This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/323830343a343032303a3a2f33322d3332203d3e20323635393336.roa File: 323830343a343032303a3a2f33322d3332203d3e20323635393336.roa (raw, json) Hash identifier: 2IZ3ydIv1kmjMrdfxVV1ooWjVHtwJteit1TfiLCQyBs= Subject key identifier: 23:69:92:5D:51:82:0F:1F:C7:CA:22:DE:AE:D6:C7:DA:27:C3:B3:81 Certificate issuer: /CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8 Certificate serial: 5EE707D2E31456F9239EAA82C40F31950993006C Authority key identifier: BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/323830343a343032303a3a2f33322d3332203d3e20323635393336.roa Signing time: Tue 06 Jan 2026 20:31:08 +0000 ROA not before: Tue 06 Jan 2026 20:26:08 +0000 ROA not after: Tue 05 Jan 2027 20:31:08 +0000 asID: 265936 IP address blocks: 2804:4020::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 21:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e7:07:d2:e3:14:56:f9:23:9e:aa:82:c4:0f:31:95:09:93:00:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8 Validity Not Before: Jan 6 20:26:08 2026 GMT Not After : Jan 5 20:31:08 2027 GMT Subject: CN=2369925D51820F1FC7CA22DEAED6C7DA27C3B381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:df:52:29:1b:93:bd:6d:05:4e:2a:a7:7e:9f: 8e:0d:d7:fe:64:8b:45:c8:0c:76:7d:e6:2f:17:e8: d1:f7:79:17:b8:ea:e1:5e:19:81:9f:9b:88:49:10: 43:18:e6:99:00:b6:45:f9:8a:4b:04:a1:6e:01:a2: 83:52:3c:64:99:9e:cf:4b:f6:5b:eb:68:46:56:73: c4:8b:13:50:1c:45:df:9d:9c:c4:d6:7d:71:79:c2: c2:51:36:17:4b:70:9a:31:0c:3f:6f:ce:52:60:69: 49:f0:f0:e0:be:ad:cf:3a:14:36:60:72:88:1f:f0: 29:58:1c:aa:8e:6b:43:32:d4:66:1f:61:df:52:57: f7:8a:0d:db:b0:d2:d9:14:5d:4c:6b:92:59:c8:64: 72:75:24:50:60:d0:a2:b1:a1:37:0a:7c:6b:cc:43: a1:85:a9:82:db:e3:63:96:0c:17:6a:f9:b4:ee:bd: b9:a5:50:f3:b0:f2:33:52:b2:5f:c0:a4:24:fb:30: 03:e8:29:d9:68:8d:6b:9f:84:a3:1a:9a:45:b2:92: aa:c0:d3:a1:e9:e0:47:51:b6:04:67:fc:69:ac:f0: 2b:de:fd:e7:d0:63:33:7c:48:1d:a6:c6:8f:d6:51: 08:6c:6a:2e:d1:26:85:be:16:8d:61:f3:d0:68:53: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:69:92:5D:51:82:0F:1F:C7:CA:22:DE:AE:D6:C7:DA:27:C3:B3:81 X509v3 Authority Key Identifier: keyid:BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/323830343a343032303a3a2f33322d3332203d3e20323635393336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4020::/32 Signature Algorithm: sha256WithRSAEncryption 45:f4:98:de:df:1b:f1:0e:73:55:ef:7f:92:b9:43:fb:31:e5: 1b:4b:dc:d6:30:e9:06:52:7f:6c:50:e4:33:4d:a0:01:fb:66: 