This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/323830343a323639633a643a3a2f34382d3438203d3e203631353734.roa File: 323830343a323639633a643a3a2f34382d3438203d3e203631353734.roa (raw, json) Hash identifier: UqKG0cpOnrg9F/saGAovbvCgtzhM3FTRhenkQ93fVDM= Subject key identifier: FD:FD:82:88:C7:E4:F7:A2:46:EA:49:D8:94:27:71:18:B8:2B:D7:D6 Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Certificate serial: 4F4431A98C44E8078A3A5ABA9AE5C0FBD0082EC4 Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/323830343a323639633a643a3a2f34382d3438203d3e203631353734.roa Signing time: Sat 29 Nov 2025 22:35:17 +0000 ROA not before: Sat 29 Nov 2025 22:30:17 +0000 ROA not after: Sat 28 Nov 2026 22:35:17 +0000 asID: 61574 IP address blocks: 2804:269c:d::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 17:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:44:31:a9:8c:44:e8:07:8a:3a:5a:ba:9a:e5:c0:fb:d0:08:2e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Validity Not Before: Nov 29 22:30:17 2025 GMT Not After : Nov 28 22:35:17 2026 GMT Subject: CN=FDFD8288C7E4F7A246EA49D894277118B82BD7D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0c:69:25:95:d0:b4:d5:08:9f:a4:c0:f3:de: 3d:fc:ac:58:7b:c3:9e:8e:4f:52:5f:ab:f8:3f:bd: d5:98:29:ce:07:3c:fa:09:c8:a6:d8:2b:47:af:ff: 39:62:7f:cb:90:c4:81:11:93:06:1a:7e:eb:36:a9: b3:c5:a7:04:dd:67:a9:79:c2:65:41:a5:49:b9:7b: e7:e4:28:87:b2:97:d3:7f:a1:8e:57:fd:5a:3d:ae: 4b:09:4f:e8:2a:1d:26:b8:ff:61:ca:e5:8a:c8:64: e6:a2:0f:75:85:71:5a:71:77:e8:d6:51:47:db:ee: da:ca:63:d2:e6:47:50:87:be:11:b2:be:07:c4:d3: 9e:06:91:9d:dd:56:6e:8a:fc:87:34:66:82:52:cf: af:c6:e5:a5:43:02:da:79:9b:3e:fa:b5:8e:c7:28: 1b:50:92:14:54:6e:f2:93:0d:53:64:fd:12:b1:fe: da:84:22:8d:f2:af:16:eb:81:f9:88:6e:4c:80:03: af:ba:a0:5c:3b:71:e8:3a:0d:c8:7a:59:ea:1f:df: 8f:cd:95:79:fa:67:a8:e6:84:ae:ab:39:93:cf:8f: c6:ea:fe:3b:e6:e1:f2:f1:75:2c:41:ee:71:59:d2: 53:96:bc:27:b6:16:86:2f:2b:5c:34:3c:44:f4:6c: 40:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FD:82:88:C7:E4:F7:A2:46:EA:49:D8:94:27:71:18:B8:2B:D7:D6 X509v3 Authority Key Identifier: keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/323830343a323639633a643a3a2f34382d3438203d3e203631353734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:269c:d::/48 Signature Algorithm: sha256WithRSAEncryption 53:5c:50:9e:ff:68:f7:79:6e:29:05:45:1e:d5:3b:c2:88:33: a0:2b:f1:de:25:1f:93:ed:ab:a1:ff:72:99:40:ac:1e:e9:90: