$ rpki-client -vvf krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33383a3a2f34382d3438203d3e203631353734.roa File: 323830343a323639633a33383a3a2f34382d3438203d3e203631353734.roa (raw, json) Hash identifier: M1fvydSvwY4egqC+bDLjih8yo6fQtenuiU0OD7niQ0Y= Subject key identifier: 5A:85:CE:4A:15:A4:90:BE:77:BC:55:B0:5A:E6:BC:86:86:E2:E7:EA Certificate issuer: /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Certificate serial: 307C14DBC89C97B559D4CAA6655199831167375F Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject info access: rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33383a3a2f34382d3438203d3e203631353734.roa Signing time: Tue 11 Aug 2026 17:53:53 +0000 ROA not before: Tue 11 Aug 2026 17:48:53 +0000 ROA not after: Tue 10 Aug 2027 17:53:53 +0000 asID: 61574 IP address blocks: 2804:269c:38::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 13 Aug 2026 15:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7c:14:db:c8:9c:97:b5:59:d4:ca:a6:65:51:99:83:11:67:37:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Validity Not Before: Aug 11 17:48:53 2026 GMT Not After : Aug 10 17:53:53 2027 GMT Subject: CN=5A85CE4A15A490BE77BC55B05AE6BC8686E2E7EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:09:c9:6c:29:aa:4d:b3:05:2e:d8:25:c6:2b: 3a:71:32:fa:9f:5a:46:88:03:1b:39:9e:b4:8c:5f: fe:4b:55:18:58:fb:1c:00:c5:75:ab:14:dd:a0:db: 8f:9f:d9:2e:49:12:e6:ef:3e:04:87:2b:48:0b:f4: 1b:42:2d:40:44:a0:e6:73:28:6d:7a:d8:45:4a:c4: d5:44:82:c3:d8:ce:11:44:23:aa:b6:20:9d:bd:b1: cf:fa:b5:b5:4f:0c:6b:8f:c4:a3:4e:2e:4a:bd:d2: 66:49:5a:db:67:07:c2:99:09:9e:b9:d6:02:08:fa: 81:4e:4a:d8:46:fb:6e:83:e9:83:d1:1a:8f:f6:c1: a9:7b:43:37:02:86:12:31:20:5a:96:35:da:92:bf: 90:4b:15:78:7f:0d:31:29:bc:d2:06:4d:4b:27:8c: f7:24:e3:d4:a3:eb:5a:5a:b5:e1:fb:1b:29:01:ec: 9e:5d:e9:02:1b:53:50:f5:81:4a:f9:bc:c3:04:ba: 7f:a8:be:1a:a4:95:00:7d:52:47:8e:ac:8e:8f:53: 8c:e6:cd:06:2c:7c:04:2b:1b:51:e1:c1:1b:e0:93: 25:64:f4:fa:57:df:90:3f:2d:50:a8:ae:46:67:3d: 3f:ac:10:7f:de:29:c3:13:e5:03:e5:75:bd:28:47: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:85:CE:4A:15:A4:90:BE:77:BC:55:B0:5A:E6:BC:86:86:E2:E7:EA X509v3 Authority Key Identifier: keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject Information Access: Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33383a3a2f34382d3438203d3e203631353734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:269c:38::/48 Signature Algorithm: sha256WithRSAEncryption 65:c4:b5:0c:07:c1:88:54:79:a8:a3:52:d3:07:80:fc:75:01: ad:d7:b9:61:43:5a:00:48:64:96:d7:f3:5b:88:c5:e7:ea:18: 67:c1:f7:12:13:52:e1:a4:00:0b:b0:4c:53:e3:61:0b:f3:4c: 41:9d:e2:e7:b5:6b:c0:75:fd:16:a9:a0:ea:b8:a7:23:70:43: 92:7d:04:fc:cb:9f:57:62:5d:9b:c5:58:fb:c6:21:af:f6:62: 5d:71:10:14:e2:19:69:6f:d5:03:6c:57:33:db:e5:d2:4c:2d: e2:12:01:3a:b0:b9:bc:86:be:bb:99:95:41:41:29:03:0b:ef: 14:c6:25:a4:69:3a:75:e6:a4:eb:ef:e2:14:ac:09:f5:43:ae: e4:5b:9e:cb:70:99:02:b1:0b:63:f2:f5:04:73:47:02:e7:83: 9e:2e:b8:10:e9:4d:15:d3:59:9e:9a:ed:a5:49:15:55:4d:04: e2:69:13:1a:89:c3:57:27:bf:ac:a1:61:73:14:2c:1f:c9:26: 86:57:5e:52:0b:e1:44:26:3e:44:5b:ff:12:29:b7:1b:12:68: ab:61:71:15:9b:2c:ee:44:43:e4:ef:68:a7:47:93:ea:d7:bf: 0e:95:fe:74:61:86:4f:6b:0b:bf:ba:4b:e9:9e:a4:3a:87:7f: fe:7d:ce:c0 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUMHwU28icl7VZ1MqmZVGZgxFnN18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz MkM3MUREMjAeFw0yNjA4MTExNzQ4NTNaFw0yNzA4MTAxNzUzNTNaMDMxMTAvBgNV BAMTKDVBODVDRTRBMTVBNDkwQkU3N0JDNTVCMDVBRTZCQzg2ODZFMkU3RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICclsKapNswUu2CXGKzpxMvqf WkaIAxs5nrSMX/5LVRhY+xwAxXWrFN2g24+f2S5JEubvPgSHK0gL9BtCLUBEoOZz KG162EVKxNVEgsPYzhFEI6q2IJ29sc/6tbVPDGuPxKNOLkq90mZJWttnB8KZCZ65 1gII+oFOSthG+26D6YPRGo/2wal7QzcChhIxIFqWNdqSv5BLFXh/DTEpvNIGTUsn jPck49Sj61pateH7GykB7J5d6QIbU1D1gUr5vMMEun+ovhqklQB9UkeOrI6PU4zm zQYsfAQrG1HhwRvgkyVk9PpX35A/LVCorkZnPT+sEH/eKcMT5QPldb0oR8iXAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUWoXOShWkkL53vFWwWua8hobi5+owHwYDVR0j BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjCB hwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL2tyaWxsLmRhY3Mu dXR3ZW50ZS5ubC9yZXBvL3V0d2VudGUvMS8zMjM4MzAzNDNhMzIzNjM5NjMzYTMz MzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzNzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA KAQmnAA4MA0GCSqGSIb3DQEBCwUAA4IBAQBlxLUMB8GIVHmoo1LTB4D8dQGt17lh Q1oASGSW1/NbiMXn6hhnwfcSE1LhpAALsExT42EL80xBneLntWvAdf0WqaDquKcj cEOSfQT8y59XYl2bxVj7xiGv9mJdcRAU4hlpb9UDbFcz2+XSTC3iEgE6sLm8hr67 mZVBQSkDC+8UxiWkaTp15qTr7+IUrAn1Q67kW57LcJkCsQtj8vUEc0cC54OeLrgQ 6U0V01memu2lSRVVTQTiaRMaicNXJ7+soWFzFCwfySaGV15SC+FEJj5EW/8SKbcb EmirYXEVmyzuREPk72inR5Pq178Olf50YYZPawu/ukvpnqQ6h3/+fc7A -----END CERTIFICATE-----Generated at Thu Aug 13 07:56:28 2026 by rpki-client