$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/1/AS61575.roa File: AS61575.roa (raw, json) Hash identifier: zEw5aVoMUZLF+uF8932t0tJXOYy6Db0+urWp45CLqWM= Subject key identifier: AA:6F:FC:18:9E:BE:39:6C:37:E6:7B:5F:6E:FF:97:CE:DD:5C:76:2A Certificate issuer: /CN=F79647511753842C2E53F2B5A8CA789825A09B7D Certificate serial: 3D5784EFF083A93089AC4F03EA11F0BD53CE0AB7 Authority key identifier: F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/AS61575.roa Signing time: Mon 15 Jun 2026 21:23:21 +0000 ROA not before: Mon 15 Jun 2026 21:18:21 +0000 ROA not after: Mon 14 Jun 2027 21:23:21 +0000 asID: 61575 IP address blocks: 138.185.229.0/24 maxlen: 24 138.185.231.0/24 maxlen: 24 2804:269c:fec0::/48 maxlen: 48 2804:269c:fec1::/48 maxlen: 48 2804:269c:fec2::/48 maxlen: 48 2804:269c:fec3::/48 maxlen: 48 2804:269c:fec4::/48 maxlen: 48 2804:269c:fec5::/48 maxlen: 48 2804:269c:fec6::/48 maxlen: 48 2804:269c:fec7::/48 maxlen: 48 2804:269c:fec8::/48 maxlen: 48 2804:269c:fec9::/48 maxlen: 48 2804:269c:feca::/48 maxlen: 48 2804:269c:fecb::/48 maxlen: 48 2804:269c:fecc::/48 maxlen: 48 2804:269c:fecd::/48 maxlen: 48 2804:269c:fece::/48 maxlen: 48 2804:269c:fecf::/48 maxlen: 48 2804:269c:fed0::/48 maxlen: 48 2804:269c:fed1::/48 maxlen: 48 2804:269c:fed2::/48 maxlen: 48 2804:269c:fed3::/48 maxlen: 48 2804:269c:fed4::/48 maxlen: 48 2804:269c:fed5::/48 maxlen: 48 2804:269c:fed6::/48 maxlen: 48 2804:269c:fed7::/48 maxlen: 48 2804:269c:fed8::/48 maxlen: 48 2804:269c:fed9::/48 maxlen: 48 2804:269c:feda::/48 maxlen: 48 2804:269c:fedb::/48 maxlen: 48 2804:269c:fedc::/48 maxlen: 48 2804:269c:fedd::/48 maxlen: 48 2804:269c:fede::/48 maxlen: 48 2804:269c:fedf::/48 maxlen: 48 2804:269c:fee0::/48 maxlen: 48 2804:269c:fee1::/48 maxlen: 48 2804:269c:fee2::/48 maxlen: 48 2804:269c:fee3::/48 maxlen: 48 2804:269c:fee4::/48 maxlen: 48 2804:269c:fee5::/48 maxlen: 48 2804:269c:fee6::/48 maxlen: 48 2804:269c:fee7::/48 maxlen: 48 2804:269c:fee8::/48 maxlen: 48 2804:269c:fee9::/48 maxlen: 48 2804:269c:feea::/48 maxlen: 48 2804:269c:feeb::/48 maxlen: 48 2804:269c:feec::/48 maxlen: 48 2804:269c:feed::/48 maxlen: 48 2804:269c:feee::/48 maxlen: 48 2804:269c:feef::/48 maxlen: 48 2804:269c:fef0::/48 maxlen: 48 2804:269c:fef1::/48 maxlen: 48 2804:269c:fef2::/48 maxlen: 48 2804:269c:fef3::/48 maxlen: 48 2804:269c:fef4::/48 maxlen: 48 2804:269c:fef5::/48 maxlen: 48 2804:269c:fef6::/48 maxlen: 48 2804:269c:fef7::/48 maxlen: 48 2804:269c:fef8::/48 maxlen: 48 2804:269c:fef9::/48 maxlen: 48 2804:269c:fefa::/48 maxlen: 48 2804:269c:fefb::/48 maxlen: 48 2804:269c:fefc::/48 maxlen: 48 2804:269c:fefd::/48 maxlen: 48 2804:269c:fefe::/48 maxlen: 48 2804:269c:feff::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 28 Jun 2026 05:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:57:84:ef:f0:83:a9:30:89:ac:4f:03:ea:11:f0:bd:53:ce:0a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79647511753842C2E53F2B5A8CA789825A09B7D Validity Not Before: Jun 15 21:18:21 2026 GMT Not After : Jun 14 21:23:21 2027 GMT Subject: CN=AA6FFC189EBE396C37E67B5F6EFF97CEDD5C762A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:50:c8:e8:b0:09:5f:46:be:4f:5f:31:31: b7:5a:b4:83:25:2b:63:87:d3:3f:4f:04:45:08:8f: 53:eb:04:53:44:1f:18:4b:b7:bf:37:1c:73:08:bd: 49:2e:d8:ed:cf:7c:8c:fd:68:7c:5d:f0:96:85:a3: d0:74:50:7c:82:98:11:f3:8b:c1:d1:c9:35:44:85: