$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/1/AS61574.roa File: AS61574.roa (raw, json) Hash identifier: MMPpDP+RpyafCmVe5IViyUuElVXmq4wIFGh5IrBri/M= Subject key identifier: CE:DA:79:78:03:0E:A5:09:EE:4A:BC:4E:C4:9B:CF:80:B6:33:F8:8B Certificate issuer: /CN=F79647511753842C2E53F2B5A8CA789825A09B7D Certificate serial: 658B72D302315FD294B95860FAD8C2251FE7724E Authority key identifier: F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/AS61574.roa Signing time: Wed 15 Jul 2026 13:47:27 +0000 ROA not before: Wed 15 Jul 2026 13:42:27 +0000 ROA not after: Wed 14 Jul 2027 13:47:27 +0000 asID: 61574 IP address blocks: 138.185.229.0/24 maxlen: 24 138.185.230.0/24 maxlen: 24 2804:269c:c::/46 maxlen: 48 2804:269c:fe80::/48 maxlen: 48 2804:269c:fe81::/48 maxlen: 48 2804:269c:fe82::/48 maxlen: 48 2804:269c:fe83::/48 maxlen: 48 2804:269c:fe84::/48 maxlen: 48 2804:269c:fe85::/48 maxlen: 48 2804:269c:fe86::/48 maxlen: 48 2804:269c:fe87::/48 maxlen: 48 2804:269c:fe88::/48 maxlen: 48 2804:269c:fe89::/48 maxlen: 48 2804:269c:fe8a::/48 maxlen: 48 2804:269c:fe8b::/48 maxlen: 48 2804:269c:fe8c::/48 maxlen: 48 2804:269c:fe8d::/48 maxlen: 48 2804:269c:fe8e::/48 maxlen: 48 2804:269c:fe8f::/48 maxlen: 48 2804:269c:fe90::/48 maxlen: 48 2804:269c:fe91::/48 maxlen: 48 2804:269c:fe92::/48 maxlen: 48 2804:269c:fe93::/48 maxlen: 48 2804:269c:fe94::/48 maxlen: 48 2804:269c:fe95::/48 maxlen: 48 2804:269c:fe96::/48 maxlen: 48 2804:269c:fe97::/48 maxlen: 48 2804:269c:fe98::/48 maxlen: 48 2804:269c:fe99::/48 maxlen: 48 2804:269c:fe9a::/48 maxlen: 48 2804:269c:fe9b::/48 maxlen: 48 2804:269c:fe9c::/48 maxlen: 48 2804:269c:fe9d::/48 maxlen: 48 2804:269c:fe9e::/48 maxlen: 48 2804:269c:fe9f::/48 maxlen: 48 2804:269c:fea0::/48 maxlen: 48 2804:269c:fea1::/48 maxlen: 48 2804:269c:fea2::/48 maxlen: 48 2804:269c:fea3::/48 maxlen: 48 2804:269c:fea4::/48 maxlen: 48 2804:269c:fea5::/48 maxlen: 48 2804:269c:fea6::/48 maxlen: 48 2804:269c:fea7::/48 maxlen: 48 2804:269c:fea8::/48 maxlen: 48 2804:269c:fea9::/48 maxlen: 48 2804:269c:feaa::/48 maxlen: 48 2804:269c:feab::/48 maxlen: 48 2804:269c:feac::/48 maxlen: 48 2804:269c:fead::/48 maxlen: 48 2804:269c:feae::/48 maxlen: 48 2804:269c:feaf::/48 maxlen: 48 2804:269c:feb0::/48 maxlen: 48 2804:269c:feb1::/48 maxlen: 48 2804:269c:feb2::/48 maxlen: 48 2804:269c:feb3::/48 maxlen: 48 2804:269c:feb4::/48 maxlen: 48 2804:269c:feb5::/48 maxlen: 48 2804:269c:feb6::/48 maxlen: 48 2804:269c:feb7::/48 maxlen: 48 2804:269c:feb8::/48 maxlen: 48 2804:269c:feb9::/48 maxlen: 48 2804:269c:feba::/48 maxlen: 48 2804:269c:febb::/48 maxlen: 48 2804:269c:febc::/48 maxlen: 48 2804:269c:febd::/48 maxlen: 48 2804:269c:febe::/48 maxlen: 48 2804:269c:febf::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 15:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8b:72:d3:02:31:5f:d2:94:b9:58:60:fa:d8:c2:25:1f:e7:72:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79647511753842C2E53F2B5A8CA789825A09B7D Validity Not Before: Jul 15 13:42:27 2026 GMT Not After : Jul 14 13:47:27 2027 GMT Subject: CN=CEDA7978030EA509EE4ABC4EC49BCF80B633F88B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e8:00:e3:ab:ed:88:93:14:6a:59:dd:e3:f3: 21:dc:a6:89:2f:cf:12:59:80:34:42:50:66:17:5c: 22:8f:62:97:c5:03:d5:6d:24:0d:1a:cc:2a:a6:2a: 4e:81:be:ec:8e:19:4e:cb:00:97:c9:77:f4:38:d5: 90:ab:8d:f6:ed:37:f7:95:94:f8:02:3c:db:e1:06: 6f:91:ee:99:20:45:ba:af:72:5a:a4:e3:3e:75:33: 