This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/0/323030313a3637633a6438303a3a2f34382d3438203d3e20343031353531.roa File: 323030313a3637633a6438303a3a2f34382d3438203d3e20343031353531.roa (raw, json) Hash identifier: 7s5kSYH1DbSfowuVOrG3wfjclNvq71vCWTMKX5SA1NA= Subject key identifier: E7:7F:38:20:95:51:99:14:4A:30:DE:39:77:E0:AA:18:EE:1F:0B:48 Certificate issuer: /CN=b60561dffbfde255fec14d4d9f0e13f4375352e4 Certificate serial: 67E14008E569A0E491640392D34A23CC5EB7332F Authority key identifier: B6:05:61:DF:FB:FD:E2:55:FE:C1:4D:4D:9F:0E:13:F4:37:53:52:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgVh3_v94lX-wU1Nnw4T9DdTUuQ.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/0/323030313a3637633a6438303a3a2f34382d3438203d3e20343031353531.roa Signing time: Thu 04 Dec 2025 19:21:34 +0000 ROA not before: Thu 04 Dec 2025 19:16:34 +0000 ROA not after: Thu 03 Dec 2026 19:21:34 +0000 asID: 401551 IP address blocks: 2001:67c:d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/0/B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.crl rsync://rpki.nellicus.net/repo/nellicus/0/B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.mft rsync://rpki.ripe.net/repository/DEFAULT/tgVh3_v94lX-wU1Nnw4T9DdTUuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e1:40:08:e5:69:a0:e4:91:64:03:92:d3:4a:23:cc:5e:b7:33:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b60561dffbfde255fec14d4d9f0e13f4375352e4 Validity Not Before: Dec 4 19:16:34 2025 GMT Not After : Dec 3 19:21:34 2026 GMT Subject: CN=E77F3820955199144A30DE3977E0AA18EE1F0B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ca:01:fc:e6:6f:ef:88:64:fe:bd:a5:a2:4c: 6c:18:bf:9a:d6:5b:13:65:9b:01:e4:97:b2:66:ec: 88:90:a7:91:bc:c2:8c:7e:be:52:eb:48:3b:ed:cb: 01:02:39:1d:d3:42:3b:99:5d:75:43:05:45:46:26: 44:24:9a:f6:b1:f8:cf:cb:86:a8:58:89:ab:9a:10: 4b:64:7d:e9:d8:86:e2:be:b4:f8:47:f5:42:2d:99: ee:25:c7:03:18:35:62:e4:15:71:23:6f:aa:0e:76: 79:e6:45:54:a5:56:d9:c6:a6:7c:7c:9c:08:78:33: cc:43:58:c5:27:64:51:e6:5d:15:6b:43:85:c8:54: 6b:79:e5:24:25:dd:ec:bc:09:33:35:95:e1:03:5e: fe:de:c0:c5:87:66:b6:cc:99:05:5f:aa:1c:1f:99: d4:9d:88:ce:0f:f1:06:e6:a8:38:df:71:a0:04:93: 51:6f:5f:0c:f6:c8:22:7b:76:49:7a:f8:7c:a7:5e: 9f:6c:25:af:4d:56:99:d8:0c:27:31:69:c7:6c:2e: a2:ff:ce:79:74:ac:a3:87:f4:cd:a6:50:e1:03:ae: c1:e9:0a:4b:c5:fe:85:7d:df:44:3c:93:cc:c7:93: 3f:dc:1a:a1:2e:54:26:04:c0:25:dc:92:8c:24:e3: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7F:38:20:95:51:99:14:4A:30:DE:39:77:E0:AA:18:EE:1F:0B:48 X509v3 Authority Key Identifier: keyid:B6:05:61:DF:FB:FD:E2:55:FE:C1:4D:4D:9F:0E:13:F4:37:53:52:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/0/B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgVh3_v94lX-wU1Nnw4T9DdTUuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/0/323030313a3637633a6438303a3a2f34382d3438203d3e20343031353531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d80::/48 