e2:25:b4:31:d9:a4:55:3e:24:fb:b4:bd:eb:06:db: 10:d1:23:93:e5:53:58:70:4a:9a:0f:21:fc:ad:da: ee:3d:62:90:1b:18:f6:0d:c9:99:f8:9d:b5:38:b1: d9:0a:a0:5d:db:c3:fd:a4:d7:98:45:0e:6a:14:23: 31:f4:4b:ee:08:35:b7:86:be:68:a9:82:90:3f:46: 83:81:11:6e:e1:60:83:d6:69:7a:41:9a:2b:5e:55: e5:d8:5a:34:05:fd:45:b2:00:29:4a:8c:47:49:5b: 5e:bc:a7:d4:94:05:5f:8a:29:f2:6c:fb:c6:20:54: 9b:35:08:67:d1:8e:12:24:d6:0f:67:6d:48:52:50: 26:27:08:a1:6b:91:ec:92:6f:89:d9:d1:66:32:a5: 67:55:c4:eb:14:53:85:70:37:7d:0f:be:f7:2d:c8: 0d:71:8b:fe:0f:0d:07:1c:2c:4c:62:4d:2c:d3:fe: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6F:FC:18:9E:BE:39:6C:37:E6:7B:5F:6E:FF:97:CE:DD:5C:76:2A X509v3 Authority Key Identifier: keyid:F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/AS61575.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.229.0/24 138.185.231.0/24 IPv6: 2804:269c:fec0::/42 Signature Algorithm: sha256WithRSAEncryption 12:cf:cd:75:81:ed:5d:4f:e9:af:89:b8:dd:62:fe:bf:91:98: aa:b1:0d:6e:1f:ef:65:71:1e:6f:d5:8b:ec:7a:36:92:32:ce: 9a:97:1c:9d:f8:a6:4d:73:0b:9e:2c:ba:9c:26:35:05:2b:36: 7e:80:df:67:b8:73:ee:80:50:d7:a3:ee:df:d6:fb:bb:f5:9e: e3:62:f5:29:a2:b0:a9:7d:be:cb:fa:88:84:48:79:d9:2c:42: da:ff:b9:4b:96:60:c3:da:a6:9f:45:04:cd:de:af:32:38:61: 05:b0:9e:ba:ac:e6:bc:51:7d:4b:7a:89:07:38:91:51:8d:c0: 05:1b:74:e6:da:0b:c6:84:67:6a:3d:00:80:31:05:0e:a6:64: b9:27:a1:9f:c1:bb:e0:23:81:c6:88:5e:d3:e0:03:17:9b:9a: 68:e5:86:ef:24:ca:79:6b:35:8f:0e:b0:d9:cb:e7:70:1a:c2: 4f:e1:5d:40:16:b4:2b:47:af:37:4b:4c:5a:e7:83:55:1f:79: 49:2a:62:38:6b:6e:d6:ff:49:cd:e6:80:f1:8f:47:96:ee:59: 9c:1a:59:5f:ac:43:f4:60:09:90:8b:2d:9c:90:33:f7:cd:c3: 31:a6:bb:aa:54:3f:a6:fd:03:52:f0:ed:82:fc:88:82:99:53: 57:f0:0b:fb -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgIUPVeE7/CDqTCJrE8D6hHwvVPOCrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NjQ3NTExNzUzODQyQzJFNTNGMkI1QThDQTc4OTgy NUEwOUI3RDAeFw0yNjA2MTUyMTE4MjFaFw0yNzA2MTQyMTIzMjFaMDMxMTAvBgNV BAMTKEFBNkZGQzE4OUVCRTM5NkMzN0U2N0I1RjZFRkY5N0NFREQ1Qzc2MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClf1DI6LAJX0a+T18xMbdatIMl K2OH0z9PBEUIj1PrBFNEHxhLt783HHMIvUku2O3PfIz9aHxd8JaFo9B0UHyCmBHz i8HRyTVEheIltDHZpFU+JPu0vesG2xDRI5PlU1hwSpoPIfyt2u49YpAbGPYNyZn4 nbU4sdkKoF3bw/2k15hFDmoUIzH0S+4INbeGvmipgpA/RoOBEW7hYIPWaXpBmite VeXYWjQF/UWyAClKjEdJW168p9SUBV+KKfJs+8YgVJs1CGfRjhIk1g9nbUhSUCYn CKFrkeySb4nZ0WYypWdVxOsUU4VwN30PvvctyA1xi/4PDQccLExiTSzT/k31AgMB AAGjggICMIIB/jAdBgNVHQ4EFgQUqm/8GJ6+OWw35ntfbv+Xzt1cdiowHwYDVR0j BBgwFoAU95ZHURdThCwuU/K1qMp4mCWgm30wDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMS9GNzk2NDc1MTE3NTM4NDJDMkU1M0Yy QjVBOENBNzg5ODI1QTA5QjdELmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xL0Y3OTY0NzUxMTc1Mzg0MkMyRTUzRjJCNUE4Q0E3ODk4MjVBMDlCN0QuY2Vy MGQGCCsGAQUFBwELBFgwVjBUBggrBgEFBQcwC4ZIcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8xL0FTNjE1 NzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBACKueUDBACKuecwDwQCAAIwCQMHBigEJpz+wDANBgkqhkiG 9w0BAQsFAAOCAQEAEs/NdYHtXU/pr4m43WL+v5GYqrENbh/vZXEeb9WL7Ho2kjLO mpccnfimTXMLniy6nCY1BSs2foDfZ7hz7oBQ16Pu39b7u/We42L1KaKwqX2+y/qI hEh52SxC2v+5S5Zgw9qmn0UEzd6vMjhhBbCeuqzmvFF9S3qJBziRUY3ABRt05toL xoRnaj0AgDEFDqZkuSehn8G74COBxohe0+ADF5uaaOWG7yTKeWs1jw6w2cvncBrC T+FdQBa0K0evN0tMWueDVR95SSpiOGtu1v9JzeaA8Y9Hlu5ZnBpZX6xD9GAJkIst nJAz983DMaa7qlQ/pv0DUvDtgvyIgplTV/AL+w== -----END CERTIFICATE-----Generated at Sat Jun 27 13:09:23 2026 by rpki-client