This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32332d3233203d3e20323633393230.roa
File: 3133382e3138352e3234322e302f32332d3233203d3e20323633393230.roa (raw, json)
Hash identifier: VG7+Vgl06uLYcekVN+b39SECDlQIyBfEChRRcEnthn0=
Subject key identifier: E3:66:29:FB:2E:DD:90:C9:AA:63:2F:97:23:FD:3C:F1:70:1B:4D:31
Certificate issuer: /CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
Certificate serial: 30CF7EB6765CCF3AACD2F2BFCAF865B5A2E5C397
Authority key identifier: 8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32332d3233203d3e20323633393230.roa
Signing time: Sat 10 Jan 2026 16:29:12 +0000
ROA not before: Sat 10 Jan 2026 16:24:12 +0000
ROA not after: Sat 09 Jan 2027 16:29:12 +0000
asID: 263920
IP address blocks: 138.185.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl
rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 04:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:cf:7e:b6:76:5c:cf:3a:ac:d2:f2:bf:ca:f8:65:b5:a2:e5:c3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
Validity
Not Before: Jan 10 16:24:12 2026 GMT
Not After : Jan 9 16:29:12 2027 GMT
Subject: CN=E36629FB2EDD90C9AA632F9723FD3CF1701B4D31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:36:50:ef:a5:f2:d2:97:ed:1e:a0:73:d6:
3c:38:80:0f:1c:ca:c4:7b:30:97:4c:a6:05:3e:dd:
dc:bc:99:17:5b:aa:74:1a:39:d4:51:8c:41:0f:9b:
ab:8d:d0:d8:11:19:be:61:c7:18:42:b6:f1:63:52:
d9:d5:23:63:0d:78:1f:ba:c2:b0:33:af:a6:52:a5:
77:fa:40:b7:e2:5f:42:b8:78:81:f9:a2:d6:04:b0:
61:40:63:87:6c:a6:7e:ac:0c:90:32:d0:fb:ac:20:
38:2a:b5:80:4d:8d:34:af:cb:8f:f3:22:65:24:ea:
c8:a5:6b:d7:6c:29:9d:66:98:a6:1f:be:cf:da:16:
e5:5c:f9:de:b2:51:76:59:af:1f:6a:21:1d:28:55:
7f:c2:e3:31:b2:e3:e2:87:57:10:6f:b2:cb:76:fd:
cc:7b:d1:46:bf:a3:2e:98:67:e1:2f:44:90:35:58:
2f:61:f0:dc:d0:7a:ce:74:29:fa:28:4c:3c:20:5d:
49:94:b0:ad:9f:5f:39:89:d4:ae:6b:47:96:0d:3b:
a6:90:c7:c2:57:6f:79:70:e2:a4:27:a6:4f:10:e6:
77:d1:6b:43:d2:1a:ff:ae:57:b5:b7:2d:b3:4d:08:
4f:0e:49:18:26:12:5e:64:1a:09:a3:d0:84:d4:5c:
90:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:66:29:FB:2E:DD:90:C9:AA:63:2F:97:23:FD:3C:F1:70:1B:4D:31
X509v3 Authority Key Identifier:
keyid:8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32332d3233203d3e20323633393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.242.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:b1:ac:ed:91:ca:cd:d2:58:1b:4f:9c:12:40:a4:9c:77:3a:
d9:cb:ed:c7:35:52:bd:f9:36:ed:f9:ed:85:e7:22:d9:d9:3c:
9b:5a:81:32:98:e6:2a:6e:37:e3:82:0c:80:a7:ee:b2:ad:74:
75:49:cc:be:15:d7:0b:d4:f3:29:02:bd:50:b4:b3:5b:29:6a:
fb:79:04:5b:6f:b9:f8:32:3d:e3:0c:3e:b2:08:39:54:37:95:
bd:ec:6c:ec:30:1b:34:39:5c:71:10:b3:fc:66:23:6b:c1:cb:
d4:da:c6:9c:ca:be:9c:2a:43:3a:3e:79:3d:9b:30:69:41:8f:
73:91:b4:9c:0f:6a:56:22:f5:6b:9e:2b:e8:71:45:dd:11:cc:
c1:6a:ab:72:36:52:09:a8:8f:fe:b0:25:80:26:56:fc:0d:b9:
fc:59:9d:61:fd:7c:12:b0:a6:5b:98:22:d5:ef:62:a7:67:45:
a1:8f:7f:08:d4:90:9b:9e:08:1d:69:ce:13:1a:4a:49:d3:97:
96:c3:aa:0e:07:6d:43:36:37:a9:83:e8:c9:3e:cc:3e:32:ac:
d9:c3:bc:86:75:74:b6:cf:b0:32:5a:77:71:9c:ce:3f:92:c9:
8a:cb:b3:44:bc:5b:5e:11:fc:e2:df:e7:0b:34:bc:ec:2f:55:
b1:73:cd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:02:22 2026 by rpki-client