This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa
File: 3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa (raw, json)
Hash identifier: s6ol0rD2mKxuW23tNpj/XhXqtq0c7rUoyap48tJKL44=
Subject key identifier: A2:27:8F:EB:39:DB:F4:C6:F1:4F:47:BC:0D:19:76:E0:03:E2:CE:E5
Certificate issuer: /CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Certificate serial: 49D74B5A53853B9C4FEE5154EB8D9BFF4ABB4524
Authority key identifier: BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa
Signing time: Tue 06 Jan 2026 20:31:08 +0000
ROA not before: Tue 06 Jan 2026 20:26:08 +0000
ROA not after: Tue 05 Jan 2027 20:31:08 +0000
asID: 265936
IP address blocks: 164.163.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl
rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 21:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d7:4b:5a:53:85:3b:9c:4f:ee:51:54:eb:8d:9b:ff:4a:bb:45:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Validity
Not Before: Jan 6 20:26:08 2026 GMT
Not After : Jan 5 20:31:08 2027 GMT
Subject: CN=A2278FEB39DBF4C6F14F47BC0D1976E003E2CEE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:cc:bb:8d:e2:23:fe:02:9c:40:e0:6e:97:
8c:eb:3f:02:42:03:55:5b:aa:e8:c9:9f:41:4a:a7:
19:43:63:85:01:5f:8b:a8:c5:93:9f:19:50:6d:3d:
8c:15:81:28:7e:c8:84:cc:1e:e1:e8:c5:21:94:5a:
fa:cb:49:a4:7d:53:8b:88:ed:78:35:55:09:7e:ba:
8a:11:1b:3b:86:49:74:b0:75:1b:9c:2a:47:ca:1a:
7e:44:fe:b5:0d:37:cf:40:dd:87:a4:7d:b2:30:8a:
48:a9:f1:f3:7f:10:00:13:71:0b:88:b5:0f:38:d4:
75:a8:c7:95:14:cc:3c:66:5d:3a:f9:3a:97:ab:8a:
10:94:4e:01:d9:b8:5b:cf:5d:3d:12:f7:ee:00:23:
72:ac:2c:41:7d:73:12:b0:97:ec:9f:52:1b:20:39:
7c:57:28:8e:ba:9f:2e:76:ec:5d:91:d9:85:72:f4:
50:06:1b:7a:4c:0b:e2:b2:74:c8:d3:57:08:64:6c:
f5:43:9c:93:94:44:fb:33:e9:38:63:23:74:3a:7d:
3e:8e:d8:06:54:0b:1a:43:df:5a:81:53:f4:c8:28:
1c:30:65:2d:94:7d:74:82:d4:7f:d7:ab:3f:f2:5d:
26:50:51:a2:05:d8:ef:35:29:bf:a2:2c:c2:fc:ef:
26:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:27:8F:EB:39:DB:F4:C6:F1:4F:47:BC:0D:19:76:E0:03:E2:CE:E5
X509v3 Authority Key Identifier:
keyid:BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.25.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a8:fe:66:03:e2:29:65:82:a8:b8:9e:88:9a:0b:d0:6e:8f:
57:27:06:8c:d0:dd:ec:f6:ee:9a:cd:0f:8f:2f:5b:47:e0:3d:
66:88:97:61:3a:e4:13:b7:c9:d2:dd:ca:96:be:d3:a3:da:7c:
1b:cf:96:95:8e:69:66:24:79:90:d0:d9:6a:bf:5f:7c:73:b0:
67:ed:79:f8:09:b1:29:9e:50:41:5b:e2:5b:8b:c4:bd:a0:30:
4b:09:aa:f9:7b:2d:ea:46:da:61:9a:58:9f:26:05:da:6c:aa:
b7:9b:18:76:ba:54:82:61:e5:b4:01:82:55:ca:c9:28:7f:ef:
32:50:a8:d1:c6:15:b8:87:19:3a:f2:a2:c3:03:7a:b1:14:23:
a2:46:a4:5b:4f:1e:e1:97:a2:56:f7:3a:8b:76:72:ea:29:e0:
62:a7:a0:87:91:6b:36:57:e1:ef:a3:c5:26:ce:ad:72:2a:d2:
a1:0e:80:73:d0:6f:26:f0:8e:1d:7c:8b:50:b9:f3:06:49:40:
67:3c:a4:02:2d:27:8e:f6:c7:36:82:80:2f:04:24:8c:7d:b2:
30:6a:55:4b:cb:a2:e6:6c:15:04:42:fc:68:56:18:40:ad:fd:
05:4e:ad:a7:03:9e:ac:1c:9c:fd:fa:2e:28:9a:d9:32:85:fa:
0e:af:82:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:44:04 2026 by rpki-client