$ rpki-client -vvf krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33613a3a2f34382d3438203d3e203631353734.roa File: 323830343a323639633a33613a3a2f34382d3438203d3e203631353734.roa (raw, json) Hash identifier: 7BOGvsSs9kbI6YBDC0j+KriGmGgJwV/nrRP2EMNkdGw= Subject key identifier: 43:43:A2:D4:2B:22:34:88:DF:17:AB:1C:5D:E7:04:0D:26:7A:E0:EC Certificate issuer: /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Certificate serial: 4A62A63717370DE74646FE6CBFD6B010E024A540 Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject info access: rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33613a3a2f34382d3438203d3e203631353734.roa Signing time: Tue 11 Aug 2026 17:53:52 +0000 ROA not before: Tue 11 Aug 2026 17:48:52 +0000 ROA not after: Tue 10 Aug 2027 17:53:52 +0000 asID: 61574 IP address blocks: 2804:269c:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 13 Aug 2026 15:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:62:a6:37:17:37:0d:e7:46:46:fe:6c:bf:d6:b0:10:e0:24:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Validity Not Before: Aug 11 17:48:52 2026 GMT Not After : Aug 10 17:53:52 2027 GMT Subject: CN=4343A2D42B223488DF17AB1C5DE7040D267AE0EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:46:26:16:14:42:3a:e4:82:ea:b0:2b:29: e8:a0:8d:50:b1:a4:94:e9:34:85:86:80:95:f6:a0: 27:c8:bd:36:75:42:ec:a3:91:a5:83:93:f9:75:a7: 82:89:4a:9d:55:66:5a:88:dc:d6:3d:57:2b:45:f2: 6a:62:34:b9:e6:5d:48:d6:23:b5:3f:36:a7:8c:13: f9:73:be:71:71:fa:8c:16:24:7d:5b:4c:28:e9:94: e8:e8:d8:9e:1e:ba:0d:8f:39:0b:07:ec:1d:ec:d1: ca:9d:6b:ff:6b:13:33:be:c4:22:e5:9e:33:b5:b7: 98:5e:9c:9e:c2:2d:f1:be:b2:e8:1b:70:73:a9:00: f2:37:88:c0:01:20:18:6f:18:8e:03:0c:bd:57:d3: ad:43:06:48:c8:95:d3:29:69:ac:f0:d2:08:2b:ed: 05:42:f6:18:00:ce:38:14:e2:92:5d:02:61:af:ab: c8:8d:c5:6a:bd:b1:1e:22:50:a7:23:89:4d:b5:1c: fd:c1:5f:56:57:f5:eb:73:ca:eb:bc:cf:de:96:c2: 26:ac:8e:b9:7b:0f:96:e0:b3:29:85:e3:52:08:d5: 46:d2:f8:b2:0a:76:c7:16:fc:d1:7e:f9:42:4d:7e: 0b:83:c6:5b:c1:1d:1d:ee:68:d4:66:70:aa:e1:60: b9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:43:A2:D4:2B:22:34:88:DF:17:AB:1C:5D:E7:04:0D:26:7A:E0:EC X509v3 Authority Key Identifier: keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject Information Access: Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33613a3a2f34382d3438203d3e203631353734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:269c:3a::/48 Signature Algorithm: sha256WithRSAEncryption 84:4b:3f:20:26:1e:ce:00:cf:56:29:da:ca:7b:23:25:fa:92: 48:13:52:88:de:d2:bd:c2:3a:82:3f:2a:ac:52:b1:bf:f8:da: 95:14:e9:6f:d3:06:8e:8d:cc:cf:74:df:4e:99:a6:f4:a5:e0: 53:70:a0:ec:7a:7c:46:21:a8:13:c9:fc:e8:63:99:a4:57:ca: 3c:1c:b7:f8:62:1d:fd:7d:5e:01:78:b2:a2:45:4c:f7:5b:e5: 09:38:ce:44:c1:d5:e4:3e:63:cb:95:94:1f:82:91:45:df:7b: 6e:85:59:c9:07:60:d5:3b:85:82:60:f4:b1:a7:c8:7a:55:c4: bf:e1:a0:17:cd:8b:a2:a4:0c:1c:29:8a:ea:b2:fb:53:4b:23: 24:2e:06:ec:ba:49:c8:3e:fb:eb:22:44:59:34:e4:39:ca:e1: 33:82:b0:74:e2:c2:d2:06:e3:bd:a3:53:44:b2:d4:34:33:e6: bd:14:c4:14:ac:1b:03:d8:f0:e4:ac:9a:63:e1:8e:cc:76:1d: 48:5f:24:79:62:bb:0d:76:8c:63:2d:99:f1:e7:3c:58:d2:69: 4d:76:4e:52:e0:00:2c:47:0c:37:8b:f5:bd:e1:48:ff:87:21: 5b:b4:98:0d:2d:53:7c:10:54:34:af:d0:51:67:eb:a0:8a:29: 33:b7:2a:4d -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUSmKmNxc3DedGRv5sv9awEOAkpUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz MkM3MUREMjAeFw0yNjA4MTExNzQ4NTJaFw0yNzA4MTAxNzUzNTJaMDMxMTAvBgNV BAMTKDQzNDNBMkQ0MkIyMjM0ODhERjE3QUIxQzVERTcwNDBEMjY3QUUwRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAkYmFhRCOuSC6rArKeigjVCx pJTpNIWGgJX2oCfIvTZ1QuyjkaWDk/l1p4KJSp1VZlqI3NY9VytF8mpiNLnmXUjW I7U/NqeME/lzvnFx+owWJH1bTCjplOjo2J4eug2POQsH7B3s0cqda/9rEzO+xCLl njO1t5henJ7CLfG+sugbcHOpAPI3iMABIBhvGI4DDL1X061DBkjIldMpaazw0ggr 7QVC9hgAzjgU4pJdAmGvq8iNxWq9sR4iUKcjiU21HP3BX1ZX9etzyuu8z96Wwias jrl7D5bgsymF41II1UbS+LIKdscW/NF++UJNfguDxlvBHR3uaNRmcKrhYLkZAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUQ0Oi1CsiNIjfF6scXecEDSZ64OwwHwYDVR0j BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjCB hwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL2tyaWxsLmRhY3Mu dXR3ZW50ZS5ubC9yZXBvL3V0d2VudGUvMS8zMjM4MzAzNDNhMzIzNjM5NjMzYTMz NjEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzNzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA KAQmnAA6MA0GCSqGSIb3DQEBCwUAA4IBAQCESz8gJh7OAM9WKdrKeyMl+pJIE1KI 3tK9wjqCPyqsUrG/+NqVFOlv0waOjczPdN9Omab0peBTcKDsenxGIagTyfzoY5mk V8o8HLf4Yh39fV4BeLKiRUz3W+UJOM5EwdXkPmPLlZQfgpFF33tuhVnJB2DVO4WC YPSxp8h6VcS/4aAXzYuipAwcKYrqsvtTSyMkLgbsuknIPvvrIkRZNOQ5yuEzgrB0 4sLSBuO9o1NEstQ0M+a9FMQUrBsD2PDkrJpj4Y7Mdh1IXyR5YrsNdoxjLZnx5zxY 0mlNdk5S4AAsRww3i/W94Uj/hyFbtJgNLVN8EFQ0r9BRZ+ugiikztypN -----END CERTIFICATE-----Generated at Thu Aug 13 07:56:29 2026 by rpki-client