This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131372e302f32342d3234203d3e20323730353631.roa File: 3138392e38352e3131372e302f32342d3234203d3e20323730353631.roa (raw, json) Hash identifier: Y7JHV0Y3H0yqMxt11aCQ+XRFKA55wXlg7YzGq34ZL7Y= Subject key identifier: 8C:F3:45:54:74:E1:41:15:C0:6B:4A:8C:1C:F5:75:D1:26:30:46:83 Certificate issuer: /CN=D76AC9525C9299F8D9F26853A5246419EB9913D9 Certificate serial: 3CD53AB5CE9F8644AC00E099EC2BB565A636EF1A Authority key identifier: D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer Subject info access: rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131372e302f32342d3234203d3e20323730353631.roa Signing time: Thu 13 Nov 2025 02:25:37 +0000 ROA not before: Thu 13 Nov 2025 02:20:37 +0000 ROA not after: Thu 12 Nov 2026 02:25:37 +0000 asID: 270561 IP address blocks: 189.85.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 18:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d5:3a:b5:ce:9f:86:44:ac:00:e0:99:ec:2b:b5:65:a6:36:ef:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76AC9525C9299F8D9F26853A5246419EB9913D9 Validity Not Before: Nov 13 02:20:37 2025 GMT Not After : Nov 12 02:25:37 2026 GMT Subject: CN=8CF3455474E14115C06B4A8C1CF575D126304683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:dc:cf:28:13:ca:6d:ca:72:ca:a6:61:da:8a: a5:92:72:8b:a5:c1:0a:4b:a7:a0:44:24:a6:d2:2b: 1a:aa:ed:39:e6:7f:a2:db:a4:47:23:93:03:08:7a: cb:e7:71:34:9c:ad:a1:5a:5a:ce:75:1b:9c:f2:77: db:c3:a7:aa:20:8f:9f:47:0a:e3:43:89:e8:66:79: df:4d:90:08:f6:e7:3d:3e:41:95:9e:b7:1a:fa:34: 95:4d:69:d6:13:9d:03:f7:86:8c:06:74:6b:33:9a: e7:67:c6:70:26:f9:04:95:e4:7d:58:8b:07:0a:53: a0:1a:3d:ff:51:ce:15:8f:fa:fd:3a:61:77:e8:42: 9d:53:54:fd:9d:70:41:c1:0a:c3:29:4b:de:fa:7c: 65:ee:8a:a4:d7:55:92:49:cc:49:49:f7:92:c0:45: 56:26:f9:3b:6c:b7:10:da:2c:bf:ed:05:7a:a8:7c: be:4c:9c:29:ea:6c:4e:f9:44:4e:f2:de:99:80:26: 09:28:b6:47:39:3e:9e:1c:bb:c7:bd:5e:4b:08:bd: be:4f:08:c5:52:d5:3c:de:84:21:f6:37:bd:bd:03: d7:dc:60:7e:95:56:a9:a4:a4:ee:df:48:8a:fb:2d: 40:32:d2:94:55:4d:5a:8c:b4:12:21:90:85:cb:21: de:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F3:45:54:74:E1:41:15:C0:6B:4A:8C:1C:F5:75:D1:26:30:46:83 X509v3 Authority Key Identifier: keyid:D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131372e302f32342d3234203d3e20323730353631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.85.117.0/24 Signature Algorithm: sha256WithRSAEncryption 06:32:e6:50:a9:8f:a2:1b:23:3c:cf:e1:35:b9:a7:91:d7:d4: f3:38:19:d3:40:04:a5:34:73:db:a4:f9:e6:49:22:5c:99:4d: