This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/32332e3135312e3133322e302f32342d3234203d3e203631393631.roa
File: 32332e3135312e3133322e302f32342d3234203d3e203631393631.roa (raw, json)
Hash identifier: v8No20hTrarlcWsm3WcVuQdnMeOU9NeFzlFcrLYahz4=
Subject key identifier: AB:41:D6:39:6A:C5:35:9B:72:23:17:70:4A:C1:D4:A9:E5:18:B9:57
Certificate issuer: /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial: 4678E0350BFB687FFAEEEF88E1EC34C707755A60
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/3/32332e3135312e3133322e302f32342d3234203d3e203631393631.roa
Signing time: Fri 19 Dec 2025 16:49:08 +0000
ROA not before: Fri 19 Dec 2025 16:44:08 +0000
ROA not after: Fri 18 Dec 2026 16:49:08 +0000
asID: 61961
IP address blocks: 23.151.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 17:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:78:e0:35:0b:fb:68:7f:fa:ee:ef:88:e1:ec:34:c7:07:75:5a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Validity
Not Before: Dec 19 16:44:08 2025 GMT
Not After : Dec 18 16:49:08 2026 GMT
Subject: CN=AB41D6396AC5359B722317704AC1D4A9E518B957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:43:fd:25:60:90:6f:61:ae:2a:ce:d7:d7:6a:
15:0e:93:a6:2e:02:6e:51:5e:7e:5f:dc:ed:be:fe:
f8:b5:0a:73:b9:c6:74:e5:b2:20:d7:16:14:2a:e7:
b1:76:dd:43:46:73:a8:53:93:25:aa:bf:a7:c5:28:
35:c6:2d:f0:0f:18:c7:64:96:59:48:3c:29:ae:cc:
f5:b8:38:5b:fa:15:c5:6d:5e:1e:b2:48:8d:f5:3e:
29:cc:fd:91:41:ee:9f:cd:41:5a:19:3c:b5:6b:7c:
87:37:32:ba:f3:cb:ff:13:94:1e:91:3d:32:62:f4:
4e:a2:34:6e:69:d9:bb:ec:03:a7:9e:dc:a0:0a:db:
6a:1e:2f:21:53:fe:e3:b7:e3:f6:d3:03:3d:63:2f:
46:64:de:69:ca:e7:e6:48:3c:7d:6a:f3:b4:23:d0:
5f:5e:5e:30:52:33:9f:0e:62:7b:19:16:ea:9f:bf:
e0:5c:1c:92:48:09:f6:b4:37:e5:55:a7:27:65:41:
b8:a3:c6:7d:a7:ea:d1:5f:a7:0f:e6:09:f8:9e:fe:
bb:8f:79:97:19:b5:4e:08:63:85:75:9b:99:9d:72:
3b:ab:d1:c8:3a:a5:e9:8b:6c:af:49:fd:d0:a1:19:
20:3b:72:16:d3:b3:dc:93:87:cf:f8:60:f4:ee:45:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:41:D6:39:6A:C5:35:9B:72:23:17:70:4A:C1:D4:A9:E5:18:B9:57
X509v3 Authority Key Identifier:
keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/32332e3135312e3133322e302f32342d3234203d3e203631393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.151.132.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:49:e0:87:05:ec:3c:f3:3c:b8:93:b8:58:0a:48:2a:7f:1c:
84:93:e8:d3:1f:e4:ca:72:8e:bc:07:24:81:88:f1:3c:94:42:
43:a4:2c:54:31:e0:b3:00:7b:80:8f:c1:3e:85:06:42:a1:b0:
7f:98:93:e6:8c:3e:d8:97:67:13:cd:7b:d5:9d:79:79:2d:7b:
