This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/323830343a323639633a633a3a2f34382d3438203d3e203631353734.roa File: 323830343a323639633a633a3a2f34382d3438203d3e203631353734.roa (raw, json) Hash identifier: ioMua6AWyA6p7dn2DfQREylMhkZPQE/VLJxcNKTN5+g= Subject key identifier: A3:7A:FC:D5:1D:BB:FF:7E:B9:05:BF:63:0A:1A:E1:2B:B5:6D:AC:B1 Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Certificate serial: 3128B6B40470912FF9FD6B1B863E491C6E4DCC76 Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/323830343a323639633a633a3a2f34382d3438203d3e203631353734.roa Signing time: Sat 29 Nov 2025 22:35:03 +0000 ROA not before: Sat 29 Nov 2025 22:30:03 +0000 ROA not after: Sat 28 Nov 2026 22:35:03 +0000 asID: 61574 IP address blocks: 2804:269c:c::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 17:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:28:b6:b4:04:70:91:2f:f9:fd:6b:1b:86:3e:49:1c:6e:4d:cc:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Validity Not Before: Nov 29 22:30:03 2025 GMT Not After : Nov 28 22:35:03 2026 GMT Subject: CN=A37AFCD51DBBFF7EB905BF630A1AE12BB56DACB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:69:56:65:04:b0:9a:8a:49:53:1c:82:cb: 5e:46:a5:0d:87:c5:ce:05:34:2e:80:1e:10:35:36: 4e:13:61:96:95:e9:30:14:91:c9:be:45:ba:d3:a4: 68:db:f9:cb:33:07:2e:d3:6a:03:97:0f:fb:81:12: 70:78:fd:e8:78:3e:6d:4e:35:a5:6c:85:81:7c:65: 8f:5a:6a:16:cd:97:af:47:ac:f5:09:d7:9e:55:76: 60:19:5e:11:e7:4f:ec:38:b4:04:a8:64:89:ac:e7: 54:88:cf:3a:32:77:c3:da:bf:bd:57:9a:9f:04:d7: a4:6a:64:c2:cd:37:55:11:62:d7:18:45:d9:9a:21: 5e:1b:98:23:59:8b:3b:34:1a:8f:75:88:c8:30:9e: 73:2c:08:70:85:61:48:fd:ff:4c:fa:78:55:c0:cb: 0c:52:50:a4:81:af:e5:f2:04:93:da:ae:45:22:4a: 13:d3:48:8e:47:8b:59:0d:67:e6:cd:ec:8b:4d:30: cd:3f:cb:dd:f2:05:fc:c0:df:3a:3c:fe:29:aa:34: 4f:10:ce:ae:b2:f1:2c:c5:f8:f7:69:36:e1:7c:0a: 7f:50:4e:10:e2:35:ae:c9:31:d9:97:0f:0e:9a:5d: cc:da:71:b3:23:23:9c:7a:ea:bf:5c:6b:20:10:f2: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7A:FC:D5:1D:BB:FF:7E:B9:05:BF:63:0A:1A:E1:2B:B5:6D:AC:B1 X509v3 Authority Key Identifier: keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/323830343a323639633a633a3a2f34382d3438203d3e203631353734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:269c:c::/48 Signature Algorithm: sha256WithRSAEncryption 9e:ed:94:34:a7:ec:2c:47:c9:19:ae:5d:77:7a:c3:a7:0f:80: 85:2d:2c:3f:3b:f9:1d:ed:03:1f:03:34:81:ad:6c:da:e7:c7: aa:49:4f:e4:c9:39:47:5d:0c:b3:d5:f2:62:77:ae:45:59:5c: ef:70:b3:84:51:4f:31:f6:05:de:64:70:00:c5:78:59:05:db: 89:9d:eb:50:ba:f9:5f:7d:9e:d6:42:71:4b:9b:2f:75:e7:17: b7:36:71:64:c1:bc:51:71:3f:00:bd:01:a1:6b:fb:2e:ce:38: 30:a6:c9:30:87:51:d5:ea:82:07:e9:f0:b7:9d:a5:0c:cf:c1: 98:cc:27:0f:7b:1a:0a:39:88:18:44:6a:d5:40:3c:3c:62:92: a2:4c:4b:90:3a:a8:95:35:89:c7:74:37:c5:d2:f0:a3:59:b9: f4:4a:58:3f:65:a1:7b:09:a6:55:0e:23:0c:69:a0:88:ff:16: 0c:04:44:70:d6:a8:d1:92:21:d1:ca:14:e9:0c:37:f9:8f:0d: 93:9c:21:67:2c:cf:51:48:ff:80:aa:e4:ec:17:66:ad:e7:e8: 3d:c7:d9:21:0f:97:c3:ef:63:1f:7c:88:31:3a:39:5a:bf:32: 42:27:54:8c:a4:9c:e5:0c:62:c3:ba:df:48:45:79:1a:48:94: 44:62:32:48 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUMSi2tARwkS/5/Wsbhj5JHG5NzHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw MDMyNjgxQTAeFw0yNTExMjkyMjMwMDNaFw0yNjExMjgyMjM1MDNaMDMxMTAvBgNV BAMTKEEzN0FGQ0Q1MURCQkZGN0VCOTA1QkY2MzBBMUFFMTJCQjU2REFDQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQmlWZQSwmopJUxyCy15GpQ2H xc4FNC6AHhA1Nk4TYZaV6TAUkcm+RbrTpGjb+cszBy7TagOXD/uBEnB4/eh4Pm1O NaVshYF8ZY9aahbNl69HrPUJ155VdmAZXhHnT+w4tASoZIms51SIzzoyd8Pav71X mp8E16RqZMLNN1URYtcYRdmaIV4bmCNZizs0Go91iMgwnnMsCHCFYUj9/0z6eFXA ywxSUKSBr+XyBJParkUiShPTSI5Hi1kNZ+bN7ItNMM0/y93yBfzA3zo8/imqNE8Q zq6y8SzF+PdpNuF8Cn9QThDiNa7JMdmXDw6aXczacbMjI5x66r9cayAQ8uNrAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQUo3r81R27/365Bb9jChrhK7VtrLEwHwYDVR0j BBgwFoAUP468wEKN1gjznYWL6JG4WwAyaBowDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhFQkNDMDQyOERENjA4RjM5RDg1 OEJFODkxQjg1QjAwMzI2ODFBLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzNGOEVCQ0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY2Vy MIGYBggrBgEFBQcBCwSBizCBiDCBhQYIKwYBBQUHMAuGeXJzeW5jOi8va3JpbGwu cGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8z MjM4MzAzNDNhMzIzNjM5NjMzYTYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzYz MTM1MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACgEJpwADDANBgkqhkiG9w0BAQsFAAOCAQEAnu2U NKfsLEfJGa5dd3rDpw+AhS0sPzv5He0DHwM0ga1s2ufHqklP5Mk5R10Ms9XyYneu RVlc73CzhFFPMfYF3mRwAMV4WQXbiZ3rULr5X32e1kJxS5svdecXtzZxZMG8UXE/ AL0BoWv7Ls44MKbJMIdR1eqCB+nwt52lDM/BmMwnD3saCjmIGERq1UA8PGKSokxL kDqolTWJx3Q3xdLwo1m59EpYP2WhewmmVQ4jDGmgiP8WDAREcNao0ZIh0coU6Qw3 +Y8Nk5whZyzPUUj/gKrk7BdmrefoPcfZIQ+Xw+9jH3yIMTo5Wr8yQidUjKSc5Qxi w7rfSEV5GkiURGIySA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:37:20 2025 by rpki-client