This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/AS61574.asa
File: AS61574.asa (raw, json)
Hash identifier: WLc0Xn7uF/j7wS6tJQtWEwz0nz7jHfRgwckKy9g1vn8=
Subject key identifier: 3D:99:CD:03:C1:85:9E:10:B4:A4:CB:90:33:1F:16:DD:22:05:CD:49
Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A
Certificate serial: 37F50D96AE1C0FB56CB3A89BD3F6AA60E25BCD8A
Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/AS61574.asa
Signing time: Sat 29 Nov 2025 22:33:44 +0000
ASPA not before: Sat 29 Nov 2025 22:28:44 +0000
ASPA not after: Sat 28 Nov 2026 22:33:44 +0000
Customer ASID: 61574
Providers: AS: 61575
Validation: OK
Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 17:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f5:0d:96:ae:1c:0f:b5:6c:b3:a8:9b:d3:f6:aa:60:e2:5b:cd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A
Validity
Not Before: Nov 29 22:28:44 2025 GMT
Not After : Nov 28 22:33:44 2026 GMT
Subject: CN=3D99CD03C1859E10B4A4CB90331F16DD2205CD49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:5e:8b:58:9b:19:67:c5:30:fb:d0:fe:42:
a6:4f:20:56:7c:f8:5a:d0:37:97:73:73:56:76:67:
b7:3b:c1:f0:75:41:68:b3:16:17:fc:bf:f1:3c:d3:
0b:ad:60:b3:15:b6:ac:73:a8:47:9d:d2:1a:f0:8e:
e2:37:e7:1a:8c:9c:68:97:b3:e1:f5:e7:cc:02:01:
a0:9d:cb:c6:4d:e9:4b:6d:07:97:16:e0:b4:58:d2:
6b:3e:34:5e:af:11:1b:32:13:83:e7:a6:c9:fc:33:
02:3f:9e:12:10:d4:a3:ee:0b:cc:14:07:10:c0:fe:
f6:cc:db:1e:47:90:8d:2f:c5:c9:f7:e6:ae:5f:18:
f6:42:37:f9:f0:2b:de:67:88:f2:ad:ec:c7:6c:e0:
61:b4:7b:c8:ea:e4:dd:cb:8e:42:f0:e5:6d:a7:97:
20:f7:90:1f:a9:c5:3c:e1:2f:4f:37:3d:bc:e6:3d:
b4:72:c0:38:aa:9b:60:9c:ae:ba:89:41:e4:cb:70:
98:ad:e0:7d:02:e2:ee:ef:f5:a1:68:18:25:6b:89:
81:e3:a7:92:90:c4:98:41:af:90:b2:0d:95:93:07:
e6:13:a7:0f:72:b6:50:a4:a1:f0:2f:0d:4a:74:fd:
63:8c:aa:c6:08:79:96:c6:cf:46:35:3a:97:09:9b:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:99:CD:03:C1:85:9E:10:B4:A4:CB:90:33:1F:16:DD:22:05:CD:49
X509v3 Authority Key Identifier:
keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
Subject Information Access:
Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/AS61574.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61574
Signature Algorithm: sha256WithRSAEncryption
17:5e:31:2d:ed:e5:ac:25:8e:3d:f5:04:0a:1b:e5:30:a3:1e:
4a:9c:e5:7b:74:c7:95:f5:db:64:05:35:b8:85:1b:6d:c9:6f:
9b:82:dc:0e:8f:f9:2c:76:a3:1c:f4:6b:e3:d9:00:d5:38:2d:
66:0b:68:2a:19:23:90:d4:1b:9a:e1:4b:22:b2:a2:ab:9b:61:
b3:18:1d:ae:d4:7d:d5:9f:65:8b:90:49:04:fa:d6:d8:ab:4a:
39:fd:7b:c7:69:77:94:24:68:ba:03:db:0a:d6:6b:45:f8:b4:
04:9a:bd:64:53:16:a5:88:70:0a:e0:b4:e9:3c:eb:a2:ce:5a:
a5:18:54:4d:e6:dd:d4:9d:66:09:ea:f9:a7:a4:6d:2b:66:8d:
88:b6:e6:3f:00:fa:1b:fd:10:a2:3c:44:fe:e1:dc:87:06:3c:
2f:6d:07:21:d6:bc:5e:b5:95:c1:a8:61:de:07:d1:ee:2b:90:
6e:94:92:00:fc:d7:af:b4:1e:34:cb:9f:f0:23:e7:40:61:69:
94:62:12:8b:61:f6:5a:dc:04:fd:12:dd:c2:9e:31:93:52:9a:
22:ee:05:a4:3a:3b:11:9d:a9:d5:ce:d1:5a:be:f1:e1:75:1e:
ce:11:86:17:51:d2:db:d5:52:d9:a9:d1:b5:1a:ce:d9:e3:0d:
b2:7f:1a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:37:25 2025 by rpki-client