This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/323630323a663735323a3a2f33362d3336203d3e203631393631.roa
File:                     323630323a663735323a3a2f33362d3336203d3e203631393631.roa (raw, json)
Hash identifier:          CqNp7ek3u5kbCBWfN53/CnZ4zIsOoWuXEyXMjQabM7w=
Subject key identifier:   91:8D:E6:74:D3:ED:3F:F4:E3:F7:7B:8A:EA:4C:93:3A:6F:68:11:B7
Certificate issuer:       /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial:       11785C1BEEB2D086CBC81C1E961965305E71E7F6
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/2/323630323a663735323a3a2f33362d3336203d3e203631393631.roa
Signing time:             Tue 02 Dec 2025 19:21:34 +0000
ROA not before:           Tue 02 Dec 2025 19:16:34 +0000
ROA not after:            Tue 01 Dec 2026 19:21:34 +0000
asID:                     61961
IP address blocks:        2602:f752::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
                          rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:78:5c:1b:ee:b2:d0:86:cb:c8:1c:1e:96:19:65:30:5e:71:e7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
        Validity
            Not Before: Dec  2 19:16:34 2025 GMT
            Not After : Dec  1 19:21:34 2026 GMT
        Subject: CN=918DE674D3ED3FF4E3F77B8AEA4C933A6F6811B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:80:fa:88:a6:90:4d:64:d8:eb:b6:16:13:
                    2e:62:d6:f1:98:10:f3:e5:4e:4d:3b:dd:35:f3:c8:
                    d5:99:26:3d:91:f1:ea:8d:2b:e6:32:3e:01:a0:81:
                    16:c7:a7:a8:86:ab:4f:ce:ee:4f:8d:dd:32:15:5e:
                    9c:54:bb:0d:a1:81:93:d6:b6:d8:1c:aa:fe:13:64:
                    c5:3a:7c:e9:45:5b:e1:be:63:f4:dd:bb:d2:0d:54:
                    e9:53:eb:d8:9c:4e:1d:5f:bf:56:30:92:c2:ff:fd:
                    93:c5:bf:76:4d:ad:ce:6b:50:1f:0f:11:eb:60:54:
                    9d:08:1f:33:f2:1a:0a:87:05:de:7d:47:84:0f:3b:
                    9e:83:db:5b:a2:75:68:ec:1f:ba:db:94:39:af:96:
                    8d:05:86:f9:ab:0b:47:6a:9b:ec:3d:18:12:fa:ac:
                    5f:4e:e5:75:71:72:10:46:27:51:5a:84:04:ea:df:
                    33:1c:e3:45:4a:0c:a4:62:13:6c:73:fb:af:91:05:
                    d8:56:89:32:e5:dd:ae:02:51:7d:fa:bd:de:ab:ec:
                    c4:56:1d:7d:e8:20:95:67:60:d2:74:cc:26:d8:47:
                    87:12:de:d3:fd:3f:d2:c1:e3:c5:c9:d7:8f:76:f1:
                    c7:3b:26:81:4d:d8:1b:b4:ca:b3:24:23:8f:ce:9f:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8D:E6:74:D3:ED:3F:F4:E3:F7:7B:8A:EA:4C:93:3A:6F:68:11:B7
            X509v3 Authority Key Identifier:
                keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/323630323a663735323a3a2f33362d3336203d3e203631393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f752::/36

    Signature Algorithm: sha256WithRSAEncryption
         6a:a9:b6:eb:b6:0a:ec:bf:7e:03:cb:92:71:00:79:a9:18:52:
         35:0d:6c:3e:27:27:76:c6:33:29:6a:ad:b1:a4:e0:cd:17:f4:
         58:b7:c8:a9:12:25:a4:d3:48:fd:bf:a8:58:50:f9:61:4e:a9:
         54:3b:9c:58:5b:3a:68:ef:ec:9a:8c:05:4e:c4:77:0f:c5:30:
         f2:74:39:21:8b:4c:82:12:39:e2:bc:25:6a:43:d0:ab:90:47:
         52:f8:84:d3:8a:75:b7:be:59:58:e4:ba:bf:14:49:85:03:5f:
         9f:bc:77:73:22:c1:e5:3a:7d:21:eb:e5:df:db:bf:9e:cb:4d:
         57:be:04:13:66:bd:c4:64:48:7e:d5:04:30:8b:1a:6b:b7:7e:
         51:9e:75:dd:ff:68:36:0a:90:6c:9c:28:99:d8:da:03:d1:b1:
         79:8b:e4:f4:3d:1b:5b:dd:7b:f7:c9:c0:c2:1d:4c:19:1f:17:
         37:c3:f5:0d:19:b0:c6:4e:fe:d2:ec:af:12:76:4b:69:82:ee:
         86:7b:c3:b0:e1:84:ef:c1:c0:73:3a:a7:3c:d4:b6:fe:ac:24:
         1a:81:80:98:ac:5a:65:31:5f:77:8d:10:5f:62:96:16:73:b8:
         b4:c9:b4:d5:f2:13:51:ee:b0:0b:43:78:1a:18:fc:95:04:0d:
         9d:54:2c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:34:53 2025 by rpki-client