d2:25:18:38:f9:17:89:b2:96:af:00:20:f4:55:89:db:41:cc:
37:72:d5:d4:af:db:97:16:e5:b7:c6:95:1d:82:38:b7:f1:72:
1b:b2:0e:d3:15:a7:2d:ff:a7:79:ed:a7:4c:68:24:7b:11:c1:
c1:57:3d:11:30:51:39:f5:01:91:52:62:4c:31:69:5f:81:29:
56:00:4c:2b:1a:29:68:d3:69:66:1f:1f:9a:e4:44:7a:46:fb:
17:05:64:a4:81:11:1d:27:f0:7e:9b:d4:27:11:1f:d4:79:ff:
46:15:cb:bc:d6:a9:b7:63:48:49:9d:5d:42:63:ed:69:7c:22:
c5:07:2d:08:1b:a5:88:46:fe:7f:12:65:e6:fc:bc:9c:97:d4:
07:c2:ed:7e:34:a1:a5:f8:da:ec:13:bd:0e:39:35:c3:a0:59:
76:96:07:e9:b2:e9:4b:20:71:5b:da:3d:48:3c:00:64:c2:5b:
7e:9f:81:52
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIURnjgNQv7aH/67u+I4ew0xwd1WmAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2Y5YzA1NDIwYjU1YzNlZGU3MDM1MjFkMTRkODEzNzU4
ODk4MDQyMjYwZjA3OGIyNGQwHhcNMjUxMjE5MTY0NDA4WhcNMjYxMjE4MTY0OTA4
WjAzMTEwLwYDVQQDEyhBQjQxRDYzOTZBQzUzNTlCNzIyMzE3NzA0QUMxRDRBOUU1
MThCOTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00P9JWCQb2Gu
Ks7X12oVDpOmLgJuUV5+X9ztvv74tQpzucZ05bIg1xYUKuexdt1DRnOoU5Mlqr+n
xSg1xi3wDxjHZJZZSDwprsz1uDhb+hXFbV4eskiN9T4pzP2RQe6fzUFaGTy1a3yH
NzK688v/E5QekT0yYvROojRuadm77AOnntygCttqHi8hU/7jt+P20wM9Yy9GZN5p
yufmSDx9avO0I9BfXl4wUjOfDmJ7GRbqn7/gXBySSAn2tDflVacnZUG4o8Z9p+rR
X6cP5gn4nv67j3mXGbVOCGOFdZuZnXI7q9HIOqXpi2yvSf3QoRkgO3IW07Pck4fP
+GD07kVCzwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKtB1jlqxTWbciMXcErB1Knl
GLlXMB8GA1UdIwQYMBaAFN0XW9T7fx3CNtsTzStCpkWQr+xcMA4GA1UdDwEB/wQE
AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0
L3JlcG8vbmVsbGljdXMvMy9ERDE3NUJENEZCN0YxREMyMzZEQjEzQ0QyQjQyQTY0
NTkwQUZFQzVDLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0zN2E3
LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjBlM2UzMzItMmUxMy00N2I3LWJlM2Mt
YmQyZjQwZGI2ODY0LzdmOWMwNTQyMGI1NWMzZWRlNzAzNTIxZDE0ZDgxMzc1ODg5
ODA0MjI2MGYwNzhiMjRkLmNlcjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUFBzAL
hmRyc3luYzovL3Jwa2kubmVsbGljdXMubmV0L3JlcG8vbmVsbGljdXMvMy8zMjMz
MmUzMTM1MzEyZTMxMzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzOTM2
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAXl4QwDQYJKoZIhvcNAQELBQADggEBAA9J4IcF7DzzPLiT
uFgKSCp/HIST6NMf5MpyjrwHJIGI8TyUQkOkLFQx4LMAe4CPwT6FBkKhsH+Yk+aM
PtiXZxPNe9WdeXkte9IlGDj5F4mylq8AIPRVidtBzDdy1dSv25cW5bfGlR2COLfx
chuyDtMVpy3/p3ntp0xoJHsRwcFXPREwUTn1AZFSYkwxaV+BKVYATCsaKWjTaWYf
H5rkRHpG+xcFZKSBER0n8H6b1CcRH9R5/0YVy7zWqbdjSEmdXUJj7Wl8IsUHLQgb
pYhG/n8SZeb8vJyX1AfC7X40oaX42uwTvQ45NcOgWXaWB+my6UsgcVvaPUg8AGTC
W36fgVI=
-----END CERTIFICATE-----
Generated at Sat Dec 20 06:16:47 2025 by rpki-client