Signature Algorithm: sha256WithRSAEncryption 3c:1f:c9:2f:18:33:0f:57:41:ca:e7:5b:de:13:8e:a7:81:18: 90:7a:04:c9:de:d8:54:c4:ad:18:f0:98:92:15:7e:08:f1:66: df:fb:93:ff:be:f1:bd:2f:a1:c0:40:2c:52:c2:0c:db:5f:35: 45:b5:6e:4e:7f:47:62:54:4c:a3:83:aa:6c:1a:ee:76:1e:50: 6e:1f:e4:79:c5:ca:be:4d:25:ee:3b:55:8f:70:61:f5:02:34: 15:4a:a4:ba:de:0c:90:25:62:e4:cf:cf:d8:71:62:f2:32:62: fa:86:6c:35:76:ac:e9:42:38:50:ef:bb:aa:34:be:42:ba:04: bc:f2:de:df:bd:a1:ad:01:92:70:e2:b7:ee:cd:5f:5e:93:a4: a8:51:73:70:7b:08:60:ab:5f:9d:3d:20:36:32:60:c2:16:fe: 64:46:87:fa:83:e1:12:3d:85:35:b1:0b:04:dc:90:66:b6:84: 8e:d0:b8:59:14:14:e9:29:12:66:ce:57:09:5b:c2:44:39:45: 92:3a:a6:0b:f5:d3:cc:3d:ae:0a:b7:55:7f:93:cc:4c:4e:e4: b3:6d:5c:8d:22:d1:f1:76:64:73:9f:5a:ff:4f:57:28:88:c7: 6d:b3:94:34:2b:ab:5c:8e:d0:df:1f:b5:d6:18:d6:be:1b:16: 13:f0:fd:56 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUZ+FACOVpoOSRZAOS00ojzF63My8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjYwNTYxZGZmYmZkZTI1NWZlYzE0ZDRkOWYwZTEzZjQz NzUzNTJlNDAeFw0yNTEyMDQxOTE2MzRaFw0yNjEyMDMxOTIxMzRaMDMxMTAvBgNV BAMTKEU3N0YzODIwOTU1MTk5MTQ0QTMwREUzOTc3RTBBQTE4RUUxRjBCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYygH85m/viGT+vaWiTGwYv5rW WxNlmwHkl7Jm7IiQp5G8wox+vlLrSDvtywECOR3TQjuZXXVDBUVGJkQkmvax+M/L hqhYiauaEEtkfenYhuK+tPhH9UItme4lxwMYNWLkFXEjb6oOdnnmRVSlVtnGpnx8 nAh4M8xDWMUnZFHmXRVrQ4XIVGt55SQl3ey8CTM1leEDXv7ewMWHZrbMmQVfqhwf mdSdiM4P8QbmqDjfcaAEk1FvXwz2yCJ7dkl6+HynXp9sJa9NVpnYDCcxacdsLqL/ znl0rKOH9M2mUOEDrsHpCkvF/oV930Q8k8zHkz/cGqEuVCYEwCXckowk4/8pAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU5384IJVRmRRKMN45d+CqGO4fC0gwHwYDVR0j BBgwFoAUtgVh3/v94lX+wU1Nnw4T9DdTUuQwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8wL0I2MDU2MURGRkJGREUyNTVGRUMxNEQ0RDlGMEUxM0Y0Mzc1MzUyRTQu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC90Z1ZoM192OTRsWC13VTFObnc0VDlE ZFRVdVEuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5jOi8v cnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8wLzMyMzAzMDMxM2EzNjM3 NjMzYTY0MzgzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzAzMTM1MzUzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABBnwNgDANBgkqhkiG9w0BAQsFAAOCAQEAPB/JLxgzD1dByudb 3hOOp4EYkHoEyd7YVMStGPCYkhV+CPFm3/uT/77xvS+hwEAsUsIM2181RbVuTn9H YlRMo4OqbBrudh5Qbh/kecXKvk0l7jtVj3Bh9QI0FUqkut4MkCVi5M/P2HFi8jJi +oZsNXas6UI4UO+7qjS+QroEvPLe372hrQGScOK37s1fXpOkqFFzcHsIYKtfnT0g NjJgwhb+ZEaH+oPhEj2FNbELBNyQZraEjtC4WRQU6SkSZs5XCVvCRDlFkjqmC/XT zD2uCrdVf5PMTE7ks21cjSLR8XZkc59a/09XKIjHbbOUNCurXI7Q3x+11hjWvhsW E/D9Vg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:58:52 2025 by rpki-client