$ rpki-client -vvf krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33393a3a2f34382d3438203d3e203631353734.roa File: 323830343a323639633a33393a3a2f34382d3438203d3e203631353734.roa (raw, json) Hash identifier: zNPT+iMyg6qlGByIxLinNL048eUbWMvzlRT7s+z9hKA= Subject key identifier: FB:C5:E2:1B:44:73:8B:7C:8D:30:8A:C2:C1:68:47:87:0F:7C:FF:09 Certificate issuer: /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Certificate serial: 5FFB5B2C9E6D6E4DA9A7CC5132058A23362DEA87 Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject info access: rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33393a3a2f34382d3438203d3e203631353734.roa Signing time: Tue 11 Aug 2026 17:53:52 +0000 ROA not before: Tue 11 Aug 2026 17:48:52 +0000 ROA not after: Tue 10 Aug 2027 17:53:52 +0000 asID: 61574 IP address blocks: 2804:269c:39::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 13 Aug 2026 15:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:fb:5b:2c:9e:6d:6e:4d:a9:a7:cc:51:32:05:8a:23:36:2d:ea:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Validity Not Before: Aug 11 17:48:52 2026 GMT Not After : Aug 10 17:53:52 2027 GMT Subject: CN=FBC5E21B44738B7C8D308AC2C16847870F7CFF09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6a:9e:6b:d6:e9:f8:20:e3:04:bc:93:8b:64: 45:aa:be:f2:be:4c:7d:1c:0e:25:48:e0:c3:27:06: ac:66:58:08:c6:c4:d9:ff:87:6f:d7:cf:97:ed:3c: d9:8e:02:e3:33:f6:9a:39:d8:59:15:0e:25:35:4a: 52:c3:90:45:4f:ee:91:16:d2:a7:ac:ae:56:bc:6a: 76:7d:06:dd:66:a5:6d:a0:ba:50:ff:65:12:77:9c: 37:7b:7f:40:61:8f:c4:6a:6e:d2:3d:1f:6a:6f:8d: 27:a9:14:8e:5d:75:4c:fe:33:5b:6c:5c:3f:e1:c7: ab:39:5a:6a:3f:49:f0:ae:a0:fd:71:b3:12:d8:c6: 9d:06:7c:fb:f8:3b:94:0e:83:f7:2d:80:ea:1e:27: 78:9c:3f:8f:94:e4:88:bf:ef:53:77:62:11:d0:d0: 55:a3:50:3b:fb:c5:b3:81:58:82:13:f4:11:6c:11: 04:66:d3:7f:f9:b2:55:b7:ae:b1:64:37:2f:d4:ca: 16:5a:f4:23:93:d6:ff:16:1c:e9:ae:66:47:13:19: fa:53:38:19:16:e0:4f:7e:96:4e:0e:11:d6:22:18: 47:70:8d:ab:61:dd:b7:da:f5:7a:ad:ea:85:50:a3: 72:e4:82:98:19:26:9c:f3:c8:39:07:e1:0e:dd:2c: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C5:E2:1B:44:73:8B:7C:8D:30:8A:C2:C1:68:47:87:0F:7C:FF:09 X509v3 Authority Key Identifier: keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject Information Access: Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33393a3a2f34382d3438203d3e203631353734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:269c:39::/48 Signature Algorithm: sha256WithRSAEncryption 68:4a:00:f4:ca:09:a4:3d:e3:77:f4:65:91:16:e8:fe:e2:8d: ca:59:d9:87:51:be:84:ae:84:34:d0:d7:73:b1:bc:34:95:46: 48:80:ef:6e:15:ea:f8:e1:88:1b:05:36:8c:e6:b3:1e:3b:99: 28:ba:b0:25:44:0f:73:44:d1:2e:42:b2:ff:c9:cd:ef:71:52: a3:86:c5:12:3a:97:1d:6e:c2:e5:cb:1a:20:65:24:0d:e2:ad: 2f:eb:08:61:b7:d8:53:e5:55:9b:5f:c3:8d:8e:d9:69:07:4a: 4d:45:ca:4d:4b:b1:03:80:a1:dd:85:4d:3b:d4:ec:a5:7b:8f: 32:9f:9f:75:11:99:bd:51:d0:54:ac:e4:89:84:1d:4c:02:5e: 6d:74:59:8c:17:7f:be:29:56:52:d5:b1:f5:12:59:aa:6e:7c: ac:68:90:50:af:a7:0a:cc:df:ca:c9:a8:0c:f3:24:ce:76:f3: 0a:3e:cf:d5:9f:2a:ae:19:7f:6b:e2:77:00:16:7b:2e:e9:4d: ea:5e:c1:98:04:bc:cc:77:00:bc:3e:04:67:87:2d:50:48:6c: 65:91:7a:0d:1f:cd:4a:64:a6:dd:5f:fa:1f:a6:41:5c:6d:02: 57:22:80:5c:d3:87:9c:fb:3c:91:ce:c2:af:c0:c1:49:54:9d: 41:21:24:ea -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUX/tbLJ5tbk2pp8xRMgWKIzYt6ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz MkM3MUREMjAeFw0yNjA4MTExNzQ4NTJaFw0yNzA4MTAxNzUzNTJaMDMxMTAvBgNV BAMTKEZCQzVFMjFCNDQ3MzhCN0M4RDMwOEFDMkMxNjg0Nzg3MEY3Q0ZGMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbap5r1un4IOMEvJOLZEWqvvK+ TH0cDiVI4MMnBqxmWAjGxNn/h2/Xz5ftPNmOAuMz9po52FkVDiU1SlLDkEVP7pEW 0qesrla8anZ9Bt1mpW2gulD/ZRJ3nDd7f0Bhj8RqbtI9H2pvjSepFI5ddUz+M1ts XD/hx6s5Wmo/SfCuoP1xsxLYxp0GfPv4O5QOg/ctgOoeJ3icP4+U5Ii/71N3YhHQ 0FWjUDv7xbOBWIIT9BFsEQRm03/5slW3rrFkNy/UyhZa9COT1v8WHOmuZkcTGfpT OBkW4E9+lk4OEdYiGEdwjath3bfa9Xqt6oVQo3LkgpgZJpzzyDkH4Q7dLLp1AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU+8XiG0Rzi3yNMIrCwWhHhw98/wkwHwYDVR0j BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjCB hwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL2tyaWxsLmRhY3Mu dXR3ZW50ZS5ubC9yZXBvL3V0d2VudGUvMS8zMjM4MzAzNDNhMzIzNjM5NjMzYTMz MzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzNzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA KAQmnAA5MA0GCSqGSIb3DQEBCwUAA4IBAQBoSgD0ygmkPeN39GWRFuj+4o3KWdmH Ub6EroQ00Ndzsbw0lUZIgO9uFer44YgbBTaM5rMeO5kourAlRA9zRNEuQrL/yc3v cVKjhsUSOpcdbsLlyxogZSQN4q0v6whht9hT5VWbX8ONjtlpB0pNRcpNS7EDgKHd hU071Oyle48yn591EZm9UdBUrOSJhB1MAl5tdFmMF3++KVZS1bH1ElmqbnysaJBQ r6cKzN/KyagM8yTOdvMKPs/VnyquGX9r4ncAFnsu6U3qXsGYBLzMdwC8PgRnhy1Q SGxlkXoNH81KZKbdX/ofpkFcbQJXIoBc04ec+zyRzsKvwMFJVJ1BISTq -----END CERTIFICATE-----Generated at Thu Aug 13 07:56:29 2026 by rpki-client