6e:83:7f:ba:e7:16:9b:bf:20:08:d5:e2:a4:98:4f: b8:3e:4f:c8:6c:67:d4:a6:ca:6c:91:fb:0d:bb:2e: 24:54:80:d8:c2:1e:3d:f0:37:81:b8:68:49:a7:cb: 16:d0:7c:b6:e8:f1:b7:d6:3d:07:1c:ab:a7:04:85: 4a:f3:2c:df:cf:f5:63:17:51:c0:4a:c4:12:f1:5e: 46:89:c5:4c:bc:08:b1:37:cd:49:4f:5c:4f:b2:ee: ba:b9:a8:74:9e:2d:1a:8a:63:9e:51:74:5f:59:22: a2:a2:a2:31:ca:2d:6b:af:0a:c1:1a:58:9c:6c:3c: 92:c7:d0:c1:2e:8e:29:3a:a3:90:37:01:e3:eb:90: 5a:4a:7a:39:fb:b7:ff:7f:23:9a:52:47:35:c0:bd: 34:f3:0a:5a:18:88:ef:e9:93:49:01:78:0a:67:0e: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DA:79:78:03:0E:A5:09:EE:4A:BC:4E:C4:9B:CF:80:B6:33:F8:8B X509v3 Authority Key Identifier: keyid:F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/AS61574.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.229.0-138.185.230.255 IPv6: 2804:269c:c::/46 2804:269c:fe80::/42 Signature Algorithm: sha256WithRSAEncryption 6e:06:e9:78:26:b2:e9:5c:6c:f0:2f:33:c4:e0:76:59:14:6e: a7:38:51:b6:25:31:c3:01:b6:a8:06:69:aa:b6:76:33:f3:04: 33:4b:89:64:36:49:e3:aa:34:61:6e:7b:31:26:b9:c6:57:94: 6e:aa:61:b7:ce:1a:6c:01:25:b0:41:46:19:94:37:4c:79:26: 2e:33:21:7f:55:98:ef:d0:24:68:70:76:6b:74:72:df:af:fb: 6e:1e:b9:31:9a:4c:6b:b6:82:44:78:25:b6:d1:0d:97:3d:b8: 36:1e:b9:c4:4c:53:89:3e:36:49:35:a4:dd:76:14:97:29:14: ec:df:97:00:db:88:7c:87:cf:00:1f:d5:98:96:96:44:65:3d: 23:cb:2c:bf:e2:ca:75:33:ac:ec:5b:cc:92:50:6f:08:2b:06: 5f:85:84:87:04:9c:d1:c8:32:36:92:cd:df:c4:57:fa:e9:44: ce:5e:87:d2:4f:01:2f:5f:63:87:34:fe:9a:94:bc:07:32:97: 6b:2a:ef:e1:8c:73:8e:36:b6:5b:4b:40:66:8d:15:1a:b8:79: 36:11:9b:89:a8:66:71:e0:af:84:36:01:76:dd:a3:59:be:a2: b8:c7:d0:02:82:2f:68:15:c5:96:a6:88:f4:5c:71:2b:af:ea: 8b:f9:b6:5f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUZYty0wIxX9KUuVhg+tjCJR/nck4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NjQ3NTExNzUzODQyQzJFNTNGMkI1QThDQTc4OTgy NUEwOUI3RDAeFw0yNjA3MTUxMzQyMjdaFw0yNzA3MTQxMzQ3MjdaMDMxMTAvBgNV BAMTKENFREE3OTc4MDMwRUE1MDlFRTRBQkM0RUM0OUJDRjgwQjYzM0Y4OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6ADjq+2IkxRqWd3j8yHcpokv zxJZgDRCUGYXXCKPYpfFA9VtJA0azCqmKk6BvuyOGU7LAJfJd/Q41ZCrjfbtN/eV lPgCPNvhBm+R7pkgRbqvclqk4z51M26Df7rnFpu/IAjV4qSYT7g+T8hsZ9SmymyR +w27LiRUgNjCHj3wN4G4aEmnyxbQfLbo8bfWPQccq6cEhUrzLN/P9WMXUcBKxBLx XkaJxUy8CLE3zUlPXE+y7rq5qHSeLRqKY55RdF9ZIqKiojHKLWuvCsEaWJxsPJLH 0MEujik6o5A3AePrkFpKejn7t/9/I5pSRzXAvTTzCloYiO/pk0kBeApnDhLDAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUztp5eAMOpQnuSrxOxJvPgLYz+IswHwYDVR0j BBgwFoAU95ZHURdThCwuU/K1qMp4mCWgm30wDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMS9GNzk2NDc1MTE3NTM4NDJDMkU1M0Yy QjVBOENBNzg5ODI1QTA5QjdELmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xL0Y3OTY0NzUxMTc1Mzg0MkMyRTUzRjJCNUE4Q0E3ODk4MjVBMDlCN0QuY2Vy MGQGCCsGAQUFBwELBFgwVjBUBggrBgEFBQcwC4ZIcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8xL0FTNjE1 NzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQQYIKwYBBQUHAQcBAf8E MjAwMBQEAgABMA4wDAMEAIq55QMEAIq55jAYBAIAAjASAwcCKAQmnAAMAwcGKAQm nP6AMA0GCSqGSIb3DQEBCwUAA4IBAQBuBul4JrLpXGzwLzPE4HZZFG6nOFG2JTHD AbaoBmmqtnYz8wQzS4lkNknjqjRhbnsxJrnGV5RuqmG3zhpsASWwQUYZlDdMeSYu MyF/VZjv0CRocHZrdHLfr/tuHrkxmkxrtoJEeCW20Q2XPbg2HrnETFOJPjZJNaTd dhSXKRTs35cA24h8h88AH9WYlpZEZT0jyyy/4sp1M6zsW8ySUG8IKwZfhYSHBJzR yDI2ks3fxFf66UTOXofSTwEvX2OHNP6alLwHMpdrKu/hjHOONrZbS0BmjRUauHk2 EZuJqGZx4K+ENgF23aNZvqK4x9ACgi9oFcWWpoj0XHErr+qL+bZf -----END CERTIFICATE-----Generated at Thu Jul 23 21:02:02 2026 by rpki-client