This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/3133382e3138352e3232382e302f32342d3234203d3e203437303635.roa File: 3133382e3138352e3232382e302f32342d3234203d3e203437303635.roa (raw, json) Hash identifier: Z6//gTLPQHI8SIjVTeDlWkgw/+bNQdS3vhgZwk+Na/8= Subject key identifier: 57:1B:88:E3:63:96:4E:57:D9:70:04:BA:5B:C7:54:FE:79:90:B2:F7 Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Certificate serial: 7019DCF2DC48CE6B81533BA0AFE2E6AFAF3B4E94 Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3133382e3138352e3232382e302f32342d3234203d3e203437303635.roa Signing time: Sat 29 Nov 2025 01:08:49 +0000 ROA not before: Sat 29 Nov 2025 01:03:49 +0000 ROA not after: Sat 28 Nov 2026 01:08:49 +0000 asID: 47065 IP address blocks: 138.185.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:19:dc:f2:dc:48:ce:6b:81:53:3b:a0:af:e2:e6:af:af:3b:4e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Validity Not Before: Nov 29 01:03:49 2025 GMT Not After : Nov 28 01:08:49 2026 GMT Subject: CN=571B88E363964E57D97004BA5BC754FE7990B2F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:35:90:6e:7a:08:ff:22:10:76:c5:6b:37:d8: 3c:90:6a:a7:02:04:66:2d:d5:08:88:a2:c7:24:22: c4:94:fa:fb:4a:a1:94:02:04:27:0e:30:c1:16:97: c0:c1:27:e3:08:4a:29:b3:c3:6b:34:25:42:26:23: 03:a6:29:15:11:e6:ea:26:7e:88:18:7f:73:5c:83: 84:fc:84:68:2a:7c:a2:fe:3b:d9:12:4c:cb:74:98: 3c:e1:eb:68:99:96:c9:f9:bd:e7:2f:7f:75:c8:8a: 4c:05:72:04:5a:88:84:f9:06:4d:e5:07:7a:5e:f4: 3d:69:40:86:c1:79:1a:39:ef:6f:70:98:74:0f:16: ea:62:a8:f1:96:8d:46:04:dd:81:bd:68:51:6e:bb: f8:ac:e7:19:fa:59:b9:35:a9:95:a7:94:4f:36:e4: 01:48:7f:fc:6d:da:72:67:b9:c2:72:28:29:2f:48: d4:27:6e:8e:f9:1f:04:97:61:a2:ca:97:f0:ba:e5: 21:b8:d5:cf:57:de:d7:d5:15:e9:6f:aa:a5:c9:d2: 47:b8:f8:d2:9e:6a:9d:42:73:88:ca:1f:68:b0:f3: 23:0a:db:e2:b4:b5:79:83:60:f3:d8:1e:87:42:05: bf:f2:15:00:9c:ef:b6:b7:ab:e6:4d:2b:b0:b8:73: 34:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1B:88:E3:63:96:4E:57:D9:70:04:BA:5B:C7:54:FE:79:90:B2:F7 X509v3 Authority Key Identifier: keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3133382e3138352e3232382e302f32342d3234203d3e203437303635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.228.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:a0:69:5c:56:56:8a:b2:41:4a:7f:33:d3:d4:20:63:84:16: 28:df:c8:76:40:b9:04:bb:af:40:f3:50:1d:e3:30:70:89:7d: 8f:c4:7b:55:fc:6e:05:e2:c8:c7:27:70:e7:eb:73:0c:09:b2: 7f:08:70:a5:5c:51:fc:81:fe:fc:73:a9:27:17:55:7b:56:2c: cb:79:a5:cf:49:9f:49:48:25:67:5c:39:fa:13:4e:a1:f7:82: 7e:32:e6:83:bf:d6:84:9b:41:79:c8:d0:9c:3d:af:83:26:72: eb:35:c2:db:19:23:68:5b:68:72:65:25:51:09:28:74:78:11: a8:da:ff:28:8a:d1:b2:17:ad:b4:c4:9e:ee:c1:30:33:c1:16: eb:ce:7b:5c:d6:ae:86:28:51:5d:16:ab:76:e6:64:5b:55:16: 29:c0:d0:f7:d8:77:51:87:96:0b:43:f5:63:73:09:94:ef:bc: 6e:64:20:51:df:50:61:3b:d6:47:3a:2e:84:68:b7:99:a9:c5: d3:9b:25:aa:9f:38:50:bc:a5:9a:9e:1b:41:73:b3:ad:4f:8c: ad:a9:55:0b:46:f8:f4:cc:34:56:8b:28:cc:45:81:c3:ef:49: 5f:11:87:bc:f8:6a:87:f7:5e:b5:33:2a:b3:e3:00:21:98:41: 86:b8:47:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUcBnc8txIzmuBUzugr+Lmr687TpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw MDMyNjgxQTAeFw0yNTExMjkwMTAzNDlaFw0yNjExMjgwMTA4NDlaMDMxMTAvBgNV BAMTKDU3MUI4OEUzNjM5NjRFNTdEOTcwMDRCQTVCQzc1NEZFNzk5MEIyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNZBuegj/IhB2xWs32DyQaqcC BGYt1QiIosckIsSU+vtKoZQCBCcOMMEWl8DBJ+MISimzw2s0JUImIwOmKRUR5uom fogYf3Ncg4T8hGgqfKL+O9kSTMt0mDzh62iZlsn5vecvf3XIikwFcgRaiIT5Bk3l B3pe9D1pQIbBeRo5729wmHQPFupiqPGWjUYE3YG9aFFuu/is5xn6Wbk1qZWnlE82 5AFIf/xt2nJnucJyKCkvSNQnbo75HwSXYaLKl/C65SG41c9X3tfVFelvqqXJ0ke4 +NKeap1Cc4jKH2iw8yMK2+K0tXmDYPPYHodCBb/yFQCc77a3q+ZNK7C4czRFAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUVxuI42OWTlfZcAS6W8dU/nmQsvcwHwYDVR0j BBgwFoAUP468wEKN1gjznYWL6JG4WwAyaBowDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhFQkNDMDQyOERENjA4RjM5RDg1 OEJFODkxQjg1QjAwMzI2ODFBLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzNGOEVCQ0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY2Vy MIGYBggrBgEFBQcBCwSBizCBiDCBhQYIKwYBBQUHMAuGeXJzeW5jOi8va3JpbGwu cGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8z MTMzMzgyZTMxMzgzNTJlMzIzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQz NzMwMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB BwEB/wQQMA4wDAQCAAEwBgMEAIq55DANBgkqhkiG9w0BAQsFAAOCAQEAK6BpXFZW irJBSn8z09QgY4QWKN/IdkC5BLuvQPNQHeMwcIl9j8R7VfxuBeLIxydw5+tzDAmy fwhwpVxR/IH+/HOpJxdVe1Ysy3mlz0mfSUglZ1w5+hNOofeCfjLmg7/WhJtBecjQ nD2vgyZy6zXC2xkjaFtocmUlUQkodHgRqNr/KIrRshettMSe7sEwM8EW6857XNau hihRXRarduZkW1UWKcDQ99h3UYeWC0P1Y3MJlO+8bmQgUd9QYTvWRzouhGi3manF 05slqp84ULylmp4bQXOzrU+MralVC0b49Mw0VosozEWBw+9JXxGHvPhqh/detTMq s+MAIZhBhrhHyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:51 2025 by rpki-client