This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa File: 3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa (raw, json) Hash identifier: uZBIa5EwFadexYoWsDKnOvyQwulEC4k8FXsw/UVWdyU= Subject key identifier: D6:72:EE:32:78:A9:9E:80:95:57:27:8F:59:91:8E:E2:60:29:8B:16 Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Certificate serial: 553D9B7547B9CB5E9CF64020A58AAAFFA51735FD Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa Signing time: Sat 29 Nov 2025 01:09:06 +0000 ROA not before: Sat 29 Nov 2025 01:04:06 +0000 ROA not after: Sat 28 Nov 2026 01:09:06 +0000 asID: 61574 IP address blocks: 138.185.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 17:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3d:9b:75:47:b9:cb:5e:9c:f6:40:20:a5:8a:aa:ff:a5:17:35:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Validity Not Before: Nov 29 01:04:06 2025 GMT Not After : Nov 28 01:09:06 2026 GMT Subject: CN=D672EE3278A99E809557278F59918EE260298B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a1:2f:53:cc:40:3a:1e:df:1e:75:39:ba:02: 5b:83:f3:cb:72:2b:1b:84:c1:09:ec:a7:62:7c:94: 13:8a:a0:43:53:ad:02:f1:f7:c6:30:ee:94:4c:8e: 99:8f:c3:dc:4c:c9:8f:1f:18:d9:de:18:8c:08:5d: 57:ed:24:2f:9f:ae:97:ba:fd:e7:c4:91:98:f0:9b: 27:93:c6:35:df:2f:20:f8:8f:6f:57:75:8b:c6:ee: 2c:bf:10:a5:f3:53:f5:9a:92:01:08:17:27:57:8a: ee:98:f3:2c:85:66:69:72:61:a8:ea:e2:83:24:a9: e5:b3:4b:4a:a0:44:af:33:c7:72:75:59:f1:95:df: 47:12:e1:b8:b4:92:0c:58:d4:86:49:97:20:1e:a1: 56:b1:bd:cc:9d:57:6b:73:5c:ef:63:d9:4d:ea:e9: dd:94:6a:ac:03:23:03:02:cc:14:04:9a:8b:c5:6b: fe:3c:82:d9:e6:ae:5b:b5:ec:3c:5e:f7:01:9c:ea: 05:50:84:1a:f6:14:1d:92:f5:20:6a:a2:d8:7a:27: 95:68:59:99:31:20:ac:03:de:4a:f5:9a:4b:80:23: ca:d7:ed:a0:c7:d0:4e:f2:78:2b:1a:49:d0:73:1b: 3f:80:08:37:ac:a0:a8:c9:11:3d:d4:6f:8e:15:a2: 7e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:72:EE:32:78:A9:9E:80:95:57:27:8F:59:91:8E:E2:60:29:8B:16 X509v3 Authority Key Identifier: keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.229.0/24 Signature Algorithm: sha256WithRSAEncryption c1:c0:7f:68:1f:1f:c8:90:cb:7e:f2:2b:0c:d1:c9:55:cf:e0: 18:bb:8c:ac:7d:34:b2:09:5d:40:ae:c6:87:ca:cf:7c:3a:b5: fe:5f:c4:27:00:15:14:09:7a:d4:47:98:18:06:e9:90:70:1c: 53:11:6f:80:27:ed:02:56:61:e2:c1:d3:08:19:0d:3a:e2:34: 3b:a9:03:f7:02:db:43:af:e5:90:a4:f0:8c:50:98:8c:ca:d0: 30:1d:39:ee:c7:35:46:73:0c:29:7d:68:5f:b8:e9:8f:19:3c: 99:ad:46:c3:77:8b:d8:a5:4d:19:8f:e2:33:3a:32:7b:a8:02: da:dc:a1:39:91:a3:c0:72:ff:09:42:99:18:2c:c8:11:3d:35: 02:ac:85:d4:18:f9:f3:08:6f:21:8e:fe:b7:4f:a0:06:de:21: 84:08:94:7e:25:7f:20:d4:99:8b:ee:a6:e4:99:7b:c1:33:ad: ab:42:26:3b:44:76:a1:3d:ee:28:52:cb:31:36:b0:0b:d3:e0: 00:c0:ae:99:ce:2e:f7:3e:20:a5:ba:2e:ec:99:09:16:fd:03: 26:9d:c6:8f:e2:73:d4:c5:1e:cb:55:42:ec:e5:d6:47:7a:c1: 9c:cc:99:d7:3b:df:28:2f:d2:9e:f1:22:43:da:4b:a7:86:27: 1d:91:94:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUVT2bdUe5y16c9kAgpYqq/6UXNf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw MDMyNjgxQTAeFw0yNTExMjkwMTA0MDZaFw0yNjExMjgwMTA5MDZaMDMxMTAvBgNV BAMTKEQ2NzJFRTMyNzhBOTlFODA5NTU3Mjc4RjU5OTE4RUUyNjAyOThCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoS9TzEA6Ht8edTm6AluD88ty KxuEwQnsp2J8lBOKoENTrQLx98Yw7pRMjpmPw9xMyY8fGNneGIwIXVftJC+frpe6 /efEkZjwmyeTxjXfLyD4j29XdYvG7iy/EKXzU/WakgEIFydXiu6Y8yyFZmlyYajq 4oMkqeWzS0qgRK8zx3J1WfGV30cS4bi0kgxY1IZJlyAeoVaxvcydV2tzXO9j2U3q 6d2UaqwDIwMCzBQEmovFa/48gtnmrlu17Dxe9wGc6gVQhBr2FB2S9SBqoth6J5Vo WZkxIKwD3kr1mkuAI8rX7aDH0E7yeCsaSdBzGz+ACDesoKjJET3Ub44Von5DAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQU1nLuMnipnoCVVyePWZGO4mApixYwHwYDVR0j BBgwFoAUP468wEKN1gjznYWL6JG4WwAyaBowDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhFQkNDMDQyOERENjA4RjM5RDg1 OEJFODkxQjg1QjAwMzI2ODFBLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzNGOEVCQ0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY2Vy MIGYBggrBgEFBQcBCwSBizCBiDCBhQYIKwYBBQUHMAuGeXJzeW5jOi8va3JpbGwu cGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8z MTMzMzgyZTMxMzgzNTJlMzIzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYz MTM1MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB BwEB/wQQMA4wDAQCAAEwBgMEAIq55TANBgkqhkiG9w0BAQsFAAOCAQEAwcB/aB8f yJDLfvIrDNHJVc/gGLuMrH00sgldQK7Gh8rPfDq1/l/EJwAVFAl61EeYGAbpkHAc UxFvgCftAlZh4sHTCBkNOuI0O6kD9wLbQ6/lkKTwjFCYjMrQMB057sc1RnMMKX1o X7jpjxk8ma1Gw3eL2KVNGY/iMzoye6gC2tyhOZGjwHL/CUKZGCzIET01AqyF1Bj5 8whvIY7+t0+gBt4hhAiUfiV/INSZi+6m5Jl7wTOtq0ImO0R2oT3uKFLLMTawC9Pg AMCumc4u9z4gpbou7JkJFv0DJp3Gj+Jz1MUey1VC7OXWR3rBnMyZ1zvfKC/SnvEi Q9pLp4YnHZGUMw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:42:12 2025 by rpki-client