This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/3137392e34322e3131362e302f32322d3332203d3e20323731313531.roa
File: 3137392e34322e3131362e302f32322d3332203d3e20323731313531.roa (raw, json)
Hash identifier: c2uoTP3FqrUjeXOcSI2m+CDup+9yO7bW1GYM5OpldqI=
Subject key identifier: 81:85:ED:42:05:70:1E:36:2A:75:64:0B:A4:77:2C:20:A3:71:E7:E3
Certificate issuer: /CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8
Certificate serial: 4C3325DC628EC3ED4C732937A5F07A3B522AA2D9
Authority key identifier: 71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/3137392e34322e3131362e302f32322d3332203d3e20323731313531.roa
Signing time: Tue 18 Nov 2025 18:58:21 +0000
ROA not before: Tue 18 Nov 2025 18:53:21 +0000
ROA not after: Tue 17 Nov 2026 18:58:21 +0000
asID: 271151
IP address blocks: 179.42.116.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl
rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 07:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:33:25:dc:62:8e:c3:ed:4c:73:29:37:a5:f0:7a:3b:52:2a:a2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8
Validity
Not Before: Nov 18 18:53:21 2025 GMT
Not After : Nov 17 18:58:21 2026 GMT
Subject: CN=8185ED4205701E362A75640BA4772C20A371E7E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:57:54:1e:ea:2a:42:25:b0:18:82:d4:60:65:
9b:a7:f4:1f:c7:d5:14:dc:48:56:0e:b6:32:3e:33:
59:7e:36:89:fb:97:03:48:64:58:9a:a3:95:ce:cf:
07:61:9e:bd:55:ff:d0:ce:23:f0:5c:33:c2:08:07:
92:3d:7b:a2:20:b4:a1:22:d7:2a:6f:12:87:be:3f:
cd:0d:6e:32:dc:ec:12:6d:a3:d9:65:79:e0:d5:d5:
b7:a9:d7:79:4c:c1:c3:ee:d9:1e:ba:22:59:9c:a2:
db:67:be:ee:81:83:34:82:40:45:da:3c:9d:af:91:
f5:cc:f1:f2:b3:2d:a5:a4:77:bb:bc:f3:77:0c:43:
57:1e:58:95:8b:21:4f:9b:84:26:ec:43:dc:74:73:
e9:10:86:95:9a:9c:e4:d7:e7:1c:5a:80:c3:6b:72:
f5:84:87:cd:c9:b1:80:e1:0e:ed:84:05:14:66:7e:
88:2b:c7:1c:91:0b:15:2c:a7:97:9b:69:36:0d:f4:
a6:93:5b:b1:af:78:db:8f:0a:48:9f:e5:b9:69:40:
48:37:a1:42:fb:08:d6:c5:93:71:b9:81:5d:41:f0:
95:16:cd:08:d1:09:fa:d8:c2:27:5d:d8:d7:d1:99:
c5:ba:97:e7:4c:e4:37:0f:6c:c4:f5:82:65:05:1d:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:85:ED:42:05:70:1E:36:2A:75:64:0B:A4:77:2C:20:A3:71:E7:E3
X509v3 Authority Key Identifier:
keyid:71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/3137392e34322e3131362e302f32322d3332203d3e20323731313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.42.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:c9:39:0c:88:34:94:cd:45:13:8b:16:db:d3:42:2e:e5:bf:
12:bf:6b:10:41:97:cd:bf:ef:7d:44:eb:f1:7e:9a:7c:a7:bb:
88:33:8a:29:a5:2d:c7:09:5f:3e:b7:2d:2f:ed:ac:d1:3d:f0:
01:de:3d:0a:38:42:48:44:8e:ff:e0:48:07:89:18:46:41:96:
2e:f7:73:db:6d:df:4a:7e:40:35:e1:65:5f:81:fc:e7:4f:39:
32:cd:9a:f4:43:40:4b:8e:12:a3:c5:ec:c5:10:37:e6:51:54:
4e:d1:a4:3f:e0:29:ba:2b:f4:24:5d:e1:18:b7:91:96:29:64:
02:36:4d:d1:7c:83:49:6b:96:90:89:0b:07:c1:4e:ab:5e:2d:
65:9b:ab:a2:f1:ab:53:c8:4e:0c:09:4b:10:b2:98:f8:c4:48:
95:9a:ff:95:3a:fb:f4:08:0c:d5:a8:83:79:dd:fd:32:c4:5a:
18:fc:11:a3:33:e9:7a:26:89:a9:7c:c7:6d:37:7d:6f:40:43:
34:bf:1e:f0:fd:d3:1a:90:44:fe:ed:7d:0f:2c:04:c5:4e:1d:
1d:ce:dd:8c:53:50:15:2b:4f:1d:19:bf:8c:0f:80:44:83:e6:
c8:d7:08:3c:e4:ce:e5:ab:68:c0:c2:f1:4c:bd:4f:4d:36:33:
f7:58:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:32:45 2025 by rpki-client