This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136312e302f32342d3234203d3e20323637393631.roa
File: 34352e3136352e3136312e302f32342d3234203d3e20323637393631.roa (raw, json)
Hash identifier: UzFYV+8EZbV+yXnePLQEa7LP6zkEx7ve2F1Zr3fhxiQ=
Subject key identifier: 3F:55:7F:D0:7A:81:2C:3D:9D:37:3B:8E:78:9F:40:C2:B0:84:E2:CD
Certificate issuer: /CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
Certificate serial: 45A28BFD3213224BB2C4557AE31527AE35056187
Authority key identifier: 02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136312e302f32342d3234203d3e20323637393631.roa
Signing time: Sat 10 Jan 2026 03:58:56 +0000
ROA not before: Sat 10 Jan 2026 03:53:56 +0000
ROA not after: Sat 09 Jan 2027 03:58:56 +0000
asID: 267961
IP address blocks: 45.165.161.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a2:8b:fd:32:13:22:4b:b2:c4:55:7a:e3:15:27:ae:35:05:61:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
Validity
Not Before: Jan 10 03:53:56 2026 GMT
Not After : Jan 9 03:58:56 2027 GMT
Subject: CN=3F557FD07A812C3D9D373B8E789F40C2B084E2CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:27:2e:4f:2a:2f:0c:de:a5:4b:3d:94:b1:
d2:85:13:70:11:c6:12:9f:4a:6a:38:71:82:c8:24:
53:53:ce:87:05:b5:d1:8a:25:4e:29:dc:a8:87:2f:
d5:fa:f5:4a:c1:2c:c3:82:b4:5a:de:90:d8:31:c7:
72:00:8a:24:72:38:c5:b4:d8:d5:2c:37:99:d9:05:
88:0f:24:c7:1a:e9:f5:53:7e:fc:d8:77:e5:18:de:
5c:71:bc:8b:79:fd:89:e1:21:a0:b2:c0:95:d6:c6:
f7:bf:d2:1d:46:59:3a:d4:9d:ad:9a:4d:1d:b9:e3:
c1:bb:26:6c:a8:d1:09:4b:0c:27:ea:42:57:b6:90:
43:55:61:ff:39:35:f1:db:22:6e:e4:9b:9b:53:ee:
32:72:74:95:75:96:61:bd:af:6a:45:a7:3a:f8:19:
5e:f2:f0:cb:4f:9f:aa:1f:63:a2:e8:e1:1f:f8:02:
e5:4b:7e:0c:04:c5:81:5d:da:eb:f8:74:fb:bd:c8:
76:63:ad:6a:b5:07:5b:45:fc:41:02:0e:32:23:9d:
86:fc:6a:79:ac:f4:3f:aa:bf:74:f7:d9:96:6a:91:
53:c8:22:b8:d3:c3:99:84:ef:23:89:b8:91:c8:52:
00:7a:98:f9:11:77:46:28:ed:44:06:83:79:ea:49:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:55:7F:D0:7A:81:2C:3D:9D:37:3B:8E:78:9F:40:C2:B0:84:E2:CD
X509v3 Authority Key Identifier:
keyid:02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136312e302f32342d3234203d3e20323637393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.161.0/24
Signature Algorithm: sha256WithRSAEncryption
84:cc:4a:ca:77:c8:61:73:7a:45:e6:7d:e5:1f:32:ec:06:66:
bc:a2:94:9a:88:dc:1d:ee:d8:17:68:ae:fe:79:d2:da:4a:bc:
bd:fe:b1:b3:2a:03:af:9a:80:cb:02:e8:31:dc:e8:bc:24:63:
ed:c4:07:4e:69:d8:76:c2:2e:f0:1b:db:31:cd:a6:d5:95:81:
a6:29:4f:92:34:85:f1:14:55:26:73:37:33:74:ed:9d:53:1b:
bf:79:d8:a5:d1:15:58:f8:6f:59:03:6f:4d:da:aa:14:17:20:
fc:30:00:79:1c:ad:b0:56:6b:a9:88:73:90:b7:1d:22:4f:91:
52:4c:dd:3e:76:28:51:c9:b5:82:ef:57:e1:73:71:f8:04:5e:
8d:9a:ff:48:05:15:e7:37:e5:f1:0b:c0:62:2f:14:d3:c3:2b:
75:f4:a4:9b:1c:7b:16:04:45:65:59:38:c0:0c:5e:38:93:70:
3f:05:b8:67:51:30:20:4f:83:40:5f:09:1a:f4:fc:5f:73:38:
79:cf:19:1d:8f:6c:f5:3f:19:ba:a9:25:b4:60:df:f2:e5:7f:
d8:8f:e0:c1:7c:d4:5d:51:6d:90:1a:e5:79:ff:e7:3d:32:5c:
42:4c:da:c8:68:97:9d:e9:ad:74:a8:44:aa:4b:3e:c4:f4:4a:
32:75:da:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:33 2026 by rpki-client