This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa
File:                     3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (raw, json)
Hash identifier:          OPwW92GO7gVQnH4FN1xaY4Le9i9RXmh5YSfXdEjw79Y=
Subject key identifier:   28:1F:2E:71:1A:D8:0B:3E:6B:6C:C5:2D:89:9B:9D:F5:91:4D:EB:CC
Certificate issuer:       /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial:       4E0C4A8F2F0034C3A6C867FEDFBA3F092A07FF76
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa
Signing time:             Mon 01 Dec 2025 08:21:33 +0000
ROA not before:           Mon 01 Dec 2025 08:16:33 +0000
ROA not after:            Mon 30 Nov 2026 08:21:33 +0000
asID:                     203939
IP address blocks:        185.204.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
                          rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0c:4a:8f:2f:00:34:c3:a6:c8:67:fe:df:ba:3f:09:2a:07:ff:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
        Validity
            Not Before: Dec  1 08:16:33 2025 GMT
            Not After : Nov 30 08:21:33 2026 GMT
        Subject: CN=281F2E711AD80B3E6B6CC52D899B9DF5914DEBCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:16:5d:2a:73:d9:bf:15:fc:cb:7e:1f:60:
                    2f:02:45:74:da:ec:d2:f6:65:72:72:cd:2a:4a:6b:
                    c6:47:bb:17:67:05:46:47:38:03:c2:4a:3c:91:cf:
                    b1:be:11:5d:a2:2b:69:42:b4:55:40:ad:c2:0e:53:
                    58:05:1b:44:bc:41:5a:29:8e:51:2c:02:cd:8c:00:
                    2f:0f:96:08:11:dc:cd:ab:05:65:21:97:68:00:ce:
                    59:2a:4a:68:e4:e7:a7:84:36:dc:52:bb:aa:0f:d0:
                    fb:54:ed:08:6c:9e:62:5a:70:7c:f8:b1:f1:33:1e:
                    d3:f8:25:17:d5:32:b0:b2:e4:13:cb:32:4a:d8:9f:
                    80:b4:81:97:e7:c4:40:e1:7e:a2:f4:f5:ec:81:80:
                    64:03:80:7d:a3:d3:4b:16:4f:de:ce:24:17:25:92:
                    cd:45:b5:c2:6b:3e:60:5b:57:d5:5b:3f:72:c6:6d:
                    35:ce:9d:20:28:f5:95:ce:8d:7b:b6:53:b1:3e:5e:
                    95:29:d3:be:60:ca:38:14:ea:53:3e:2d:17:40:16:
                    3b:0f:fe:1b:81:c6:ed:c6:0e:a9:f2:35:ef:d8:24:
                    e9:35:79:b9:97:ab:f8:94:ad:84:0a:b8:35:c8:77:
                    2d:6a:3a:6d:d1:21:b2:f8:01:d5:ce:a5:88:45:e0:
                    00:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1F:2E:71:1A:D8:0B:3E:6B:6C:C5:2D:89:9B:9D:F5:91:4D:EB:CC
            X509v3 Authority Key Identifier:
                keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:2c:e2:fa:af:eb:23:36:a7:2c:43:a9:85:19:f7:9e:35:cd:
         74:f2:d3:67:48:1b:3f:c5:c7:77:12:fe:7c:ea:ff:f8:8a:21:
         1a:18:0c:be:2b:d6:15:07:f6:5b:c8:cc:22:95:05:b9:60:f3:
         f4:84:53:27:68:d2:77:07:dd:75:b8:c6:99:a2:00:0e:af:e2:
         25:3e:91:50:28:79:dc:53:5c:e4:90:a6:58:dc:1f:81:f7:70:
         11:3d:9a:61:64:e5:d1:8c:46:ba:8d:84:d6:44:54:50:02:85:
         e0:8a:8f:11:70:12:a4:7f:59:b6:c6:d8:4d:72:01:fc:66:7b:
         5a:81:98:03:40:77:4b:1f:0c:c6:98:81:2e:a0:8e:2d:ff:16:
         c0:1c:97:3f:7b:33:2e:7f:ba:cf:26:67:91:8e:c7:f9:fe:ff:
         01:62:b2:cb:23:b8:85:27:24:14:0a:18:ce:b1:d6:71:c4:fd:
         2a:89:24:4d:18:57:8a:7a:89:49:e6:58:78:69:cf:96:a2:e4:
         22:44:44:4c:72:5b:41:b5:54:c5:b4:c1:cc:a4:3a:77:a4:61:
         85:e7:34:1c:78:82:95:97:28:b1:b6:a7:0e:5a:8d:28:f3:c1:
         fb:10:46:7e:51:4d:9f:88:26:57:eb:82:ab:90:eb:a8:33:96:
         93:10:31:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:33:57 2025 by rpki-client