This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.gns.net.br/repo/Gns/0/323830343a3631343a3a2f33322d3438203d3e2038313637.roa File: 323830343a3631343a3a2f33322d3438203d3e2038313637.roa (raw, json) Hash identifier: qhbvHny+jdnOCMg6FCdCH6y81okTu7u0fv83XD8ehHw= Subject key identifier: B1:AF:58:5B:88:26:2D:2A:F1:65:A3:7C:D7:5E:75:77:5C:80:12:6B Certificate issuer: /CN=80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8 Certificate serial: 23C9107A96BC9933382F7A594FEFEA126DCDECB2 Authority key identifier: 80:D2:95:BF:46:2F:3B:D9:83:FA:79:14:BB:46:EC:5E:C8:AC:C9:D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer Subject info access: rsync://rpki.gns.net.br/repo/Gns/0/323830343a3631343a3a2f33322d3438203d3e2038313637.roa Signing time: Wed 21 Jan 2026 16:56:54 +0000 ROA not before: Wed 21 Jan 2026 16:51:54 +0000 ROA not after: Wed 20 Jan 2027 16:56:54 +0000 asID: 8167 IP address blocks: 2804:614::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.crl rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 10:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c9:10:7a:96:bc:99:33:38:2f:7a:59:4f:ef:ea:12:6d:cd:ec:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8 Validity Not Before: Jan 21 16:51:54 2026 GMT Not After : Jan 20 16:56:54 2027 GMT Subject: CN=B1AF585B88262D2AF165A37CD75E75775C80126B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:da:49:e3:01:1c:91:1a:f1:1a:d6:54:c1:1e: 27:a2:0c:c7:5d:7a:1d:52:b4:7b:34:a5:18:6b:0c: fa:65:69:f5:2c:a7:26:be:f6:d1:29:e6:2d:06:c2: 90:9d:e6:e5:6b:3d:79:64:72:e6:75:fc:a1:b3:ec: b6:78:2c:1d:ec:34:a2:ce:eb:4f:81:58:b6:86:84: 08:05:db:78:27:00:be:00:26:92:29:45:fd:5e:98: 3a:3b:54:d5:49:a0:34:ce:5d:8b:00:bf:1a:c3:72: e7:23:6d:e3:c4:93:65:64:ca:fc:91:f0:19:7d:b9: 86:f0:1e:e0:b1:ad:e6:5c:3b:55:8a:70:6b:b1:bd: ca:71:b4:96:40:0b:ad:5f:e4:ad:fa:25:7e:ff:3c: f9:85:a5:e3:1e:ea:8a:25:98:6f:86:84:a6:de:f9: 53:80:14:bd:d4:bf:7c:58:29:4b:58:85:b2:e3:cc: 87:24:e1:d9:16:14:f4:22:8c:d3:45:9c:72:98:6c: 8d:72:0d:9c:74:17:b4:94:1a:96:9f:1a:74:e4:b7: 48:c6:c8:35:b8:0a:61:40:4b:0a:fb:04:0e:44:62: f8:02:27:88:43:3c:02:aa:2d:12:77:00:5b:69:de: dd:58:6d:2d:8d:72:5e:f4:76:a3:c8:62:ac:7e:83: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AF:58:5B:88:26:2D:2A:F1:65:A3:7C:D7:5E:75:77:5C:80:12:6B X509v3 Authority Key Identifier: keyid:80:D2:95:BF:46:2F:3B:D9:83:FA:79:14:BB:46:EC:5E:C8:AC:C9:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.gns.net.br/repo/Gns/0/323830343a3631343a3a2f33322d3438203d3e2038313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:614::/32 Signature Algorithm: sha256WithRSAEncryption 