This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/323630323a666461643a3a2f34302d3438203d3e203631393631.roa
File:                     323630323a666461643a3a2f34302d3438203d3e203631393631.roa (raw, json)
Hash identifier:          pLWuN2bUHqMXgcevJT1AmoYm7sc9azuOkUaBTt9vVNg=
Subject key identifier:   DB:F0:BE:CF:05:81:B1:6D:94:94:15:E8:51:C1:96:63:83:FE:0E:DD
Certificate issuer:       /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial:       70561CAE23B5988D3EFC3FEC0E7A2AD92ADDB8FF
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/2/323630323a666461643a3a2f34302d3438203d3e203631393631.roa
Signing time:             Wed 21 Jan 2026 00:05:40 +0000
ROA not before:           Wed 21 Jan 2026 00:00:40 +0000
ROA not after:            Wed 20 Jan 2027 00:05:40 +0000
asID:                     61961
IP address blocks:        2602:fdad::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
                          rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 23:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:56:1c:ae:23:b5:98:8d:3e:fc:3f:ec:0e:7a:2a:d9:2a:dd:b8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
        Validity
            Not Before: Jan 21 00:00:40 2026 GMT
            Not After : Jan 20 00:05:40 2027 GMT
        Subject: CN=DBF0BECF0581B16D949415E851C1966383FE0EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:82:13:ff:00:12:6c:b3:7f:68:99:dc:83:56:
                    53:2d:be:aa:42:3a:31:f5:b7:82:03:01:cd:bf:73:
                    0f:b0:91:d0:0a:d5:02:6f:23:e7:e4:37:a2:a6:5a:
                    7c:ef:4a:2e:9f:5a:7c:4a:98:86:e3:9b:4b:a1:98:
                    bd:3b:d1:52:8c:00:fd:65:4a:ed:e4:2d:49:57:b9:
                    75:49:5a:06:91:9d:0c:b2:01:1b:a7:04:31:01:8b:
                    5e:35:33:a0:ae:fb:72:1f:8b:bd:c3:96:c2:b2:48:
                    25:91:76:98:f4:7a:4d:fe:54:da:27:40:bc:ba:4d:
                    d8:29:5d:48:e0:42:00:ad:9c:96:9b:11:a5:e1:65:
                    1c:95:bd:81:76:51:14:71:7e:86:d1:c8:59:6e:71:
                    33:59:35:94:de:78:15:e1:05:a0:ca:cd:a6:8a:5b:
                    ac:02:9d:d7:86:97:86:35:5f:56:fe:0c:4e:d3:8e:
                    00:07:4c:a3:bf:01:a5:0c:f1:08:88:1e:9a:e5:6e:
                    1e:b6:2d:bc:4d:03:c2:53:be:1c:15:e8:f5:50:25:
                    4e:8e:7a:55:e8:cb:97:0b:09:43:29:ff:17:0c:c9:
                    ae:d8:89:5a:ea:ae:e7:ee:5e:71:42:42:45:f9:4f:
                    99:2d:db:2c:45:af:d0:b4:e5:af:55:ce:9f:f0:7a:
                    27:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F0:BE:CF:05:81:B1:6D:94:94:15:E8:51:C1:96:63:83:FE:0E:DD
            X509v3 Authority Key Identifier:
                keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/323630323a666461643a3a2f34302d3438203d3e203631393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdad::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:8f:bf:7f:99:fb:95:ce:14:af:b9:9f:37:20:4e:66:d6:eb:
         34:d8:ae:a7:30:ac:23:08:cc:55:ab:70:76:6d:d7:53:1a:30:
         9d:35:f5:b6:82:70:e1:db:55:12:c6:ae:9e:01:cc:72:b9:c0:
         d1:87:8d:58:9d:cc:58:e3:f4:b8:3f:76:dd:aa:11:22:24:57:
         c6:71:75:6d:8c:23:07:c6:b5:0d:fe:8d:89:d9:e5:7a:72:4e:
         48:72:0a:e9:64:b7:e1:58:49:f4:da:4b:c1:15:d6:b2:17:37:
         40:af:77:e3:39:0f:e2:d2:2d:e4:ea:4e:35:30:ff:61:13:3e:
         4d:c0:7a:f3:ff:6f:09:b3:46:50:59:2c:c1:84:23:ed:05:e3:
         ea:c6:86:b0:e8:84:39:1a:d0:80:08:f9:a5:c2:f4:26:0a:ed:
         b4:c2:22:6c:b9:20:39:90:9a:9d:48:17:3b:ea:3e:32:7c:d9:
         72:98:e7:41:af:a9:a1:b4:ee:f6:91:7c:95:00:ea:59:e5:92:
         13:32:23:71:d9:79:22:f3:f0:b5:f9:cf:e9:d4:85:d5:a4:1d:
         1e:fc:74:41:5c:e1:54:41:c0:f9:27:d2:ef:89:de:f3:dd:3d:
         02:2c:fb:12:a1:4a:eb:8e:5b:5d:0e:f3:28:12:f4:1b:94:9c:
         00:3f:ca:c0
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUcFYcriO1mI0+/D/sDnoq2SrduP8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk
Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjYwMTIxMDAwMDQwWhcNMjcwMTIwMDAwNTQw
WjAzMTEwLwYDVQQDEyhEQkYwQkVDRjA1ODFCMTZEOTQ5NDE1RTg1MUMxOTY2Mzgz
RkUwRUREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoIT/wASbLN/
aJncg1ZTLb6qQjox9beCAwHNv3MPsJHQCtUCbyPn5Deiplp870oun1p8SpiG45tL
oZi9O9FSjAD9ZUrt5C1JV7l1SVoGkZ0MsgEbpwQxAYteNTOgrvtyH4u9w5bCskgl
kXaY9HpN/lTaJ0C8uk3YKV1I4EIArZyWmxGl4WUclb2BdlEUcX6G0chZbnEzWTWU
3ngV4QWgys2milusAp3XhpeGNV9W/gxO044AB0yjvwGlDPEIiB6a5W4eti28TQPC
U74cFej1UCVOjnpV6MuXCwlDKf8XDMmu2Ila6q7n7l5xQkJF+U+ZLdssRa/QtOWv
Vc6f8HonYQIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFNvwvs8FgbFtlJQV6FHBlmOD
/g7dMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE
AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0
L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw
NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji
LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct
MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5
OWIxOWNiY2NlNjg2M2EzLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuG
YnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzMyMzYz
MDMyM2E2NjY0NjE2NDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM2MzEzOTM2MzEu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MA4EAgACMAgDBgAmAv2tADANBgkqhkiG9w0BAQsFAAOCAQEAaY+/f5n7lc4Ur7mf
NyBOZtbrNNiupzCsIwjMVatwdm3XUxownTX1toJw4dtVEsaungHMcrnA0YeNWJ3M
WOP0uD923aoRIiRXxnF1bYwjB8a1Df6NidnlenJOSHIK6WS34VhJ9NpLwRXWshc3
QK934zkP4tIt5OpONTD/YRM+TcB68/9vCbNGUFkswYQj7QXj6saGsOiEORrQgAj5
pcL0JgrttMIibLkgOZCanUgXO+o+MnzZcpjnQa+pobTu9pF8lQDqWeWSEzIjcdl5
IvPwtfnP6dSF1aQdHvx0QVzhVEHA+SfS74ne8909Aiz7EqFK645bXQ7zKBL0G5Sc
AD/KwA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:57:00 2026 by rpki-client