This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa
File: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (raw, json)
Hash identifier: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=
Subject key identifier: 47:86:19:C7:9F:F4:50:D0:2B:B0:37:F1:08:D6:D8:47:22:B4:FA:D0
Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial: 45F77CCC6A72814CC8E16CC42FBF0BDD14D05606
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa
Signing time: Wed 21 Jan 2026 06:46:50 +0000
ROA not before: Wed 21 Jan 2026 06:41:50 +0000
ROA not after: Wed 20 Jan 2027 06:46:50 +0000
asID: 203939
IP address blocks: 185.204.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 19:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f7:7c:cc:6a:72:81:4c:c8:e1:6c:c4:2f:bf:0b:dd:14:d0:56:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Validity
Not Before: Jan 21 06:41:50 2026 GMT
Not After : Jan 20 06:46:50 2027 GMT
Subject: CN=478619C79FF450D02BB037F108D6D84722B4FAD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:1e:69:1c:98:e2:82:1f:62:94:67:bc:67:
4f:02:23:9b:27:2a:d7:cc:8d:5b:bb:0d:18:72:a9:
c8:5f:30:e7:b2:4b:f6:23:d0:e6:7a:c5:28:ac:27:
39:fd:e6:5b:e3:f6:89:4d:09:a4:36:4a:b4:56:67:
e4:f3:0a:c6:8b:f6:6d:e4:7a:ae:7b:e2:e4:39:82:
50:b1:a0:78:15:3c:88:b9:e0:e6:89:5b:72:a4:a4:
c0:35:68:26:e6:3e:fa:52:5e:44:b9:d5:68:e7:a4:
1c:b2:f0:c0:ae:86:24:6f:16:68:51:58:33:e5:74:
a4:4f:ab:8e:5e:67:a9:e9:23:c6:ce:f3:83:bd:37:
46:f8:bf:d1:39:67:d7:ba:92:cc:17:d6:e8:eb:61:
20:8e:ec:f3:9b:56:fa:36:b6:3e:49:32:bf:e2:dd:
77:d9:b1:b7:d0:42:4a:8e:e8:63:68:72:fa:ed:16:
80:1e:13:fd:2b:d6:4d:df:c6:8b:66:4b:2d:71:15:
92:87:c1:a6:75:80:cd:e0:38:3c:a9:af:9c:19:3a:
3a:55:33:11:e5:24:ce:98:0a:c2:0a:66:51:1e:45:
b8:ac:6a:6f:29:bd:50:bb:c5:0e:8f:99:ab:7d:c2:
37:f3:a2:0d:9e:83:db:4d:8f:97:9b:29:7e:c4:4c:
6e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:86:19:C7:9F:F4:50:D0:2B:B0:37:F1:08:D6:D8:47:22:B4:FA:D0
X509v3 Authority Key Identifier:
keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.14.0/23
Signature Algorithm: sha256WithRSAEncryption
74:b9:56:22:13:d0:59:7a:30:13:5b:9a:a5:c0:69:90:56:7d:
49:90:99:61:af:de:da:b4:5d:95:34:3d:19:c1:a4:de:dd:da:
bd:2e:43:73:1c:0c:ba:58:d5:fa:6a:b4:b3:e4:26:6a:64:18:
18:54:5f:aa:26:79:54:63:63:77:1a:e9:c1:3e:b5:9c:38:4d:
6c:f1:49:04:c7:9f:33:23:89:a0:62:0a:bb:7a:0a:ca:2f:95:
b8:b1:69:d5:a0:ce:97:d0:dd:70:0f:10:f6:b6:05:75:7d:66:
3d:ee:c3:de:17:eb:16:90:db:84:36:33:08:d0:12:26:44:fc:
da:d0:b4:6e:71:5b:91:69:ab:c7:04:d3:fc:7d:b5:9d:53:81:
6d:cf:87:cc:a3:08:07:85:81:64:c8:88:a5:6e:b2:7f:a4:8c:
b8:06:32:69:24:b4:36:95:93:72:be:ac:c1:82:0d:c6:e8:a3:
d8:43:fa:1d:a3:98:33:a5:f0:64:c5:1a:0a:f4:bf:39:e9:fe:
cd:bf:c2:f5:ba:da:78:8b:ec:22:88:77:ae:6a:a3:96:4b:8f:
5b:92:12:cb:f8:e1:95:f8:f8:e2:25:f5:38:ee:eb:5b:ed:c7:
17:75:7d:98:e1:03:78:53:3d:21:3d:b3:95:68:24:52:b4:94:
14:35:e0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:57:07 2026 by rpki-client