$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33393a3a2f34382d3438203d3e203631353736.roa File: 323830343a323639633a33393a3a2f34382d3438203d3e203631353736.roa (raw, json) Hash identifier: ItCTfp7Zm7miWrrl6fMguGUqGP9/OzhRMquw80N+nAQ= Subject key identifier: 4D:97:C5:E5:48:AA:71:2B:FA:42:97:BD:6F:95:0A:9D:2E:88:26:F9 Certificate issuer: /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Certificate serial: 6AA49BE65FAF0A09943751BA3A9F5D22B5755CAB Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject info access: rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33393a3a2f34382d3438203d3e203631353736.roa Signing time: Mon 31 Aug 2026 13:53:47 +0000 ROA not before: Mon 31 Aug 2026 13:48:47 +0000 ROA not after: Mon 30 Aug 2027 13:53:47 +0000 asID: 61576 IP address blocks: 2804:269c:39::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Sep 2026 16:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a4:9b:e6:5f:af:0a:09:94:37:51:ba:3a:9f:5d:22:b5:75:5c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Validity Not Before: Aug 31 13:48:47 2026 GMT Not After : Aug 30 13:53:47 2027 GMT Subject: CN=4D97C5E548AA712BFA4297BD6F950A9D2E8826F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:57:bd:10:bc:dc:0d:2f:0d:d9:5f:60:32: 24:44:fe:dc:0f:97:8f:65:22:b1:66:48:98:c4:89: 5e:38:fa:d5:fc:30:2a:73:dd:b4:e9:5f:41:46:80: 99:32:dc:9b:2a:f8:0a:81:89:ba:b8:8f:05:3d:15: 43:a3:32:48:1a:72:42:cd:89:36:17:23:41:37:a1: 84:44:d9:6a:ba:a9:c7:5d:cd:5e:05:43:06:86:c4: 4e:a8:58:88:51:ee:b9:d9:9a:5c:c4:a5:0e:26:ae: 0f:08:d3:cc:d6:26:c0:67:a3:27:06:c0:37:b0:39: 66:19:ff:c1:95:bc:a8:2c:42:1a:21:64:ea:f5:00: 81:3e:ba:5a:93:d7:94:e0:7c:1c:59:72:09:b1:a2: 76:60:8a:bb:51:56:7b:84:14:e2:61:6f:bf:cc:94: 85:f0:19:0c:ef:ca:24:34:71:8e:a7:c7:f7:5f:df: d0:d6:d6:1e:44:73:56:48:b1:cc:44:36:f0:c4:7b: c1:01:77:85:54:f2:52:e9:79:89:a5:44:a4:d5:e5: 25:23:8a:ab:1e:44:a9:18:94:00:f5:8b:93:a4:1b: 23:8d:29:14:4b:7c:96:45:4a:0c:8f:87:3e:c1:ed: 1b:71:5a:03:e9:46:9d:de:4d:4f:69:7e:83:ad:86: 26:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:97:C5:E5:48:AA:71:2B:FA:42:97:BD:6F:95:0A:9D:2E:88:26:F9 X509v3 Authority Key Identifier: keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject Information Access: Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33393a3a2f34382d3438203d3e203631353736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:269c:39::/48 Signature Algorithm: sha256WithRSAEncryption 44:63:f1:f4:84:aa:1f:b7:fd:fe:b0:2f:e1:85:92:ab:2d:6e: 79:69:02:d6:ad:3d:57:f2:30:0e:37:47:6f:6e:4c:e8:5d:d4: 7c:84:16:8a:fc:f7:aa:9f:09:72:3f:2a:65:80:21:cc:cb:75: 0f:63:77:77:fc:ec:1a:27:af:8f:0a:a4:8c:2d:04:b4:66:00: c5:de:e1:98:d4:0a:63:3e:89:cc:89:70:2e:bf:8c:b2:ae:1f: 98:44:94:ad:57:b7:e2:1d:19:87:a0:e7:9f:eb:6e:3b:dc:92: 12:9a:55:fc:9f:8c:62:e9:2f:f4:41:5b:36:0d:18:e5:50:d1: 7b:6f:bb:aa:30:3e:49:53:ee:db:24:1b:7c:e8:21:1e:da:4e: 8c:70:47:29:b8:0d:b1:e9:db:4e:cb:60:c1:27:60:08:52:21: 8d:83:42:d0:b3:36:bc:52:d3:37:18:0f:d1:44:fe:4c:f2:bd: 85:4b:f3:06:2a:f5:c8:50:f5:eb:71:54:64:1e:d8:a6:ee:19: 6c:a9:c6:5c:83:05:47:ab:58:98:17:72:57:b0:fa:88:e4:9a: a3:b3:24:eb:2f:a5:33:3d:e5:30:6b:ee:cf:9e:19:50:26:32: eb:10:68:69:f3:a4:3c:15:3c:fc:c1:5c:ce:64:71:46:df:2b: 96:c6:81:b0 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUaqSb5l+vCgmUN1G6Op9dIrV1XKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz MkM3MUREMjAeFw0yNjA4MzExMzQ4NDdaFw0yNzA4MzAxMzUzNDdaMDMxMTAvBgNV BAMTKDREOTdDNUU1NDhBQTcxMkJGQTQyOTdCRDZGOTUwQTlEMkU4ODI2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cFe9ELzcDS8N2V9gMiRE/twP l49lIrFmSJjEiV44+tX8MCpz3bTpX0FGgJky3Jsq+AqBibq4jwU9FUOjMkgackLN iTYXI0E3oYRE2Wq6qcddzV4FQwaGxE6oWIhR7rnZmlzEpQ4mrg8I08zWJsBnoycG wDewOWYZ/8GVvKgsQhohZOr1AIE+ulqT15TgfBxZcgmxonZgirtRVnuEFOJhb7/M lIXwGQzvyiQ0cY6nx/df39DW1h5Ec1ZIscxENvDEe8EBd4VU8lLpeYmlRKTV5SUj iqseRKkYlAD1i5OkGyONKRRLfJZFSgyPhz7B7RtxWgPpRp3eTU9pfoOthiZpAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUTZfF5UiqcSv6Qpe9b5UKnS6IJvkwHwYDVR0j BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjCB hwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL2tyaWxsLmRhY3Mu dXR3ZW50ZS5ubC9yZXBvL3V0d2VudGUvMS8zMjM4MzAzNDNhMzIzNjM5NjMzYTMz MzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzNzM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA KAQmnAA5MA0GCSqGSIb3DQEBCwUAA4IBAQBEY/H0hKoft/3+sC/hhZKrLW55aQLW rT1X8jAON0dvbkzoXdR8hBaK/PeqnwlyPyplgCHMy3UPY3d3/OwaJ6+PCqSMLQS0 ZgDF3uGY1ApjPonMiXAuv4yyrh+YRJStV7fiHRmHoOef62473JISmlX8n4xi6S/0 QVs2DRjlUNF7b7uqMD5JU+7bJBt86CEe2k6McEcpuA2x6dtOy2DBJ2AIUiGNg0LQ sza8UtM3GA/RRP5M8r2FS/MGKvXIUPXrcVRkHtim7hlsqcZcgwVHq1iYF3JXsPqI 5JqjsyTrL6UzPeUwa+7PnhlQJjLrEGhp86Q8FTz8wVzOZHFG3yuWxoGw -----END CERTIFICATE-----Generated at Mon Sep 21 10:37:52 2026 by rpki-client