This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131362e302f32342d3234203d3e20323730353631.roa File: 3138392e38352e3131362e302f32342d3234203d3e20323730353631.roa (raw, json) Hash identifier: GxIGCxMcRP7/9vwj89xb8ySXb5CoTnA5ceaKh+oc5WM= Subject key identifier: 1B:37:09:8E:2B:FB:72:88:0B:0E:92:2A:4A:88:A5:98:AE:33:C9:13 Certificate issuer: /CN=D76AC9525C9299F8D9F26853A5246419EB9913D9 Certificate serial: 5A2B2D404D5EA55328994F121F0AFA6E05B087AF Authority key identifier: D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer Subject info access: rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131362e302f32342d3234203d3e20323730353631.roa Signing time: Thu 13 Nov 2025 02:25:37 +0000 ROA not before: Thu 13 Nov 2025 02:20:37 +0000 ROA not after: Thu 12 Nov 2026 02:25:37 +0000 asID: 270561 IP address blocks: 189.85.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 18:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2b:2d:40:4d:5e:a5:53:28:99:4f:12:1f:0a:fa:6e:05:b0:87:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76AC9525C9299F8D9F26853A5246419EB9913D9 Validity Not Before: Nov 13 02:20:37 2025 GMT Not After : Nov 12 02:25:37 2026 GMT Subject: CN=1B37098E2BFB72880B0E922A4A88A598AE33C913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:58:a6:44:1c:75:ae:93:83:0a:72:49:ed: f6:1a:93:f2:14:09:2c:c7:08:45:14:08:e3:a0:65: 73:73:c6:43:51:80:e2:00:69:64:24:e9:20:65:02: 75:52:08:61:a1:da:3d:20:be:12:0f:71:91:b7:d9: 88:12:cd:29:2b:2d:0a:18:c9:1a:df:28:f2:22:a7: 5a:2f:39:5c:a2:af:9f:e7:74:a4:bc:18:26:c5:43: 3e:b3:dc:05:a1:e9:bd:f2:40:19:07:9e:71:07:4e: 22:84:70:cf:77:ba:48:3c:42:a3:c4:55:e9:eb:c6: bc:1d:06:8a:31:a3:44:dd:7d:34:41:d3:5c:b7:35: e8:c5:7d:00:71:29:ff:08:14:86:f4:71:1c:d2:07: 5a:38:6c:1e:6a:df:84:8d:bb:ee:64:03:29:94:60: 2b:2b:10:bd:79:9a:78:1e:9b:42:f5:d0:c6:6f:ef: f3:58:6a:35:15:c3:56:a9:3c:9e:3d:5d:5e:4d:af: 47:f4:1b:eb:12:fc:c2:a1:e4:26:1e:72:69:ac:c2: cb:b4:75:40:46:a9:e1:a8:59:a2:48:76:9e:1a:53: 66:56:ca:de:86:df:dd:92:3d:fb:19:bb:5c:d9:60: 55:8e:53:aa:ee:f2:37:ed:69:00:b4:93:b5:1b:52: 59:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:37:09:8E:2B:FB:72:88:0B:0E:92:2A:4A:88:A5:98:AE:33:C9:13 X509v3 Authority Key Identifier: keyid:D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131362e302f32342d3234203d3e20323730353631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.85.116.