This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3138372e38372e3135382e302f32342d3234203d3e20323636333839.roa
File: 3138372e38372e3135382e302f32342d3234203d3e20323636333839.roa (raw, json)
Hash identifier: I6jbstCGT3UfoVDsJfNfjhOfYAhHlRbmZZzJJfiBQ5g=
Subject key identifier: 20:0C:DB:5F:CD:09:E0:68:B3:7E:23:2B:0B:99:BB:CD:1C:E2:2E:19
Certificate issuer: /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial: 16D9F800DC530FBFD145D809306E4B7D2B3C22B8
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3138372e38372e3135382e302f32342d3234203d3e20323636333839.roa
Signing time: Wed 31 Dec 2025 12:08:49 +0000
ROA not before: Wed 31 Dec 2025 12:03:49 +0000
ROA not after: Wed 30 Dec 2026 12:08:49 +0000
asID: 266389
IP address blocks: 187.87.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 03:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d9:f8:00:dc:53:0f:bf:d1:45:d8:09:30:6e:4b:7d:2b:3c:22:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Validity
Not Before: Dec 31 12:03:49 2025 GMT
Not After : Dec 30 12:08:49 2026 GMT
Subject: CN=200CDB5FCD09E068B37E232B0B99BBCD1CE22E19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2b:e8:d6:64:67:3b:04:44:a7:48:81:68:f2:
1a:c3:fc:51:97:82:a3:09:22:58:bb:94:94:98:18:
d3:97:fd:e1:94:4b:3f:a3:e5:8d:9d:35:72:22:5f:
a5:9a:e8:aa:85:9e:f4:92:48:a3:57:23:f1:16:0c:
f4:30:c4:81:ee:06:ac:7f:83:68:54:bf:65:c5:5d:
eb:79:c3:73:54:d2:3c:af:c2:40:40:2d:66:58:58:
e6:a4:e2:94:64:95:63:2c:27:87:4e:96:8b:f3:fc:
9d:83:2a:cb:86:34:a0:9e:2b:10:8d:e2:14:74:46:
20:8f:16:37:75:e0:cd:09:0b:10:d0:a4:ad:c3:1c:
8e:24:e4:2c:df:c7:11:a6:26:73:d6:02:9b:4f:10:
f5:bf:1f:1b:d5:9b:2e:ed:04:07:99:8c:5d:15:0b:
81:d0:fe:70:09:cd:13:1c:ef:ca:86:33:64:e9:0d:
57:b5:2b:9f:e3:6d:20:99:91:39:1c:e9:c6:17:3a:
ae:4d:6b:4b:29:5a:74:c6:43:a0:18:90:1c:2a:3c:
47:43:c5:ad:3f:41:fd:12:c3:7f:cf:51:0c:a0:c2:
42:b6:0e:d9:e9:5f:1c:96:67:33:e7:23:cc:8c:26:
e2:ae:6c:a4:51:9b:98:65:e8:29:5d:ee:07:31:87:
9f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0C:DB:5F:CD:09:E0:68:B3:7E:23:2B:0B:99:BB:CD:1C:E2:2E:19
X509v3 Authority Key Identifier:
keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/3138372e38372e3135382e302f32342d3234203d3e20323636333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.87.158.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:cb:ee:e2:30:3f:46:d1:94:80:08:4c:ee:3c:06:e8:e8:20:
52:36:d1:49:43:98:e9:ba:da:24:64:a7:b1:81:d1:3d:c5:6d:
18:52:6e:6c:c6:08:6c:a3:08:e4:ad:59:43:ca:35:ed:e5:97:
9f:2d:52:c8:2e:64:b2:ed:36:8c:2e:46:6b:84:83:d5:c6:86:
3b:4c:4a:5c:55:32:0d:79:88:b0:4a:07:5b:3d:b7:2c:ee:6a:
81:53:c4:05:85:3a:e3:eb:86:a3:5d:7c:ea:5d:3d:42:06:1e:
6b:29:28:f0:6d:b4:5a:11:1c:e8:3f:eb:68:d3:d7:56:ba:2f:
22:4b:3a:71:bf:4a:be:78:a2:7e:ff:f2:4d:0c:fd:f9:51:c1:
fc:e5:9a:8f:95:e1:d9:47:00:9a:fa:7e:af:50:ab:b6:2b:3c:
51:e4:00:fc:82:e7:a3:3e:a8:05:06:6a:71:db:a9:a2:7f:ad:
db:e8:ed:a0:72:b6:ca:a0:46:a3:73:57:fa:80:3c:1a:a4:ac:
5e:d7:4c:b7:40:a9:f8:11:59:9a:2f:22:ca:a7:db:98:b5:9a:
90:ad:79:93:ce:01:c3:68:fa:b6:c1:41:fb:ab:c4:d1:6c:8d:
4b:13:fd:7e:89:02:fd:67:64:c1:a7:d1:e4:45:55:f3:3f:a2:
75:aa:49:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:19:15 2026 by rpki-client