cf:f5:73:29:95:24:49:d9:99:0a:ad:e0:2f:59:56:7b:a8:21: a3:b1:05:2d:cf:9f:16:e4:d3:b1:c4:7c:dd:8b:2f:50:7e:b6: 1f:b0:85:40:b5:76:6e:52:35:e6:31:75:3f:13:16:cb:81:56: d9:78:d3:3a:2b:95:ae:7d:d4:9c:34:bd:28:d6:59:7d:63:65: e0:13:bc:5c:3d:e2:f8:4e:2e:c9:ed:92:2e:13:aa:2a:0b:56: 61:98:fe:80:98:49:b6:1b:f5:c0:19:a6:02:ae:8a:34:1c:51: 71:2a:b9:54:70:fe:13:32:d9:cf:ee:66:5f:ee:5d:26:e1:8f: de:4d:4f:1c:ee:97:12:bc:d0:cd:ed:76:41:59:51:c8:a5:8c: d5:1e:a7:65:bf:f4:06:c4:d7:51:75:9f:87:72:2f:ca:a8:15: e9:47:bb:66:c6:f5:70:65:11:07:f2:e4:7d:b2:f9:58:6d:bb: d6:1c:89:85:17:89:a0:96:af:7b:fa:45:45:c1:2f:cb:f5:c3: ee:16:8a:df:62:fb:9f:e3:3c:21:90:11:ef:06:07:6e:66:05: eb:cd:1a:f7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUT0QxqYxE6AeKOlq6muXA+9AILsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw MDMyNjgxQTAeFw0yNTExMjkyMjMwMTdaFw0yNjExMjgyMjM1MTdaMDMxMTAvBgNV BAMTKEZERkQ4Mjg4QzdFNEY3QTI0NkVBNDlEODk0Mjc3MTE4QjgyQkQ3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpDGklldC01QifpMDz3j38rFh7 w56OT1Jfq/g/vdWYKc4HPPoJyKbYK0ev/zlif8uQxIERkwYafus2qbPFpwTdZ6l5 wmVBpUm5e+fkKIeyl9N/oY5X/Vo9rksJT+gqHSa4/2HK5YrIZOaiD3WFcVpxd+jW UUfb7trKY9LmR1CHvhGyvgfE054GkZ3dVm6K/Ic0ZoJSz6/G5aVDAtp5mz76tY7H KBtQkhRUbvKTDVNk/RKx/tqEIo3yrxbrgfmIbkyAA6+6oFw7ceg6Dch6Weof34/N lXn6Z6jmhK6rOZPPj8bq/jvm4fLxdSxB7nFZ0lOWvCe2FoYvK1w0PET0bEDzAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQU/f2CiMfk96JG6knYlCdxGLgr19YwHwYDVR0j BBgwFoAUP468wEKN1gjznYWL6JG4WwAyaBowDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhFQkNDMDQyOERENjA4RjM5RDg1 OEJFODkxQjg1QjAwMzI2ODFBLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzNGOEVCQ0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY2Vy MIGYBggrBgEFBQcBCwSBizCBiDCBhQYIKwYBBQUHMAuGeXJzeW5jOi8va3JpbGwu cGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8z MjM4MzAzNDNhMzIzNjM5NjMzYTY0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzYz MTM1MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACgEJpwADTANBgkqhkiG9w0BAQsFAAOCAQEAU1xQ nv9o93luKQVFHtU7wogzoCvx3iUfk+2rof9ymUCsHumQz/VzKZUkSdmZCq3gL1lW e6gho7EFLc+fFuTTscR83YsvUH62H7CFQLV2blI15jF1PxMWy4FW2XjTOiuVrn3U nDS9KNZZfWNl4BO8XD3i+E4uye2SLhOqKgtWYZj+gJhJthv1wBmmAq6KNBxRcSq5 VHD+EzLZz+5mX+5dJuGP3k1PHO6XErzQze12QVlRyKWM1R6nZb/0BsTXUXWfh3Iv yqgV6Ue7Zsb1cGURB/LkfbL5WG271hyJhReJoJave/pFRcEvy/XD7haK32L7n+M8 IZAR7wYHbmYF680a9w== -----END CERTIFICATE-----Generated at Sat Dec 6 05:37:21 2025 by rpki-client