This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/326130613a663034303a3a2f32392d3239203d3e203631393631.roa File: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (raw, json) Hash identifier: q7WGQJ75bRybHehoGPB487LwawVW780GrlEzs+BTdx4= Subject key identifier: 8F:1D:6A:7F:03:34:77:7B:23:F5:0A:A9:B2:BB:F2:2D:0D:15:9E:F6 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 69C430FEA966496A085C0B2BD3DD72D23F28FBAB Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/326130613a663034303a3a2f32392d3239203d3e203631393631.roa Signing time: Mon 01 Dec 2025 08:21:33 +0000 ROA not before: Mon 01 Dec 2025 08:16:33 +0000 ROA not after: Mon 30 Nov 2026 08:21:33 +0000 asID: 61961 IP address blocks: 2a0a:f040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c4:30:fe:a9:66:49:6a:08:5c:0b:2b:d3:dd:72:d2:3f:28:fb:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Dec 1 08:16:33 2025 GMT Not After : Nov 30 08:21:33 2026 GMT Subject: CN=8F1D6A7F0334777B23F50AA9B2BBF22D0D159EF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:f1:d5:79:73:8e:d3:81:11:13:f8:fd:fa: 31:39:3c:21:08:a5:4f:3b:8c:63:5b:38:28:ee:01: 8b:d2:03:32:49:fd:c3:f9:4d:a8:02:78:f8:88:77: 1c:fc:ca:70:59:3a:fd:91:a1:91:64:5c:3a:87:85: f3:73:60:db:ef:91:c2:94:14:cf:27:e0:63:4c:c3: 8c:8a:53:75:eb:d7:61:74:15:b7:a3:0a:cb:6b:80: ee:3b:eb:53:2e:4a:60:7a:83:bc:58:4a:26:88:99: 98:ae:73:77:7b:d4:a7:ab:91:c4:06:bf:87:a6:34: dd:73:dc:1c:46:8f:14:5d:6b:42:a9:09:82:6c:3b: 95:07:99:b5:6b:46:56:f6:b9:2d:5d:0d:9f:ca:e4: 51:b6:ea:42:c7:65:20:d2:ac:7b:2c:12:f3:8f:68: 7e:10:10:31:f6:01:b5:b2:6f:dd:26:dd:89:59:c6: ff:a3:b3:3e:5d:9f:fc:0a:03:37:53:9a:6b:a1:9f: 82:32:e9:88:3d:f2:99:75:bf:53:0b:8a:8b:ff:e9: 5f:5d:6e:89:60:35:29:c7:d2:1a:17:c9:d7:48:6c: 17:4d:28:de:d2:2b:ba:bb:38:81:84:3f:6f:9e:9a: 87:d7:86:0d:eb:62:39:71:91:82:a2:4f:4c:12:66: 02:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1D:6A:7F:03:34:77:7B:23:F5:0A:A9:B2:BB:F2:2D:0D:15:9E:F6 X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/326130613a663034303a3a2f32392d3239203d3e203631393631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:f040::/29 Signature Algorithm: sha256WithRSAEncryption 99:f1:19:a8:1c:52:bb:8a:d9:40:09:fb:70:4a:b3:79:33:73: ea:6a:12:19:94:f2:31:51:68:98:bf:49:ff:47:5f:1b:11:73: 11:80:24:79:b2:26:14:39:98:a8:ed:5e:50:fa:19:a0:e1:df: 7d:1a:9b:a8:85:d7:cc:70:50:0d:9e:07:e8:2b:e3:d8:eb:79: b2:d4:55:e6:79:ec:50:c5:7c:bf:44:63:13:ba:c9:82:27:9f: be:d5:b1:cf:af:4b:d9:3d:7b:f1:34:ca:e8:52:73:ba:c0:7f: ec:0c:87:63:50:1a:7d:0d:24:99:c2:30:cb:bb:54:02:60:9d: ac:a9:ae:03:57:a7:e5:1a:0b:31:88:cf:4a:42:d0:38:db:49: e2:2d:3a:ce:74:ad:c7:f5:8e:c4:0a:01:96:2b:ae:36:99:2b: e6:87:78:7c:ff:a0:01:27:21:d8:7a:6d:c8:b5:35:6d:23:e0: 01:38:95:ce:b9:4c:2e:84:f8:8e:f8:7e:10:56:a4:02:b0:10: 4e:e5:da:5d:3f:e6:8b:49:cf:89:ea:f8:34:aa:2d:04:ff:00: 18:33:b5:17:df:0c:96:82:c6:c1:5f:b2:6a:08:30:2c:d1:12: 65:0c:ba:e6:d9:2b:5d:2c:41:df:c0:84:fb:aa:f4:f9:b9:b8: 4b:1d:2b:0b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUacQw/qlmSWoIXAsr091y0j8o+6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNTEyMDEwODE2MzNaFw0yNjExMzAwODIxMzNaMDMxMTAvBgNV BAMTKDhGMUQ2QTdGMDMzNDc3N0IyM0Y1MEFBOUIyQkJGMjJEMEQxNTlFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0K/HVeXOO04ERE/j9+jE5PCEI pU87jGNbOCjuAYvSAzJJ/cP5TagCePiIdxz8ynBZOv2RoZFkXDqHhfNzYNvvkcKU FM8n4GNMw4yKU3Xr12F0FbejCstrgO4761MuSmB6g7xYSiaImZiuc3d71KerkcQG v4emNN1z3BxGjxRda0KpCYJsO5UHmbVrRlb2uS1dDZ/K5FG26kLHZSDSrHssEvOP aH4QEDH2AbWyb90m3YlZxv+jsz5dn/wKAzdTmmuhn4Iy6Yg98pl1v1MLiov/6V9d bolgNSnH0hoXyddIbBdNKN7SK7q7OIGEP2+emofXhg3rYjlxkYKiT0wSZgJdAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUjx1qfwM0d3sj9QqpsrvyLQ0VnvYwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4ZicnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvMzI2MTMwNjEzYTY2MzAz NDMwM2EzYTJmMzIzOTJkMzIzOTIwM2QzZTIwMzYzMTM5MzYzMS5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF AyoK8EAwDQYJKoZIhvcNAQELBQADggEBAJnxGagcUruK2UAJ+3BKs3kzc+pqEhmU 8jFRaJi/Sf9HXxsRcxGAJHmyJhQ5mKjtXlD6GaDh330am6iF18xwUA2eB+gr49jr ebLUVeZ57FDFfL9EYxO6yYInn77Vsc+vS9k9e/E0yuhSc7rAf+wMh2NQGn0NJJnC MMu7VAJgnayprgNXp+UaCzGIz0pC0DjbSeItOs50rcf1jsQKAZYrrjaZK+aHeHz/ oAEnIdh6bci1NW0j4AE4lc65TC6E+I74fhBWpAKwEE7l2l0/5otJz4nq+DSqLQT/ ABgztRffDJaCxsFfsmoIMCzREmUMuubZK10sQd/AhPuq9Pm5uEsdKws= -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:50 2025 by rpki-client