:33:67:
f0:51:57:39:26:4b:d9:b5:66:a0:3e:2c:6c:4d:aa:44:d9:a4:
c7:0e:e3:af:ee:64:46:3c:f7:29:b4:77:10:a5:4a:57:9e:85:
7e:9e:e9:c8:8d:69:a9:b8:1f:bb:21:01:4b:d5:df:46:1e:51:
aa:7f:f0:b3:32:59:34:e9:82:ea:a4:e3:9b:c9:ed:89:37:39:
ce:fa:b0:6f:61:34:99:1f:54:e0:95:d0:3b:fc:ef:3b:50:c1:
f7:4f:ff:15:bf:dc:24:57:09:ad:5b:d7:bb:09:a3:f4:61:a7:
fd:dd:8b:79:aa:9e:16:52:fd:c1:4c:6b:b9:0b:f7:f7:e4:78:
4d:00:81:a1:10:86:bd:9b:a0:1c:d6:08:65:de:d5:5e:d5:21:
97:0a:dd:08:f0:48:9b:c3:5f:15:ea:ed:c7:6f:b1:9a:c3:d9:
33:00:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:32:38 2026 by rpki-client