$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/2/AS61574.roa File: AS61574.roa (raw, json) Hash identifier: eJneB99VaXdbXbQQX53L9Fd+B+PKXNHGHA1vqbCsKH8= Subject key identifier: 60:DF:5E:3F:E3:D4:7C:78:27:A6:1B:D9:36:82:97:39:D0:98:5D:E9 Certificate issuer: /CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Certificate serial: 0651685AAEA54760FF9F8F03419FB24D1B0C236D Authority key identifier: 0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/AS61574.roa Signing time: Tue 11 Aug 2026 17:52:11 +0000 ROA not before: Tue 11 Aug 2026 17:47:11 +0000 ROA not after: Tue 10 Aug 2027 17:52:11 +0000 asID: 61574 IP address blocks: 138.185.229.0/24 maxlen: 24 138.185.230.0/24 maxlen: 24 2804:269c:c::/46 maxlen: 48 2804:269c:fe80::/48 maxlen: 48 2804:269c:fe81::/48 maxlen: 48 2804:269c:fe82::/48 maxlen: 48 2804:269c:fe83::/48 maxlen: 48 2804:269c:fe84::/48 maxlen: 48 2804:269c:fe85::/48 maxlen: 48 2804:269c:fe86::/48 maxlen: 48 2804:269c:fe87::/48 maxlen: 48 2804:269c:fe88::/48 maxlen: 48 2804:269c:fe89::/48 maxlen: 48 2804:269c:fe8a::/48 maxlen: 48 2804:269c:fe8b::/48 maxlen: 48 2804:269c:fe8c::/48 maxlen: 48 2804:269c:fe8d::/48 maxlen: 48 2804:269c:fe8e::/48 maxlen: 48 2804:269c:fe8f::/48 maxlen: 48 2804:269c:fe90::/48 maxlen: 48 2804:269c:fe91::/48 maxlen: 48 2804:269c:fe92::/48 maxlen: 48 2804:269c:fe93::/48 maxlen: 48 2804:269c:fe94::/48 maxlen: 48 2804:269c:fe95::/48 maxlen: 48 2804:269c:fe96::/48 maxlen: 48 2804:269c:fe97::/48 maxlen: 48 2804:269c:fe98::/48 maxlen: 48 2804:269c:fe99::/48 maxlen: 48 2804:269c:fe9a::/48 maxlen: 48 2804:269c:fe9b::/48 maxlen: 48 2804:269c:fe9c::/48 maxlen: 48 2804:269c:fe9d::/48 maxlen: 48 2804:269c:fe9e::/48 maxlen: 48 2804:269c:fe9f::/48 maxlen: 48 2804:269c:fea0::/48 maxlen: 48 2804:269c:fea1::/48 maxlen: 48 2804:269c:fea2::/48 maxlen: 48 2804:269c:fea3::/48 maxlen: 48 2804:269c:fea4::/48 maxlen: 48 2804:269c:fea5::/48 maxlen: 48 2804:269c:fea6::/48 maxlen: 48 2804:269c:fea7::/48 maxlen: 48 2804:269c:fea8::/48 maxlen: 48 2804:269c:fea9::/48 maxlen: 48 2804:269c:feaa::/48 maxlen: 48 2804:269c:feab::/48 maxlen: 48 2804:269c:feac::/48 maxlen: 48 2804:269c:fead::/48 maxlen: 48 2804:269c:feae::/48 maxlen: 48 2804:269c:feaf::/48 maxlen: 48 2804:269c:feb0::/48 maxlen: 48 2804:269c:feb1::/48 maxlen: 48 2804:269c:feb2::/48 maxlen: 48 2804:269c:feb3::/48 maxlen: 48 2804:269c:feb4::/48 maxlen: 48 2804:269c:feb5::/48 maxlen: 48 2804:269c:feb6::/48 maxlen: 48 2804:269c:feb7::/48 maxlen: 48 2804:269c:feb8::/48 maxlen: 48 2804:269c:feb9::/48 maxlen: 48 2804:269c:feba::/48 maxlen: 48 2804:269c:febb::/48 maxlen: 48 2804:269c:febc::/48 maxlen: 48 2804:269c:febd::/48 maxlen: 48 2804:269c:febe::/48 maxlen: 48 2804:269c:febf::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 13 Aug 2026 15:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:51:68:5a:ae:a5:47:60:ff:9f:8f:03:41:9f:b2:4d:1b:0c:23:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Validity Not Before: Aug 11 17:47:11 2026 GMT Not After : Aug 10 17:52:11 2027 GMT Subject: CN=60DF5E3FE3D47C7827A61BD936829739D0985DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:08:a9:30:c9:c0:25:81:ae:b7:56:50:ae:49: 4c:78:34:78:96:a6:54:9c:ce:54:51:d4:9a:d9:9a: b9:a8:32:6e:93:1e:46:1d:a5:4f:a5:fc:2f:d1:10: 71:cc:cd:ff:b7:b3:57:f5:ad:b0:57:ca:45:20:4d: 3d:23:81:b3:8a:09:97:4e:ae:74:92:15:05:21:29: f0:78:35:f7:2e:c8:22:d8:d1:77:0a:a7:c5:ff:60: 