This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/AS61574.roa File: AS61574.roa (raw, json) Hash identifier: Ynl86BG//4yys2kNc3GrGh7DM2lbdYgU75T6KyljZYI= Subject key identifier: 60:36:16:F7:9F:F5:FB:5D:73:8A:92:1E:EF:C5:B1:D5:8D:DB:BD:BA Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Certificate serial: 4750F635B1B6FA47B104FCBFEA92CAE813D74B0A Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/AS61574.roa Signing time: Wed 21 Jan 2026 17:51:35 +0000 ROA not before: Wed 21 Jan 2026 17:46:35 +0000 ROA not after: Wed 20 Jan 2027 17:51:35 +0000 asID: 61574 IP address blocks: 138.185.229.0/24 maxlen: 24 138.185.230.0/24 maxlen: 24 2804:269c:c::/46 maxlen: 48 2804:269c:fe80::/48 maxlen: 48 2804:269c:fe81::/48 maxlen: 48 2804:269c:fe82::/48 maxlen: 48 2804:269c:fe83::/48 maxlen: 48 2804:269c:fe84::/48 maxlen: 48 2804:269c:fe85::/48 maxlen: 48 2804:269c:fe86::/48 maxlen: 48 2804:269c:fe87::/48 maxlen: 48 2804:269c:fe88::/48 maxlen: 48 2804:269c:fe89::/48 maxlen: 48 2804:269c:fe8a::/48 maxlen: 48 2804:269c:fe8b::/48 maxlen: 48 2804:269c:fe8c::/48 maxlen: 48 2804:269c:fe8d::/48 maxlen: 48 2804:269c:fe8e::/48 maxlen: 48 2804:269c:fe8f::/48 maxlen: 48 2804:269c:fe90::/48 maxlen: 48 2804:269c:fe91::/48 maxlen: 48 2804:269c:fe92::/48 maxlen: 48 2804:269c:fe93::/48 maxlen: 48 2804:269c:fe94::/48 maxlen: 48 2804:269c:fe95::/48 maxlen: 48 2804:269c:fe96::/48 maxlen: 48 2804:269c:fe97::/48 maxlen: 48 2804:269c:fe98::/48 maxlen: 48 2804:269c:fe99::/48 maxlen: 48 2804:269c:fe9a::/48 maxlen: 48 2804:269c:fe9b::/48 maxlen: 48 2804:269c:fe9c::/48 maxlen: 48 2804:269c:fe9d::/48 maxlen: 48 2804:269c:fe9e::/48 maxlen: 48 2804:269c:fe9f::/48 maxlen: 48 2804:269c:fea0::/48 maxlen: 48 2804:269c:fea1::/48 maxlen: 48 2804:269c:fea2::/48 maxlen: 48 2804:269c:fea3::/48 maxlen: 48 2804:269c:fea4::/48 maxlen: 48 2804:269c:fea5::/48 maxlen: 48 2804:269c:fea6::/48 maxlen: 48 2804:269c:fea7::/48 maxlen: 48 2804:269c:fea8::/48 maxlen: 48 2804:269c:fea9::/48 maxlen: 48 2804:269c:feaa::/48 maxlen: 48 2804:269c:feab::/48 maxlen: 48 2804:269c:feac::/48 maxlen: 48 2804:269c:fead::/48 maxlen: 48 2804:269c:feae::/48 maxlen: 48 2804:269c:feaf::/48 maxlen: 48 2804:269c:feb0::/48 maxlen: 48 2804:269c:feb1::/48 maxlen: 48 2804:269c:feb2::/48 maxlen: 48 2804:269c:feb3::/48 maxlen: 48 2804:269c:feb4::/48 maxlen: 48 2804:269c:feb5::/48 maxlen: 48 2804:269c:feb6::/48 maxlen: 48 2804:269c:feb7::/48 maxlen: 48 2804:269c:feb8::/48 maxlen: 48 2804:269c:feb9::/48 maxlen: 48 2804:269c:feba::/48 maxlen: 48 2804:269c:febb::/48 maxlen: 48 2804:269c:febc::/48 maxlen: 48 2804:269c:febd::/48 maxlen: 48 2804:269c:febe::/48 maxlen: 48 2804:269c:febf::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 14:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:50:f6:35:b1:b6:fa:47:b1:04:fc:bf:ea:92:ca:e8:13:d7:4b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Validity Not Before: Jan 21 17:46:35 2026 GMT Not After : Jan 20 17:51:35 2027 GMT Subject: CN=603616F79FF5FB5D738A921EEFC5B1D58DDBBDBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:2c:89:31:36:32:fb:7a:0c:83:df:05:48: 0b:b3:31:29:c4:32:a9:a7:da:c4:fa:c0:4f:3f:6b: 7b:3e:f0:97:17:69:9d:bb:03:64:a7:3b:7e:0d:4a: 64:5a:ce:f3:c7:56:3b:a4:89:b8:3b:3e:4d:01:b3: 0f:35:9a:21:ad:1b:29:6e:d6:c6:67:43:1e:95:fb: e8:51:f5:e8:0c:0f:87:39:42:1a:82:7a:34:c9:70: 7e:32:93:8a:6e:eb:c8:3f:6e:f3:a0:11:ed:b3:a2: 