This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32362e302f32332d3233203d3e20323635393336.roa
File:                     3136342e3136332e32362e302f32332d3233203d3e20323635393336.roa (raw, json)
Hash identifier:          IMX9UdwBxXRPLc0X0/j7feimiNAg9z6Y0pLv402RuXs=
Subject key identifier:   9A:9E:9B:6C:9B:24:78:CC:84:61:06:76:6F:63:1F:13:C4:51:57:FF
Certificate issuer:       /CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Certificate serial:       2F7812493C1A016213DB210F1EAE8425DFE6415E
Authority key identifier: BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32362e302f32332d3233203d3e20323635393336.roa
Signing time:             Tue 06 Jan 2026 20:31:08 +0000
ROA not before:           Tue 06 Jan 2026 20:26:08 +0000
ROA not after:            Tue 05 Jan 2027 20:31:08 +0000
asID:                     265936
IP address blocks:        164.163.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl
                          rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:78:12:49:3c:1a:01:62:13:db:21:0f:1e:ae:84:25:df:e6:41:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
        Validity
            Not Before: Jan  6 20:26:08 2026 GMT
            Not After : Jan  5 20:31:08 2027 GMT
        Subject: CN=9A9E9B6C9B2478CC846106766F631F13C45157FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:06:e0:f1:84:a2:11:e2:6e:b7:e5:46:44:
                    e2:d2:a8:1e:10:5d:c0:93:6e:25:31:e5:af:2d:a4:
                    9b:54:73:24:06:2e:5f:92:6e:05:25:20:3f:79:47:
                    32:89:32:a8:72:74:72:52:3f:30:58:64:7c:b0:a7:
                    fc:06:58:5c:83:e9:12:f0:1f:9a:cf:2d:c7:dc:06:
                    4c:49:0b:66:73:e5:0f:7b:89:f2:40:e3:f5:63:09:
                    b8:8f:ce:03:09:ff:64:cb:5f:da:b0:79:ef:ee:92:
                    a6:e2:df:35:ec:82:c7:81:e9:0b:21:04:a2:27:16:
                    01:90:c4:9b:b8:bc:c9:7e:a9:f6:33:66:a0:be:26:
                    7f:b8:e3:1c:e6:78:1f:e0:27:29:bb:46:aa:61:6c:
                    51:3c:c7:5e:c8:28:c4:da:b8:de:c1:4d:e2:30:86:
                    06:f5:e0:a3:2f:ea:3c:c2:e8:89:a7:27:ad:ee:25:
                    2c:11:0e:90:7b:17:01:9f:10:da:c4:56:5b:12:e0:
                    14:8b:3b:d2:13:24:20:fd:4c:8f:c6:a5:b1:81:99:
                    84:92:a8:00:fb:d6:58:62:fe:ec:0d:34:8c:40:dd:
                    3e:90:cc:cb:c0:8f:b7:a8:7c:68:63:8d:bd:89:e4:
                    12:12:ab:b9:77:9c:a6:bd:6f:bf:a3:93:b9:5b:48:
                    e0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9E:9B:6C:9B:24:78:CC:84:61:06:76:6F:63:1F:13:C4:51:57:FF
            X509v3 Authority Key Identifier:
                keyid:BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/3136342e3136332e32362e302f32332d3233203d3e20323635393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:05:a6:a4:43:96:01:63:ef:97:93:0a:1f:5b:8f:d0:36:ef:
         f5:a3:fa:a7:a5:f8:cb:6a:df:70:f2:87:d7:ef:3e:20:63:90:
         0f:28:3c:46:ea:70:21:45:f7:8e:b5:62:bf:1b:a7:bb:9a:9f:
         d0:3e:48:41:58:ed:65:ac:48:bd:a1:92:2e:8b:ee:ed:ff:f8:
         ef:62:64:dc:88:10:bf:79:f8:b2:4c:c9:7b:93:48:bc:72:60:
         f6:2e:51:36:a0:cf:5f:a2:0e:2c:64:f2:f5:2f:ef:a5:ad:c0:
         ad:54:59:15:d1:7d:1a:b8:2d:63:81:cd:f0:6e:36:9d:ce:ac:
         b2:c9:8e:4f:b6:b7:ed:c4:f9:0c:ec:a4:c3:1a:c7:20:b4:79:
         e4:e8:c1:50:bf:55:0e:55:aa:c7:23:31:83:dc:0f:be:48:2d:
         4f:4b:13:5f:84:4e:f9:57:73:b8:5a:21:40:07:7d:d3:3b:f3:
         43:5e:a2:1a:46:21:4c:65:3f:86:50:80:5e:6f:86:80:40:29:
         e4:3a:9f:49:ce:15:bb:4c:1c:20:68:fe:5c:76:21:98:21:03:
         e5:3c:21:94:ab:15:93:2b:cb:25:0b:ff:c8:1b:a6:d9:21:d8:
         b4:f9:03:a3:26:9a:ef:e9:88:14:7c:45:99:5e:8c:b9:08:7c:
         21:bf:fd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:22:17 2026 by rpki-client