This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/323630323a666461643a3a2f34302d3438203d3e203631393631.roa
File: 323630323a666461643a3a2f34302d3438203d3e203631393631.roa (raw, json)
Hash identifier: pLWuN2bUHqMXgcevJT1AmoYm7sc9azuOkUaBTt9vVNg=
Subject key identifier: DB:F0:BE:CF:05:81:B1:6D:94:94:15:E8:51:C1:96:63:83:FE:0E:DD
Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial: 70561CAE23B5988D3EFC3FEC0E7A2AD92ADDB8FF
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/323630323a666461643a3a2f34302d3438203d3e203631393631.roa
Signing time: Wed 21 Jan 2026 00:05:40 +0000
ROA not before: Wed 21 Jan 2026 00:00:40 +0000
ROA not after: Wed 20 Jan 2027 00:05:40 +0000
asID: 61961
IP address blocks: 2602:fdad::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 23:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:56:1c:ae:23:b5:98:8d:3e:fc:3f:ec:0e:7a:2a:d9:2a:dd:b8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Validity
Not Before: Jan 21 00:00:40 2026 GMT
Not After : Jan 20 00:05:40 2027 GMT
Subject: CN=DBF0BECF0581B16D949415E851C1966383FE0EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:13:ff:00:12:6c:b3:7f:68:99:dc:83:56:
53:2d:be:aa:42:3a:31:f5:b7:82:03:01:cd:bf:73:
0f:b0:91:d0:0a:d5:02:6f:23:e7:e4:37:a2:a6:5a:
7c:ef:4a:2e:9f:5a:7c:4a:98:86:e3:9b:4b:a1:98:
bd:3b:d1:52:8c:00:fd:65:4a:ed:e4:2d:49:57:b9:
75:49:5a:06:91:9d:0c:b2:01:1b:a7:04:31:01:8b:
5e:35:33:a0:ae:fb:72:1f:8b:bd:c3:96:c2:b2:48:
25:91:76:98:f4:7a:4d:fe:54:da:27:40:bc:ba:4d:
d8:29:5d:48:e0:42:00:ad:9c:96:9b:11:a5:e1:65:
1c:95:bd:81:76:51:14:71:7e:86:d1:c8:59:6e:71:
33:59:35:94:de:78:15:e1:05:a0:ca:cd:a6:8a:5b:
ac:02:9d:d7:86:97:86:35:5f:56:fe:0c:4e:d3:8e:
00:07:4c:a3:bf:01:a5:0c:f1:08:88:1e:9a:e5:6e:
1e:b6:2d:bc:4d:03:c2:53:be:1c:15:e8:f5:50:25:
4e:8e:7a:55:e8:cb:97:0b:09:43:29:ff:17:0c:c9:
ae:d8:89:5a:ea:ae:e7:ee:5e:71:42:42:45:f9:4f:
99:2d:db:2c:45:af:d0:b4:e5:af:55:ce:9f:f0:7a:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F0:BE:CF:05:81:B1:6D:94:94:15:E8:51:C1:96:63:83:FE:0E:DD
X509v3 Authority Key Identifier:
keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/323630323a666461643a3a2f34302d3438203d3e203631393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fdad::/40
Signature Algorithm: sha256WithRSAEncryption
69:8f:bf:7f:99:fb:95:ce:14:af:b9:9f:37:20:4e:66:d6:eb:
34:d8:ae:a7:30:ac:23:08:cc:55:ab:70:76:6d:d7:53:1a:30:
9d:35:f5:b6:82:70:e1:db:55:12:c6:ae:9e:01:cc:72:b9:c0:
d1:87:8d:58:9d:cc:58:e3:f4:b8:3f:76:dd:aa:11:22:24:57:
c6:71:75:6d:8c:23:07:c6:b5:0d:fe:8d:89:d9:e5:7a:72:4e:
48:72:0a:e9:64:b7:e1:58:49:f4:da:4b:c1:15:d6:b2:17:37:
40:af:77:e3:39:0f:e2:d2:2d:e4:ea:4e:35:30:ff:61:13:3e:
4d:c0:7a:f3:ff:6f:09:b3:46:50:59:2c:c1:84:23:ed:05:e3:
ea:c6:86:b0:e8:84:39:1a:d0:80:08:f9:a5:c2:f4:26:0a:ed:
b4:c2:22:6c:b9:20:39:90:9a:9d:48:17:3b:ea:3e:32:7c:d9:
72:98:e7:41:af:a9:a1:b4:ee:f6:91:7c:95:00:ea:59:e5:92:
13:32:23:71:d9:79:22:f3:f0:b5:f9:cf:e9:d4:85:d5:a4:1d:
1e:fc:74:41:5c:e1:54:41:c0:f9:27:d2:ef:89:de:f3:dd:3d:
02:2c:fb:12:a1:4a:eb:8e:5b:5d:0e:f3:28:12:f4:1b:94:9c:
00:3f:ca:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:57:00 2026 by rpki-client