2d:cd:37:42:0f:06:cd:c6:be:04:2c:08:18:20:26: 3d:1d:4a:27:91:2a:24:79:bd:88:05:b7:9c:9d:ca: 80:07:19:ea:0a:f0:e9:4e:09:3d:ca:10:d8:b9:d7: 02:cd:4c:ea:f0:6c:12:f7:eb:5d:57:4a:3c:75:17: 94:66:dc:37:19:0d:dc:18:eb:45:fd:b2:43:dc:f7: 96:21:08:9c:44:18:79:5d:31:87:45:a7:01:d6:f0: a8:6f:7f:d7:41:33:d4:49:bf:ed:8c:8e:c8:0b:91: 88:f8:14:67:b7:1b:a7:cd:b5:35:4f:cc:e0:e6:dc: 44:78:0c:92:1f:3e:3c:67:b3:00:13:8a:4f:ed:ba: 5b:a0:74:2c:42:0f:e8:b5:11:1c:f0:f7:ec:da:6a: a7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:36:16:F7:9F:F5:FB:5D:73:8A:92:1E:EF:C5:B1:D5:8D:DB:BD:BA X509v3 Authority Key Identifier: keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/AS61574.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.229.0-138.185.230.255 IPv6: 2804:269c:c::/46 2804:269c:fe80::/42 Signature Algorithm: sha256WithRSAEncryption 7a:f8:97:13:e6:25:7f:93:aa:62:43:70:dc:97:a5:08:85:cd: 2f:7d:83:9a:84:db:69:ba:c7:c7:a4:8e:81:52:d0:e2:fc:d5: 99:65:31:2a:38:b9:17:a0:2f:e7:59:83:3e:d7:8f:bd:bf:a0: 0a:47:3b:67:ad:c7:b3:36:73:0c:50:bb:ba:b6:19:8d:4a:dc: 4e:7e:54:cd:33:63:81:a3:6f:40:2b:92:85:ec:3d:18:db:80: 4e:b1:7d:10:c6:ad:a6:52:82:d6:f3:2f:61:ba:11:81:78:17: c9:7c:b6:90:05:11:98:03:2d:78:fb:62:0d:7f:e2:24:d6:e6: cb:75:26:c9:14:67:d5:fb:30:3d:31:a5:94:ad:f1:ec:31:08: 9c:b6:d2:73:9b:d1:f1:25:d2:de:2d:72:38:c0:13:aa:5a:23: 84:d7:50:d2:b4:1f:b6:7d:29:bd:9f:72:04:98:cf:64:e6:1a: bf:5e:9d:c9:3c:46:82:db:89:3a:1c:f2:52:85:54:b4:e8:ba: 60:9e:c7:f7:90:9f:61:b6:f2:d7:6b:b5:2c:10:1e:50:05:19: a0:4b:36:10:00:f3:ab:54:59:ea:f0:93:da:b6:c6:15:a8:19: 04:78:c6:8c:08:d5:8f:e4:d4:41:1a:6e:40:42:d0:9f:43:be: 83:8b:84:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUR1D2NbG2+kexBPy/6pLK6BPXSwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw MDMyNjgxQTAeFw0yNjAxMjExNzQ2MzVaFw0yNzAxMjAxNzUxMzVaMDMxMTAvBgNV BAMTKDYwMzYxNkY3OUZGNUZCNUQ3MzhBOTIxRUVGQzVCMUQ1OEREQkJEQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xSyJMTYy+3oMg98FSAuzMSnE Mqmn2sT6wE8/a3s+8JcXaZ27A2SnO34NSmRazvPHVjukibg7Pk0Bsw81miGtGylu 1sZnQx6V++hR9egMD4c5QhqCejTJcH4yk4pu68g/bvOgEe2zoi3NN0IPBs3GvgQs CBggJj0dSieRKiR5vYgFt5ydyoAHGeoK8OlOCT3KENi51wLNTOrwbBL3611XSjx1 F5Rm3DcZDdwY60X9skPc95YhCJxEGHldMYdFpwHW8Khvf9dBM9RJv+2MjsgLkYj4 FGe3G6fNtTVPzODm3ER4DJIfPjxnswATik/tulugdCxCD+i1ERzw9+zaaqfvAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUYDYW95/1+11zipIe78Wx1Y3bvbowHwYDVR0j BBgwFoAUP468wEKN1gjznYWL6JG4WwAyaBowDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhFQkNDMDQyOERENjA4RjM5RDg1 OEJFODkxQjg1QjAwMzI2ODFBLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzNGOEVCQ0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY2Vy MGQGCCsGAQUFBwELBFgwVjBUBggrBgEFBQcwC4ZIcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8wL0FTNjE1 NzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQQYIKwYBBQUHAQcBAf8E MjAwMBQEAgABMA4wDAMEAIq55QMEAIq55jAYBAIAAjASAwcCKAQmnAAMAwcGKAQm nP6AMA0GCSqGSIb3DQEBCwUAA4IBAQB6+JcT5iV/k6piQ3Dcl6UIhc0vfYOahNtp usfHpI6BUtDi/NWZZTEqOLkXoC/nWYM+14+9v6AKRztnrcezNnMMULu6thmNStxO flTNM2OBo29AK5KF7D0Y24BOsX0Qxq2mUoLW8y9huhGBeBfJfLaQBRGYAy14+2IN f+Ik1ubLdSbJFGfV+zA9MaWUrfHsMQicttJzm9HxJdLeLXI4wBOqWiOE11DStB+2 fSm9n3IEmM9k5hq/Xp3JPEaC24k6HPJShVS06Lpgnsf3kJ9htvLXa7UsEB5QBRmg SzYQAPOrVFnq8JPatsYVqBkEeMaMCNWP5NRBGm5AQtCfQ76Di4Qk -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:54 2026 by rpki-client