82:b6:4f:76:d9:11:c7:79:a0:6b:2c:c4:b3:0e:2f:f3:f0:7d: 72:39:12:c6:8c:3c:dc:5d:9e:53:f1:d1:9d:41:ed:1c:4a:a3: 48:98:22:e7:c3:38:4d:fa:28:2d:32:48:da:d0:77:78:09:ce: 7f:15:53:6c:8f:a2:52:26:4f:b6:b7:03:22:9d:09:9a:60:d9: 77:a4:74:37:08:16:02:8b:e3:de:f8:19:42:2e:57:18:c4:54: 88:d9:92:87:74:52:d9:7a:eb:0a:e0:39:20:24:2e:9a:05:0d: ab:65:1c:7f:fb:d4:f9:1f:5c:b9:d4:6d:69:0e:d3:e9:f1:90: de:d0:fa:09:41:5c:19:7b:34:bc:6e:84:2c:66:8d:14:ec:43: c7:f9:3d:55:f3:c6:5a:96:56:73:9c:33:9e:e3:69:22:f1:76: 97:97:f9:0a:19:5c:33:c6:4a:1b:61:01:4e:ad:f1:6d:2a:2f: 6f:51:fa:43:70:af:a8:58:54:fe:b1:c6:25:d5:54:4d:00:53: 0d:7b:57:09:63:0e:fa:a0:f3:6a:a7:a6:4f:d8:52:a1:2a:d2: 20:b9:f6:b9:5f:35:44:ec:1f:85:1d:6d:23:2b:ea:bb:40:71: fa:41:9d:a9:83:97:32:22:57:d5:a3:8d:a6:88:05:2d:fc:53: 0d:54:39:07 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUI8kQepa8mTM4L3pZT+/qEm3N7LIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBEMjk1QkY0NjJGM0JEOTgzRkE3OTE0QkI0NkVDNUVD OEFDQzlEODAeFw0yNjAxMjExNjUxNTRaFw0yNzAxMjAxNjU2NTRaMDMxMTAvBgNV BAMTKEIxQUY1ODVCODgyNjJEMkFGMTY1QTM3Q0Q3NUU3NTc3NUM4MDEyNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP2knjARyRGvEa1lTBHieiDMdd eh1StHs0pRhrDPplafUspya+9tEp5i0GwpCd5uVrPXlkcuZ1/KGz7LZ4LB3sNKLO 60+BWLaGhAgF23gnAL4AJpIpRf1emDo7VNVJoDTOXYsAvxrDcucjbePEk2VkyvyR 8Bl9uYbwHuCxreZcO1WKcGuxvcpxtJZAC61f5K36JX7/PPmFpeMe6oolmG+GhKbe +VOAFL3Uv3xYKUtYhbLjzIck4dkWFPQijNNFnHKYbI1yDZx0F7SUGpafGnTkt0jG yDW4CmFASwr7BA5EYvgCJ4hDPAKqLRJ3AFtp3t1YbS2Ncl70dqPIYqx+g/bNAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUsa9YW4gmLSrxZaN81151d1yAEmswHwYDVR0j BBgwFoAUgNKVv0YvO9mD+nkUu0bsXsisydgwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS5nbnMubmV0LmJyL3JlcG8vR25zLzAv ODBEMjk1QkY0NjJGM0JEOTgzRkE3OTE0QkI0NkVDNUVDOEFDQzlEOC5jcmwweAYI KwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdp c3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MEQyOTVCRjQ2MkYzQkQ5ODNGQTc5 MTRCQjQ2RUM1RUM4QUNDOUQ4LmNlcjBzBggrBgEFBQcBCwRnMGUwYwYIKwYBBQUH MAuGV3JzeW5jOi8vcnBraS5nbnMubmV0LmJyL3JlcG8vR25zLzAvMzIzODMwMzQz YTM2MzEzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM4MzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAKAQGFDANBgkqhkiG9w0BAQsFAAOCAQEAgrZPdtkRx3mgayzEsw4v8/B9cjkS xow83F2eU/HRnUHtHEqjSJgi58M4TfooLTJI2tB3eAnOfxVTbI+iUiZPtrcDIp0J mmDZd6R0NwgWAovj3vgZQi5XGMRUiNmSh3RS2XrrCuA5ICQumgUNq2Ucf/vU+R9c udRtaQ7T6fGQ3tD6CUFcGXs0vG6ELGaNFOxDx/k9VfPGWpZWc5wznuNpIvF2l5f5 ChlcM8ZKG2EBTq3xbSovb1H6Q3CvqFhU/rHGJdVUTQBTDXtXCWMO+qDzaqemT9hS oSrSILn2uV81ROwfhR1tIyvqu0Bx+kGdqYOXMiJX1aONpogFLfxTDVQ5Bw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:41 2026 by rpki-client