70:ec:72:2c:a4:5a:5f:d9:7d:8c:88:05:19:c3:a1: 48:ef:54:57:b5:55:e4:98:3b:3b:fb:4f:e9:44:bd: 85:7c:3c:99:51:6e:e4:d0:8d:43:b7:93:e6:70:83: 51:08:76:11:38:a1:c9:a4:1a:cb:bf:60:5e:32:a8: 9c:b9:9e:ed:e0:0b:00:ad:fb:63:4a:c8:8f:46:00: 2f:38:f7:8e:c7:78:70:e4:ec:7d:0b:44:67:31:b2: 28:88:6b:03:84:19:c2:1a:3d:73:30:53:70:67:ef: f1:f4:47:ab:3b:d2:36:42:4d:a8:ad:5f:a5:3e:10: a5:a1:e9:60:6a:3d:af:2d:5c:42:1b:9c:8e:22:9a: a9:aa:8f:1c:c2:0b:27:a4:08:33:0d:6d:4a:38:30: ce:47:c6:4e:42:93:7f:e6:b2:d4:79:b3:cd:d9:aa: 96:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DF:5E:3F:E3:D4:7C:78:27:A6:1B:D9:36:82:97:39:D0:98:5D:E9 X509v3 Authority Key Identifier: keyid:0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/AS61574.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.229.0-138.185.230.255 IPv6: 2804:269c:c::/46 2804:269c:fe80::/42 Signature Algorithm: sha256WithRSAEncryption 8e:c2:7c:a9:1d:32:08:e4:4a:9d:20:3b:51:a5:04:3f:e2:4b: 7e:f5:31:bf:e3:67:f0:be:45:32:c9:e4:ea:c1:79:86:54:ce: a8:18:cb:c5:ed:d7:00:b2:db:fd:a4:74:a0:a6:1a:18:cd:62: fa:ba:f6:fd:ac:73:99:d8:0a:80:bf:b4:ac:a5:fe:be:ba:81: 44:69:d7:3c:ab:29:80:ef:c3:29:64:6f:b9:a1:03:07:bc:88: 4e:d7:74:7c:50:9e:30:49:9a:e2:b1:8d:0c:12:29:bd:3a:70: 84:67:3c:f9:c5:4b:9c:b9:49:e9:27:1f:eb:59:9c:0a:c8:7c: 14:32:bd:f2:c1:18:37:ee:f0:f5:77:c5:85:6b:7b:6f:9b:a9: 68:a6:76:6d:6a:62:ab:ae:d1:28:71:6f:44:d1:88:8b:e2:fb: 61:f6:8d:ea:71:c3:6d:cb:6c:f1:f6:40:c3:64:c8:73:29:4c: af:e0:3a:9b:b8:df:65:09:ab:b7:29:53:5d:59:df:10:f9:cf: cc:52:49:25:df:7e:03:a1:d4:b3:4a:eb:0d:af:2a:e8:14:25: af:a2:34:7b:65:29:ec:53:92:8a:23:ca:6d:98:39:be:10:8b: 91:12:e5:d1:0d:ea:a0:a0:8b:50:6e:18:1a:1b:38:d7:c1:53: ed:b9:a0:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUBlFoWq6lR2D/n48DQZ+yTRsMI20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ3Mjk5Q0ZFQThCMzM5OUVCMjQ4RkE2ODUxOEI2ODYy Q0UyRTg4RjAeFw0yNjA4MTExNzQ3MTFaFw0yNzA4MTAxNzUyMTFaMDMxMTAvBgNV BAMTKDYwREY1RTNGRTNENDdDNzgyN0E2MUJEOTM2ODI5NzM5RDA5ODVERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvCKkwycAlga63VlCuSUx4NHiW plSczlRR1JrZmrmoMm6THkYdpU+l/C/REHHMzf+3s1f1rbBXykUgTT0jgbOKCZdO rnSSFQUhKfB4NfcuyCLY0XcKp8X/YHDsciykWl/ZfYyIBRnDoUjvVFe1VeSYOzv7 T+lEvYV8PJlRbuTQjUO3k+Zwg1EIdhE4ocmkGsu/YF4yqJy5nu3gCwCt+2NKyI9G AC84947HeHDk7H0LRGcxsiiIawOEGcIaPXMwU3Bn7/H0R6s70jZCTaitX6U+EKWh 6WBqPa8tXEIbnI4imqmqjxzCCyekCDMNbUo4MM5Hxk5Ck3/mstR5s83ZqparAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUYN9eP+PUfHgnphvZNoKXOdCYXekwHwYDVR0j BBgwFoAUDXKZz+qLM5nrJI+mhRi2hizi6I8wDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMi8wRDcyOTlDRkVBOEIzMzk5RUIyNDhG QTY4NTE4QjY4NjJDRTJFODhGLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzBENzI5OUNGRUE4QjMzOTlFQjI0OEZBNjg1MThCNjg2MkNFMkU4OEYuY2Vy MGQGCCsGAQUFBwELBFgwVjBUBggrBgEFBQcwC4ZIcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8yL0FTNjE1 NzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQQYIKwYBBQUHAQcBAf8E MjAwMBQEAgABMA4wDAMEAIq55QMEAIq55jAYBAIAAjASAwcCKAQmnAAMAwcGKAQm nP6AMA0GCSqGSIb3DQEBCwUAA4IBAQCOwnypHTII5EqdIDtRpQQ/4kt+9TG/42fw vkUyyeTqwXmGVM6oGMvF7dcAstv9pHSgphoYzWL6uvb9rHOZ2AqAv7Sspf6+uoFE adc8qymA78MpZG+5oQMHvIhO13R8UJ4wSZrisY0MEim9OnCEZzz5xUucuUnpJx/r WZwKyHwUMr3ywRg37vD1d8WFa3tvm6lopnZtamKrrtEocW9E0YiL4vth9o3qccNt y2zx9kDDZMhzKUyv4DqbuN9lCau3KVNdWd8Q+c/MUkkl334DodSzSusNryroFCWv ojR7ZSnsU5KKI8ptmDm+EIuREuXRDeqgoItQbhgaGzjXwVPtuaBj -----END CERTIFICATE-----Generated at Thu Aug 13 07:56:30 2026 by rpki-client