This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa File: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (raw, json) Hash identifier: XAuPoyWgqk/2VSGKnl/UxA3UxeQIFy53PwlvcLnn9Pc= Subject key identifier: B2:E0:14:BE:2B:36:CF:5D:2C:59:59:45:5C:BD:BB:6D:A0:C6:F4:1F Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 1AF00048C065A81AAA107C83DE2033222308B331 Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa Signing time: Fri 09 Jan 2026 13:21:34 +0000 ROA not before: Fri 09 Jan 2026 13:16:34 +0000 ROA not after: Fri 08 Jan 2027 13:21:34 +0000 asID: 401551 IP address blocks: 2001:678:5e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f0:00:48:c0:65:a8:1a:aa:10:7c:83:de:20:33:22:23:08:b3:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Jan 9 13:16:34 2026 GMT Not After : Jan 8 13:21:34 2027 GMT Subject: CN=B2E014BE2B36CF5D2C5959455CBDBB6DA0C6F41F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:72:8c:b8:5c:59:f5:41:3c:90:2d:77:6e:4a: cd:3b:9c:d0:fb:9b:f0:5d:02:03:7d:3f:dc:d5:4f: 5e:10:1f:87:04:6a:c2:da:a8:de:99:1e:49:41:03: 9e:e6:f9:cb:1b:2f:1d:50:99:79:e4:65:e2:64:0e: 36:ae:ec:c7:b6:70:63:83:4a:73:3f:a5:b2:f9:bc: d0:d9:2c:f9:da:68:55:5a:44:60:99:03:9a:14:80: 53:86:69:af:06:ae:8f:c9:82:44:9c:01:27:4e:cd: e6:ec:eb:0f:49:44:72:f4:69:7b:58:05:68:bf:d3: 2a:93:57:48:3b:4d:8e:52:a2:62:67:6e:aa:ad:e1: b1:15:22:0b:27:35:89:72:b6:e7:93:72:e3:1d:a7: c4:55:fd:5d:40:4c:d9:b4:df:17:a0:78:b7:74:87: fc:84:d7:10:b6:fd:dd:61:5f:4a:88:79:8c:86:db: 2a:d5:99:d8:15:9c:a2:7b:6e:ab:f4:66:fd:6c:2c: 22:84:e1:f3:b4:8d:52:a5:0c:94:b4:b9:f6:41:23: 80:b6:b7:34:ac:08:18:3c:8d:a6:98:6c:e5:02:61: cb:9f:44:5a:44:5c:16:e2:94:0b:f3:7d:a4:f3:30: 2b:c6:87:57:8c:08:0f:b5:0d:cc:6a:5c:dc:d2:82: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E0:14:BE:2B:36:CF:5D:2C:59:59:45:5C:BD:BB:6D:A0:C6:F4:1F X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:5e4::/48 Signature Algorithm: sha256WithRSAEncryption 80:20:5d:d0:cb:cf:29:19:54:4c:04:3d:cd:4d:85:38:d4:f0: ba:f1:c3:70:d6:3d:74:ea:6b:d1:cd:28:b5:1e:6a:07:32:88: 55:93:25:1d:c3:cd:d6:0d:19:b1:db:55:48:0d:25:7d:65:a4: 6c:e1:16:6a:a1:95:f0:dc:45:88:d7:8e:db:54:c1:0e:2d:c9: 0e:09:f4:e3:5f:48:42:ee:c1:ab:fa:93:14:01:4d:18:fd:c6: f8:78:a0:45:89:7b:62:f8:07:b0:86:42:b1:53:ea:2f:98:cb: 4d:33:64:ef:ee:2f:db:2c:a8:f0:3a:21:78:da:2d:f7:17:00: 37:7a:5a:48:bd:c3:36:fb:b7:aa:82:ef:9b:32:71:5c:49:65: fb:75:58:95:1a:91:6c:61:6a:9f:ab:b6:c5:72:8a:7c:48:22: 38:d8:b1:de:ed:9a:68:1a:cb:e4:7b:5b:5f:fd:9f:f1:d5:b0: 98:ff:3f:7a:8e:c2:45:ee:7e:7f:91:1d:cd:bd:b5:d7:19:b7: cc:02:82:e2:da:ca:ca:85:92:41:a7:86:e8:b0:68:3f:71:8d: ba:4f:29:66:07:9e:bc:1c:34:55:1a:46:61:9b:1f:19:cb:91: 94:17:8e:99:e5:f8:6e:44:9b:75:4c:22:07:cd:8f:71:bc:4c: 51:85:77:f9 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUGvAASMBlqBqqEHyD3iAzIiMIszEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNjAxMDkxMzE2MzRaFw0yNzAxMDgxMzIxMzRaMDMxMTAvBgNV BAMTKEIyRTAxNEJFMkIzNkNGNUQyQzU5NTk0NTVDQkRCQjZEQTBDNkY0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdcoy4XFn1QTyQLXduSs07nND7 m/BdAgN9P9zVT14QH4cEasLaqN6ZHklBA57m+csbLx1QmXnkZeJkDjau7Me2cGOD SnM/pbL5vNDZLPnaaFVaRGCZA5oUgFOGaa8Gro/JgkScASdOzebs6w9JRHL0aXtY BWi/0yqTV0g7TY5SomJnbqqt4bEVIgsnNYlytueTcuMdp8RV/V1ATNm03xegeLd0 h/yE1xC2/d1hX0qIeYyG2yrVmdgVnKJ7bqv0Zv1sLCKE4fO0jVKlDJS0ufZBI4C2 tzSsCBg8jaaYbOUCYcufRFpEXBbilAvzfaTzMCvGh1eMCA+1DcxqXNzSgsn3AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUsuAUvis2z10sWVlFXL27baDG9B8wHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5jOi8v cnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8xLzMyMzAzMDMxM2EzNjM3 MzgzYTM1NjUzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzAzMTM1MzUzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABBngF5DANBgkqhkiG9w0BAQsFAAOCAQEAgCBd0MvPKRlUTAQ9 zU2FONTwuvHDcNY9dOpr0c0otR5qBzKIVZMlHcPN1g0ZsdtVSA0lfWWkbOEWaqGV 8NxFiNeO21TBDi3JDgn0419IQu7Bq/qTFAFNGP3G+HigRYl7YvgHsIZCsVPqL5jL TTNk7+4v2yyo8DoheNot9xcAN3paSL3DNvu3qoLvmzJxXEll+3VYlRqRbGFqn6u2 xXKKfEgiONix3u2aaBrL5HtbX/2f8dWwmP8/eo7CRe5+f5Edzb211xm3zAKC4trK yoWSQaeG6LBoP3GNuk8pZgeevBw0VRpGYZsfGcuRlBeOmeX4bkSbdUwiB82PcbxM UYV3+Q== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:22 2026 by rpki-client