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:5a:d7:c7:fa:4e:51:2e:b4:2c:63:f7:e6:01:bd:84:27:c1: 60:c0:ff:c5:a7:93:d5:e5:bf:f1:b5:10:87:5b:f7:92:59:68: 05:f2:ae:70:19:4a:3b:c6:6d:fa:09:97:df:a3:cb:d6:3c:a8: a2:52:3e:55:61:19:19:24:29:a1:8a:c0:0f:12:1c:1a:58:10: 7b:ab:33:44:b9:c2:6b:5b:58:88:aa:d1:c7:6e:09:47:f1:69: 34:37:7e:89:04:fe:69:5f:eb:7a:51:16:bf:10:42:70:f8:12: cf:70:c6:b9:95:07:5d:d1:c8:94:e8:d3:0a:65:df:08:4d:a1: 01:d6:07:e7:25:c3:28:9a:67:ff:59:03:f0:28:2b:46:3b:71: c3:29:34:3e:fe:ba:e7:30:88:30:fc:a4:a0:d6:b0:e9:0b:26: 8e:e7:92:cd:d6:0d:74:af:1b:53:36:17:cc:69:87:2d:cb:ac: b5:60:84:39:f2:d3:81:48:1c:6b:d0:c3:49:d2:81:8d:70:b4: de:80:77:56:de:13:d7:b5:3c:73:d2:87:db:74:53:57:5d:c6: a9:1f:43:1c:bb:d9:e1:4a:d9:a3:51:f4:8b:d9:eb:b7:42:4b: 9f:15:c9:70:ef:82:df:b8:1e:de:ae:3f:e7:07:b3:5a:0d:3c: f9:ac:36:e6 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUWistQE1epVMomU8SHwr6bgWwh68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2QUM5NTI1QzkyOTlGOEQ5RjI2ODUzQTUyNDY0MTlF Qjk5MTNEOTAeFw0yNTExMTMwMjIwMzdaFw0yNjExMTIwMjI1MzdaMDMxMTAvBgNV BAMTKDFCMzcwOThFMkJGQjcyODgwQjBFOTIyQTRBODhBNTk4QUUzM0M5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gFimRBx1rpODCnJJ7fYak/IU CSzHCEUUCOOgZXNzxkNRgOIAaWQk6SBlAnVSCGGh2j0gvhIPcZG32YgSzSkrLQoY yRrfKPIip1ovOVyir5/ndKS8GCbFQz6z3AWh6b3yQBkHnnEHTiKEcM93ukg8QqPE VenrxrwdBooxo0TdfTRB01y3NejFfQBxKf8IFIb0cRzSB1o4bB5q34SNu+5kAymU YCsrEL15mngem0L10MZv7/NYajUVw1apPJ49XV5Nr0f0G+sS/MKh5CYecmmswsu0 dUBGqeGoWaJIdp4aU2ZWyt6G392SPfsZu1zZYFWOU6ru8jftaQC0k7UbUlkvAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUGzcJjiv7cogLDpIqSoilmK4zyRMwHwYDVR0j BBgwFoAU12rJUlySmfjZ8mhTpSRkGeuZE9kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9SNUVSd2FudG1VQjVVRGVKbU16a2ZicHNwSnZkZXhma1VScFFvbm16SmtU LzAvRDc2QUM5NTI1QzkyOTlGOEQ5RjI2ODUzQTUyNDY0MTlFQjk5MTNEOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENzZBQzk1MjVDOTI5OUY4RDlG MjY4NTNBNTI0NjQxOUVCOTkxM0Q5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S NUVSd2FudG1VQjVVRGVKbU16a2ZicHNwSnZkZXhma1VScFFvbm16SmtULzAvMzEz ODM5MmUzODM1MmUzMTMxMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAz NTM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB Af8EEDAOMAwEAgABMAYDBAC9VXQwDQYJKoZIhvcNAQELBQADggEBAJ9a18f6TlEu tCxj9+YBvYQnwWDA/8Wnk9Xlv/G1EIdb95JZaAXyrnAZSjvGbfoJl9+jy9Y8qKJS PlVhGRkkKaGKwA8SHBpYEHurM0S5wmtbWIiq0cduCUfxaTQ3fokE/mlf63pRFr8Q QnD4Es9wxrmVB13RyJTo0wpl3whNoQHWB+clwyiaZ/9ZA/AoK0Y7ccMpND7+uucw iDD8pKDWsOkLJo7nks3WDXSvG1M2F8xphy3LrLVghDny04FIHGvQw0nSgY1wtN6A d1beE9e1PHPSh9t0U1ddxqkfQxy72eFK2aNR9IvZ67dCS58VyXDvgt+4Ht6uP+cH s1oNPPmsNuY= -----END CERTIFICATE-----Generated at Thu Dec 18 22:40:34 2025 by rpki-client