24:ab:5c:6c:69:5d:68:66:90:a2:9c:fd:1c:68:80:18:a8:c8: 76:20:ad:e9:dd:13:f3:56:d7:53:7e:94:86:cb:47:b0:e1:97: e9:04:2c:db:11:41:0f:4c:85:f7:e4:8d:d3:f5:c5:cb:81:e6: 58:88:4d:09:c1:24:6d:b3:cc:ae:c7:93:96:9e:bb:9e:22:89: 86:d9:96:bc:da:b9:6d:36:b5:1b:7d:e8:16:be:28:e2:b4:3e: 1e:87:4a:68:ec:a3:94:77:a0:d9:9a:13:55:80:c8:00:45:d5: b4:1e:f4:0f:4d:a2:e3:0f:0b:60:79:2e:04:85:25:cd:8b:d6: 80:00:83:68:df:d7:bc:eb:14:20:c1:89:27:66:41:f9:ab:82: 56:d4:f0:8e:ba:a4:a2:77:0b:40:3a:9d:10:c8:67:27:ff:95: f5:2b:9a:7a:b9:4d:94:3e:7a:dd:89:eb:3f:d5:fa:06:33:a0: f8:79:20:0d:b1:1e:de:44:03:d3:2f:7d:a4:6f:fa:15:8c:c7: f4:6e:16:76:bb:cb:ca:db:e1:4b:ee:4b:c6:1e:33:4f:cc:2c: 03:fb:7b:2b -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUXucH0uMUVvkjnqqCxA8xlQmTAGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCRTIxN0EzNTJBOUMxOTBFNUMwREE2NTQxMTE5RkFB ODQ5Q0NFODAeFw0yNjAxMDYyMDI2MDhaFw0yNzAxMDUyMDMxMDhaMDMxMTAvBgNV BAMTKDIzNjk5MjVENTE4MjBGMUZDN0NBMjJERUFFRDZDN0RBMjdDM0IzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd31IpG5O9bQVOKqd+n44N1/5k i0XIDHZ95i8X6NH3eRe46uFeGYGfm4hJEEMY5pkAtkX5iksEoW4BooNSPGSZns9L 9lvraEZWc8SLE1AcRd+dnMTWfXF5wsJRNhdLcJoxDD9vzlJgaUnw8OC+rc86FDZg cogf8ClYHKqOa0My1GYfYd9SV/eKDduw0tkUXUxrklnIZHJ1JFBg0KKxoTcKfGvM Q6GFqYLb42OWDBdq+bTuvbmlUPOw8jNSsl/ApCT7MAPoKdlojWufhKMamkWykqrA 06Hp4EdRtgRn/Gms8Cve/efQYzN8SB2mxo/WUQhsai7RJoW+Fo1h89BoUyaZAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUI2mSXVGCDx/HyiLertbH2ifDs4EwHwYDVR0j BBgwFoAUur4hejUqnBkOXA2mVBEZ+qhJzOgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby91a1pIWmUyVkNhUGtvZUNROUF3eDJwOGRZNExwWnZqTVJpUERxUUN4Y3d3 LzAvQkFCRTIxN0EzNTJBOUMxOTBFNUMwREE2NTQxMTE5RkFBODQ5Q0NFOC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQUJFMjE3QTM1MkE5QzE5MEU1 QzBEQTY1NDExMTlGQUE4NDlDQ0U4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91 a1pIWmUyVkNhUGtvZUNROUF3eDJwOGRZNExwWnZqTVJpUERxUUN4Y3d3LzAvMzIz ODMwMzQzYTM0MzAzMjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1Mzkz MzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAKARAIDANBgkqhkiG9w0BAQsFAAOCAQEARfSY3t8b8Q5z Ve9/krlD+zHlG0vc1jDpBlJ/bFDkM02gAftmJKtcbGldaGaQopz9HGiAGKjIdiCt 6d0T81bXU36UhstHsOGX6QQs2xFBD0yF9+SN0/XFy4HmWIhNCcEkbbPMrseTlp67 niKJhtmWvNq5bTa1G33oFr4o4rQ+HodKaOyjlHeg2ZoTVYDIAEXVtB70D02i4w8L YHkuBIUlzYvWgACDaN/XvOsUIMGJJ2ZB+auCVtTwjrqkoncLQDqdEMhnJ/+V9Sua erlNlD563YnrP9X6BjOg+HkgDbEe3kQD0y99pG/6FYzH9G4WdrvLytvhS+5Lxh4z T8wsA/t7Kw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:46 2026 by rpki-client