This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa
File: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (raw, json)
Hash identifier: fxsQm1q2pmZhASyGNHE1h8SCDsGuI34aljSVVL+enkQ=
Subject key identifier: E2:70:3A:03:D3:21:D6:A6:A2:4D:C2:6D:F2:95:74:D8:A5:22:63:91
Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial: 463217C1E143A62CBBB37EDFA34A836B272A0723
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa
Signing time: Fri 09 Jan 2026 13:21:34 +0000
ROA not before: Fri 09 Jan 2026 13:16:34 +0000
ROA not after: Fri 08 Jan 2027 13:21:34 +0000
asID: 204012
IP address blocks: 2001:678:5e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 19:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:32:17:c1:e1:43:a6:2c:bb:b3:7e:df:a3:4a:83:6b:27:2a:07:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Validity
Not Before: Jan 9 13:16:34 2026 GMT
Not After : Jan 8 13:21:34 2027 GMT
Subject: CN=E2703A03D321D6A6A24DC26DF29574D8A5226391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:c5:0b:c9:ed:06:96:30:da:eb:aa:db:70:
40:d1:75:b3:be:44:77:ab:b8:44:d3:a9:82:9d:e8:
04:b4:ed:a6:fd:31:47:fe:10:f5:74:c8:45:c2:49:
ce:4f:cc:c2:cf:9c:76:27:c8:54:5f:67:38:3c:3c:
48:cb:3c:26:05:3d:ef:31:98:34:bd:8a:dd:79:a0:
43:2b:c4:8a:32:2d:eb:43:cb:1f:32:3a:f4:12:a4:
a9:88:4a:d8:e1:66:7b:65:fe:c4:16:93:57:87:45:
35:6a:c3:24:fb:65:1b:09:b6:e4:c1:7a:b8:83:c6:
3f:0a:b4:c4:ac:1b:88:c9:ca:54:e0:e2:38:6f:e6:
49:d5:f0:bf:86:51:75:aa:17:78:ab:0c:fa:d4:3b:
d7:d4:f1:98:4f:b7:91:91:b6:23:b4:b4:3e:91:11:
a6:ac:ed:7c:bd:02:a1:1a:df:42:a9:39:c8:44:af:
1b:c7:49:31:37:e5:6a:55:aa:cc:ed:43:83:5b:a1:
30:ab:b8:5f:c3:0a:cc:1c:fc:82:c4:4e:e5:b2:b6:
8a:03:ee:5a:dc:c5:ba:a8:ad:03:1e:30:61:62:0b:
00:7d:4e:b6:ec:2f:0f:b0:4a:34:3c:2b:8a:dc:a5:
25:74:e0:82:cb:6e:2f:84:7b:50:61:86:8d:1f:51:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:70:3A:03:D3:21:D6:A6:A2:4D:C2:6D:F2:95:74:D8:A5:22:63:91
X509v3 Authority Key Identifier:
keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:5e4::/48
Signature Algorithm: sha256WithRSAEncryption
90:7e:0d:43:19:9e:d2:31:ab:65:a8:ab:00:51:64:7b:ad:c6:
99:b2:52:06:78:f0:74:6b:6c:07:64:16:39:ac:4b:5f:37:f8:
3f:90:25:63:1d:da:4c:f5:24:7a:61:55:d6:d3:21:d6:2c:59:
87:52:d1:5a:de:cb:65:b5:40:34:f0:52:a6:ad:54:fc:34:ba:
a8:9d:53:7f:5e:c0:32:18:55:c2:30:0f:63:69:0c:85:82:98:
df:72:2f:65:0b:9a:7b:71:8f:37:b3:53:ff:44:cc:e4:17:25:
50:9c:51:3a:b5:0c:9c:11:ff:66:97:2a:4d:1f:8a:0f:d2:2e:
38:95:5a:f8:b6:79:55:dd:45:34:83:05:a4:a9:ca:5f:0d:27:
dc:af:91:09:5e:08:a1:17:15:7e:2b:e0:d4:38:6d:5c:23:2c:
6f:be:e5:8a:94:50:08:bc:1f:d0:ad:88:a6:79:20:06:56:88:
f4:d6:5b:78:e0:40:b1:d7:eb:1e:fe:ad:f4:2d:dc:f9:2a:ac:
f8:06:12:fe:b9:04:a6:25:02:29:f3:3b:20:f7:60:c9:19:db:
61:a5:f8:c6:50:36:09:81:ef:17:f8:11:1d:72:2e:76:73:da:
f7:36:ee:7d:01:65:70:2c:2e:85:ae:12:e0:d6:07:8f:37:e4:
4e:c6:f2:c6
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIURjIXweFDpiy7s37fo0qDaycqByMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx
N2JkZTlhODAeFw0yNjAxMDkxMzE2MzRaFw0yNzAxMDgxMzIxMzRaMDMxMTAvBgNV
BAMTKEUyNzAzQTAzRDMyMUQ2QTZBMjREQzI2REYyOTU3NEQ4QTUyMjYzOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBE8ULye0GljDa66rbcEDRdbO+
RHeruETTqYKd6AS07ab9MUf+EPV0yEXCSc5PzMLPnHYnyFRfZzg8PEjLPCYFPe8x
mDS9it15oEMrxIoyLetDyx8yOvQSpKmIStjhZntl/sQWk1eHRTVqwyT7ZRsJtuTB
eriDxj8KtMSsG4jJylTg4jhv5knV8L+GUXWqF3irDPrUO9fU8ZhPt5GRtiO0tD6R
Eaas7Xy9AqEa30KpOchErxvHSTE35WpVqsztQ4NboTCruF/DCswc/ILETuWytooD
7lrcxbqorQMeMGFiCwB9TrbsLw+wSjQ8K4rcpSV04ILLbi+Ee1Bhho0fUVZhAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQU4nA6A9Mh1qaiTcJt8pV02KUiY5EwHwYDVR0j
BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs
aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC
ZTk2YWcuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5jOi8v
cnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8xLzMyMzAzMDMxM2EzNjM3
MzgzYTM1NjUzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNDMwMzEzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABBngF5DANBgkqhkiG9w0BAQsFAAOCAQEAkH4NQxme0jGrZair
AFFke63GmbJSBnjwdGtsB2QWOaxLXzf4P5AlYx3aTPUkemFV1tMh1ixZh1LRWt7L
ZbVANPBSpq1U/DS6qJ1Tf17AMhhVwjAPY2kMhYKY33IvZQuae3GPN7NT/0TM5Bcl
UJxROrUMnBH/ZpcqTR+KD9IuOJVa+LZ5Vd1FNIMFpKnKXw0n3K+RCV4IoRcVfivg
1DhtXCMsb77lipRQCLwf0K2IpnkgBlaI9NZbeOBAsdfrHv6t9C3c+Sqs+AYS/rkE
piUCKfM7IPdgyRnbYaX4xlA2CYHvF/gRHXIudnPa9zbufQFlcCwuha4S4NYHjzfk
Tsbyxg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:23 2026 by rpki-client