
$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33613a3a2f34382d3438203d3e203631353735.roa
File: 323830343a323639633a33613a3a2f34382d3438203d3e203631353735.roa (raw, json)
Hash identifier: JxiztBjas9diXSq/zEeN4O0OCr6uoDsHqtp9NofLcyo=
Subject key identifier: 3C:13:A0:43:5C:26:C5:24:F9:CD:FB:E3:91:66:A9:56:57:82:16:42
Certificate issuer: /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Certificate serial: 0B2EAC1C4F5B8CA824F64E37DAB059094651513B
Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject info access: rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33613a3a2f34382d3438203d3e203631353735.roa
Signing time: Mon 17 Aug 2026 08:16:52 +0000
ROA not before: Mon 17 Aug 2026 08:11:52 +0000
ROA not after: Mon 16 Aug 2027 08:16:52 +0000
asID: 61575
IP address blocks: 2804:269c:3a::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 22 Sep 2026 04:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:2e:ac:1c:4f:5b:8c:a8:24:f6:4e:37:da:b0:59:09:46:51:51:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Validity
Not Before: Aug 17 08:11:52 2026 GMT
Not After : Aug 16 08:16:52 2027 GMT
Subject: CN=3C13A0435C26C524F9CDFBE39166A95657821642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:82:bf:15:81:93:f3:d1:6c:5f:98:81:7f:
a3:36:54:e1:e0:60:a1:ef:78:ad:a3:96:1f:a2:31:
2c:37:6f:92:b6:e9:94:e5:64:5f:9a:f0:40:7a:e0:
d0:96:dd:60:c6:f7:4f:96:d5:45:76:47:d7:0c:3e:
50:f0:21:85:e4:37:e2:d2:4e:cb:8e:f7:bc:34:2d:
6d:c8:29:1e:6e:38:02:b4:c4:1e:8d:e1:d1:58:d1:
12:14:a7:0a:e8:32:04:b1:26:e3:86:94:8a:81:30:
9a:3f:82:a6:0f:31:e3:f2:00:4a:a5:33:99:93:0a:
cb:45:05:dc:da:36:70:1c:20:aa:11:86:68:20:5b:
a3:c7:60:81:1d:a5:01:67:30:ad:51:5f:e8:83:ff:
af:da:b3:a9:ee:88:5e:94:11:ec:5a:8f:72:0e:59:
8e:bb:a8:12:f9:55:95:51:63:d0:2e:90:12:c2:97:
0d:4d:8f:6a:a0:44:14:9f:7d:eb:a6:74:a8:56:2c:
f0:e1:d3:12:83:a3:c2:70:5e:9a:68:87:aa:ec:cf:
ff:20:25:11:3f:30:fd:3c:81:f4:64:e9:e2:2b:89:
3e:45:48:1a:2d:68:cc:2f:21:32:ae:8b:3d:c5:67:
0e:b6:b5:14:92:c6:14:57:c9:11:13:e1:a0:ae:85:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:13:A0:43:5C:26:C5:24:F9:CD:FB:E3:91:66:A9:56:57:82:16:42
X509v3 Authority Key Identifier:
keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject Information Access:
Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/323830343a323639633a33613a3a2f34382d3438203d3e203631353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:269c:3a::/48
Signature Algorithm: sha256WithRSAEncryption
55:63:b2:0f:46:81:ff:0e:f1:04:44:bf:32:a4:81:fe:b7:f6:
ce:90:e3:95:73:cc:13:01:dd:d7:6d:b0:87:89:79:07:a0:56:
c8:26:06:70:c6:ad:59:ae:32:9b:a0:88:cc:01:6a:5b:0e:50:
75:40:00:58:f3:cb:84:dc:d5:4c:6e:8e:ec:8d:ef:3d:7f:1b:
ba:d0:1d:c1:68:54:51:3b:e0:0c:6f:56:d8:57:58:28:0d:d6:
8c:50:8d:97:4d:b8:5a:71:c9:db:9e:1a:31:b6:f1:fc:bd:d8:
c8:0a:47:a6:d4:69:b8:87:f0:9a:be:65:41:b0:d4:b1:a5:77:
d0:ef:23:7a:b8:99:6d:ce:1c:d7:09:7a:20:b2:66:50:bf:e0:
c5:6b:c9:09:d6:2e:45:d1:4e:0f:3a:59:2b:ef:ba:a2:7f:c5:
7d:06:cc:39:3d:5f:74:c3:51:78:0f:c0:2a:11:d1:7b:8f:d7:
f8:c1:db:2c:be:3b:4b:b6:76:f3:31:cf:af:8f:6d:be:3f:f1:
00:c4:99:2f:42:ea:00:cc:8d:c0:f8:bc:46:85:5f:61:a7:d8:
d7:12:bd:77:cb:eb:9f:82:57:5c:0f:2f:f2:b1:7c:99:b7:a6:
2b:17:67:a8:d0:5c:a8:31:80:d9:dc:3c:78:39:1f:de:28:19:
96:6f:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:06 2026 by rpki-client