This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa
File: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (raw, json)
Hash identifier: nbAVFkQiqft9sHl9Hh+TY61io/BSlt5tgmWs0gncRuY=
Subject key identifier: 0B:6D:26:63:F2:F6:E1:A3:99:E1:8D:E3:B4:04:CB:03:43:BC:DB:74
Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial: 258C101003662E2772A5896E7495A9D763F5B380
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa
Signing time: Mon 01 Dec 2025 08:21:33 +0000
ROA not before: Mon 01 Dec 2025 08:16:33 +0000
ROA not after: Mon 30 Nov 2026 08:21:33 +0000
asID: 61961
IP address blocks: 2001:678:5e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:8c:10:10:03:66:2e:27:72:a5:89:6e:74:95:a9:d7:63:f5:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Validity
Not Before: Dec 1 08:16:33 2025 GMT
Not After : Nov 30 08:21:33 2026 GMT
Subject: CN=0B6D2663F2F6E1A399E18DE3B404CB0343BCDB74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:37:51:cf:fb:f5:f2:58:6d:ff:5c:57:a8:
a8:e7:b1:0f:c0:c3:b3:66:80:49:89:ed:7a:7d:84:
bd:ce:44:56:d8:29:71:ec:79:2a:3a:76:ec:04:92:
ed:e8:d6:fa:61:9e:13:fc:9d:00:06:d3:43:1e:28:
d3:a5:34:d3:6d:da:04:30:e3:43:9e:67:a5:a2:7f:
41:9f:18:e3:9b:5e:f5:d1:9f:3b:e9:b2:7d:79:62:
6f:c2:90:0e:bd:70:e2:90:7f:53:6b:dd:6d:dd:8f:
d7:d0:70:3c:b7:fa:7e:8a:e2:47:2e:b0:bd:64:7a:
30:3c:e6:c2:3b:54:b0:32:28:34:c1:45:d7:78:81:
c7:4c:4e:50:03:c6:3f:c9:ec:43:3f:40:54:97:53:
4f:2c:df:39:db:7c:63:81:5b:fe:5a:39:bb:77:68:
2c:3d:da:58:c1:4e:79:86:44:3a:d9:88:71:f9:c9:
27:ca:ba:9d:1b:ea:6b:8e:aa:99:0c:15:a4:d8:7d:
df:0c:32:d2:4d:2f:78:34:4e:8c:2c:1d:26:41:73:
56:28:2f:b3:22:5e:30:86:09:de:e3:30:00:ec:68:
ec:90:f8:15:95:7c:4a:d1:30:6f:3f:3d:c2:80:cd:
10:44:3f:12:0e:e5:32:88:62:54:86:02:bf:11:99:
00:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6D:26:63:F2:F6:E1:A3:99:E1:8D:E3:B4:04:CB:03:43:BC:DB:74
X509v3 Authority Key Identifier:
keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:5e4::/48
Signature Algorithm: sha256WithRSAEncryption
3f:8c:be:84:20:99:bd:0b:ed:0d:c1:40:7f:8e:60:bd:9d:5d:
64:43:e4:d1:df:66:be:1d:c7:21:ef:6b:9d:b5:f9:27:1c:91:
31:e3:4b:cf:15:3b:98:4d:c7:10:12:19:3f:ac:75:c1:34:1f:
33:60:dd:b8:5e:b7:d7:38:2e:a6:ff:a1:2d:2f:b5:57:c1:06:
c0:9a:6c:de:3e:24:f8:5e:2a:04:c5:5d:45:ad:d2:cb:54:51:
86:56:63:b8:45:1a:5b:6b:86:b5:df:2b:69:e9:a2:44:fc:18:
4e:3f:3e:d8:76:eb:cc:b0:3a:44:4f:fb:cd:84:e6:09:af:fc:
29:40:f1:ef:ae:c5:99:9b:5e:a8:12:a3:be:ce:7c:a1:8f:6d:
8d:12:71:13:5f:a2:2d:3d:df:e8:bb:21:9c:c1:51:a3:65:b8:
1e:ae:f0:12:5e:1b:11:df:f6:45:3e:5f:7d:db:af:f2:57:20:
61:3e:13:ab:02:5d:9d:2a:07:e8:1d:f1:33:d5:bf:67:1a:07:
c0:80:4c:01:37:3c:03:bb:0f:57:8e:1e:ae:a9:53:5c:ea:f6:
47:bf:a2:44:cb:fc:7c:03:09:88:f2:e2:9b:4c:01:7e:df:19:
45:f9:61:89:f2:2c:3b:79:a5:48:7b:c4:14:b8:a3:ff:7f:62:
43:c4:19:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:26:43 2025 by rpki-client