$ rpki-client -vvf krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33623a3a2f34382d3438203d3e203631353734.roa File: 323830343a323639633a33623a3a2f34382d3438203d3e203631353734.roa (raw, json) Hash identifier: l0rovz/6WsgBAiYRux16TcrNvuG6iYU3sL1sP6JQ8XM= Subject key identifier: 23:7E:F7:AF:0D:52:0C:27:12:22:6A:44:08:CA:06:0B:9C:7D:B2:94 Certificate issuer: /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Certificate serial: 7CE7F8E59E640220B9E2BDB39D61C5F3A5172E44 Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject info access: rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33623a3a2f34382d3438203d3e203631353734.roa Signing time: Tue 11 Aug 2026 17:53:53 +0000 ROA not before: Tue 11 Aug 2026 17:48:53 +0000 ROA not after: Tue 10 Aug 2027 17:53:53 +0000 asID: 61574 IP address blocks: 2804:269c:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 13 Aug 2026 15:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e7:f8:e5:9e:64:02:20:b9:e2:bd:b3:9d:61:c5:f3:a5:17:2e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Validity Not Before: Aug 11 17:48:53 2026 GMT Not After : Aug 10 17:53:53 2027 GMT Subject: CN=237EF7AF0D520C2712226A4408CA060B9C7DB294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3f:e9:fb:85:78:bc:46:02:10:a1:f5:30:56: 79:dd:7e:91:15:7f:7f:d4:8f:ca:d4:34:71:d0:38: ad:e5:87:5a:5f:29:75:12:e1:2b:82:b6:18:aa:8f: 32:ea:a2:8e:9c:56:5d:54:d1:58:b7:92:71:bf:92: 31:d2:26:00:38:aa:33:1b:2c:27:f5:40:8c:92:6e: c7:4b:8f:0e:28:00:e4:94:16:8f:fc:79:bc:d2:0a: 69:8d:da:91:83:e1:ab:61:9d:7a:02:f7:2f:02:04: 83:39:25:78:f4:26:0f:7a:94:b8:fa:33:56:55:1f: 87:72:04:29:15:bd:ba:f9:54:73:10:4e:8f:9a:5f: 28:d8:ef:af:78:a2:c5:89:3e:19:82:f7:62:83:4e: 94:51:61:b3:8a:6a:68:c6:2f:06:36:ad:3c:20:68: c1:b5:e6:58:b0:ed:bb:a6:7a:d3:88:70:fb:04:7d: c3:80:22:a1:ec:01:51:6d:40:79:0c:bc:5f:19:c1: a9:51:d4:fe:bd:b0:a6:a2:c2:d0:4e:ae:12:bf:42: da:81:b6:1d:1d:c6:96:f4:ea:2a:f2:cb:21:93:34: cc:76:b5:92:a0:31:b0:46:03:73:9a:b7:ad:05:e9: 1d:4e:7d:12:56:90:33:39:31:b3:c8:f0:5b:b1:69: d0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7E:F7:AF:0D:52:0C:27:12:22:6A:44:08:CA:06:0B:9C:7D:B2:94 X509v3 Authority Key Identifier: keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject Information Access: Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33623a3a2f34382d3438203d3e203631353734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:269c:3b::/48 Signature Algorithm: sha256WithRSAEncryption 75:6f:ed:23:63:ca:7b:27:14:13:00:1a:3b:10:14:65:41:e7: 9e:64:64:50:72:4f:0f:c5:16:3a:93:a7:c2:96:73:41:ea:26: 87:d5:25:bd:02:f6:0f:4e:1c:98:47:2f:b2:54:35:19:89:3d: e9:1b:a3:1d:6d:68:a4:b2:b8:ed:c6:0c:54:5f:0d:fe:e3:64: e0:61:30:5b:a1:c3:3b:56:01:95:c5:47:25:4c:01:6e:8b:4d: d2:ca:3a:36:07:c0:c9:1d:26:f2:09:f1:1b:a2:7e:c0:35:1e: 3b:f5:2f:f3:70:ba:cd:21:21:a4:63:d1:51:f0:0e:19:f4:2b: c6:b6:f6:09:6d:89:0b:23:7e:24:cd:79:fb:b5:6b:0a:35:d5: 91:3f:8e:03:24:31:fa:2e:2d:c7:16:3f:e2:ab:81:7f:76:45: 94:52:7d:d9:48:dd:cf:60:da:9c:98:0a:17:e2:1a:ff:ee:8c: ce:74:1f:d3:a1:3b:b2:40:16:5d:ec:10:4e:90:f5:6b:90:40: 7d:c6:e5:e6:40:6e:e2:70:69:46:cf:57:8e:0e:f8:16:77:f6: 75:38:2b:21:c5:0e:8e:0f:69:ca:39:14:6d:dd:30:1b:39:f8: d3:51:46:05:a0:c2:41:15:1b:a3:3c:bd:9a:8c:22:de:3e:cb: 75:c9:92:a2 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUfOf45Z5kAiC54r2znWHF86UXLkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz MkM3MUREMjAeFw0yNjA4MTExNzQ4NTNaFw0yNzA4MTAxNzUzNTNaMDMxMTAvBgNV BAMTKDIzN0VGN0FGMEQ1MjBDMjcxMjIyNkE0NDA4Q0EwNjBCOUM3REIyOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPP+n7hXi8RgIQofUwVnndfpEV f3/Uj8rUNHHQOK3lh1pfKXUS4SuCthiqjzLqoo6cVl1U0Vi3knG/kjHSJgA4qjMb LCf1QIySbsdLjw4oAOSUFo/8ebzSCmmN2pGD4athnXoC9y8CBIM5JXj0Jg96lLj6 M1ZVH4dyBCkVvbr5VHMQTo+aXyjY7694osWJPhmC92KDTpRRYbOKamjGLwY2rTwg aMG15liw7bumetOIcPsEfcOAIqHsAVFtQHkMvF8ZwalR1P69sKaiwtBOrhK/QtqB th0dxpb06iryyyGTNMx2tZKgMbBGA3Oat60F6R1OfRJWkDM5MbPI8FuxadA5AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUI373rw1SDCcSImpECMoGC5x9spQwHwYDVR0j BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjCB hwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL2tyaWxsLmRhY3Mu dXR3ZW50ZS5ubC9yZXBvL3V0d2VudGUvMS8zMjM4MzAzNDNhMzIzNjM5NjMzYTMz NjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzNzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA KAQmnAA7MA0GCSqGSIb3DQEBCwUAA4IBAQB1b+0jY8p7JxQTABo7EBRlQeeeZGRQ ck8PxRY6k6fClnNB6iaH1SW9AvYPThyYRy+yVDUZiT3pG6MdbWiksrjtxgxUXw3+ 42TgYTBbocM7VgGVxUclTAFui03Syjo2B8DJHSbyCfEbon7ANR479S/zcLrNISGk Y9FR8A4Z9CvGtvYJbYkLI34kzXn7tWsKNdWRP44DJDH6Li3HFj/iq4F/dkWUUn3Z SN3PYNqcmAoX4hr/7ozOdB/ToTuyQBZd7BBOkPVrkEB9xuXmQG7icGlGz1eODvgW d/Z1OCshxQ6OD2nKORRt3TAbOfjTUUYFoMJBFRujPL2ajCLePst1yZKi -----END CERTIFICATE-----Generated at Thu Aug 13 07:56:28 2026 by rpki-client