ec:1b:21:43:ef:1b:20:b5:90:33:4e:6f:79:42:86:44:df:91: 58:93:50:d6:d4:c6:af:f9:0f:98:33:c4:c8:e2:81:53:d4:70: 88:db:94:38:63:8e:e7:09:85:58:7b:90:38:c8:33:88:de:b4: e9:5b:33:d2:f7:03:81:bf:cf:94:d7:9c:ed:ae:15:c5:6a:02: 3c:bc:ab:b7:35:fe:cf:98:68:a1:bd:b7:0f:83:a8:cf:ad:a9: 6c:94:95:42:40:3d:e1:8d:7c:cc:22:00:70:91:cf:df:29:a4: 58:f6:25:54:5e:04:ef:69:1d:7b:c8:45:7d:ec:c3:6d:d4:7d: 06:c4:e1:6d:34:6e:72:1e:8f:bd:df:95:2b:d4:5b:c9:2c:4b: cc:54:43:be:b7:09:05:c3:85:59:4d:e2:e3:ee:26:94:3d:66: a6:3c:e6:ae:fc:ae:7e:35:de:af:9b:d0:c4:22:4a:81:5d:24: b8:f3:4d:80:6f:4d:3b:e0:15:d0:f3:e5:2f:b9:b1:f1:69:3f: 92:0e:44:a2:f9:57:53:cf:59:18:bb:a4:2b:22:ed:2a:f5:60: 4f:be:e6:dc -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUPNU6tc6fhkSsAOCZ7Cu1ZaY27xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2QUM5NTI1QzkyOTlGOEQ5RjI2ODUzQTUyNDY0MTlF Qjk5MTNEOTAeFw0yNTExMTMwMjIwMzdaFw0yNjExMTIwMjI1MzdaMDMxMTAvBgNV BAMTKDhDRjM0NTU0NzRFMTQxMTVDMDZCNEE4QzFDRjU3NUQxMjYzMDQ2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp3M8oE8ptynLKpmHaiqWScoul wQpLp6BEJKbSKxqq7Tnmf6LbpEcjkwMIesvncTScraFaWs51G5zyd9vDp6ogj59H CuNDiehmed9NkAj25z0+QZWetxr6NJVNadYTnQP3howGdGszmudnxnAm+QSV5H1Y iwcKU6AaPf9RzhWP+v06YXfoQp1TVP2dcEHBCsMpS976fGXuiqTXVZJJzElJ95LA RVYm+TtstxDaLL/tBXqofL5MnCnqbE75RE7y3pmAJgkotkc5Pp4cu8e9XksIvb5P CMVS1TzehCH2N729A9fcYH6VVqmkpO7fSIr7LUAy0pRVTVqMtBIhkIXLId5vAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUjPNFVHThQRXAa0qMHPV10SYwRoMwHwYDVR0j BBgwFoAU12rJUlySmfjZ8mhTpSRkGeuZE9kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9SNUVSd2FudG1VQjVVRGVKbU16a2ZicHNwSnZkZXhma1VScFFvbm16SmtU LzAvRDc2QUM5NTI1QzkyOTlGOEQ5RjI2ODUzQTUyNDY0MTlFQjk5MTNEOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENzZBQzk1MjVDOTI5OUY4RDlG MjY4NTNBNTI0NjQxOUVCOTkxM0Q5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S NUVSd2FudG1VQjVVRGVKbU16a2ZicHNwSnZkZXhma1VScFFvbm16SmtULzAvMzEz ODM5MmUzODM1MmUzMTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAz NTM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB Af8EEDAOMAwEAgABMAYDBAC9VXUwDQYJKoZIhvcNAQELBQADggEBAAYy5lCpj6Ib IzzP4TW5p5HX1PM4GdNABKU0c9uk+eZJIlyZTewbIUPvGyC1kDNOb3lChkTfkViT UNbUxq/5D5gzxMjigVPUcIjblDhjjucJhVh7kDjIM4jetOlbM9L3A4G/z5TXnO2u FcVqAjy8q7c1/s+YaKG9tw+DqM+tqWyUlUJAPeGNfMwiAHCRz98ppFj2JVReBO9p HXvIRX3sw23UfQbE4W00bnIej73flSvUW8ksS8xUQ763CQXDhVlN4uPuJpQ9ZqY8 5q78rn413q+b0MQiSoFdJLjzTYBvTTvgFdDz5S+5sfFpP5IORKL5V1PPWRi7pCsi 7Sr1YE++5tw= -----END CERTIFICATE-----Generated at Thu Dec 18 22:40:35 2025 by rpki-client