This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/32332e3135312e3133322e302f32342d3234203d3e203631393631.roa
File:                     32332e3135312e3133322e302f32342d3234203d3e203631393631.roa (raw, json)
Hash identifier:          v8No20hTrarlcWsm3WcVuQdnMeOU9NeFzlFcrLYahz4=
Subject key identifier:   AB:41:D6:39:6A:C5:35:9B:72:23:17:70:4A:C1:D4:A9:E5:18:B9:57
Certificate issuer:       /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial:       4678E0350BFB687FFAEEEF88E1EC34C707755A60
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/3/32332e3135312e3133322e302f32342d3234203d3e203631393631.roa
Signing time:             Fri 19 Dec 2025 16:49:08 +0000
ROA not before:           Fri 19 Dec 2025 16:44:08 +0000
ROA not after:            Fri 18 Dec 2026 16:49:08 +0000
asID:                     61961
IP address blocks:        23.151.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
                          rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:78:e0:35:0b:fb:68:7f:fa:ee:ef:88:e1:ec:34:c7:07:75:5a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
        Validity
            Not Before: Dec 19 16:44:08 2025 GMT
            Not After : Dec 18 16:49:08 2026 GMT
        Subject: CN=AB41D6396AC5359B722317704AC1D4A9E518B957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:43:fd:25:60:90:6f:61:ae:2a:ce:d7:d7:6a:
                    15:0e:93:a6:2e:02:6e:51:5e:7e:5f:dc:ed:be:fe:
                    f8:b5:0a:73:b9:c6:74:e5:b2:20:d7:16:14:2a:e7:
                    b1:76:dd:43:46:73:a8:53:93:25:aa:bf:a7:c5:28:
                    35:c6:2d:f0:0f:18:c7:64:96:59:48:3c:29:ae:cc:
                    f5:b8:38:5b:fa:15:c5:6d:5e:1e:b2:48:8d:f5:3e:
                    29:cc:fd:91:41:ee:9f:cd:41:5a:19:3c:b5:6b:7c:
                    87:37:32:ba:f3:cb:ff:13:94:1e:91:3d:32:62:f4:
                    4e:a2:34:6e:69:d9:bb:ec:03:a7:9e:dc:a0:0a:db:
                    6a:1e:2f:21:53:fe:e3:b7:e3:f6:d3:03:3d:63:2f:
                    46:64:de:69:ca:e7:e6:48:3c:7d:6a:f3:b4:23:d0:
                    5f:5e:5e:30:52:33:9f:0e:62:7b:19:16:ea:9f:bf:
                    e0:5c:1c:92:48:09:f6:b4:37:e5:55:a7:27:65:41:
                    b8:a3:c6:7d:a7:ea:d1:5f:a7:0f:e6:09:f8:9e:fe:
                    bb:8f:79:97:19:b5:4e:08:63:85:75:9b:99:9d:72:
                    3b:ab:d1:c8:3a:a5:e9:8b:6c:af:49:fd:d0:a1:19:
                    20:3b:72:16:d3:b3:dc:93:87:cf:f8:60:f4:ee:45:
                    42:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:41:D6:39:6A:C5:35:9B:72:23:17:70:4A:C1:D4:A9:E5:18:B9:57
            X509v3 Authority Key Identifier:
                keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/32332e3135312e3133322e302f32342d3234203d3e203631393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:49:e0:87:05:ec:3c:f3:3c:b8:93:b8:58:0a:48:2a:7f:1c:
         84:93:e8:d3:1f:e4:ca:72:8e:bc:07:24:81:88:f1:3c:94:42:
         43:a4:2c:54:31:e0:b3:00:7b:80:8f:c1:3e:85:06:42:a1:b0:
         7f:98:93:e6:8c:3e:d8:97:67:13:cd:7b:d5:9d:79:79:2d:7b:
         d2:25:18:38:f9:17:89:b2:96:af:00:20:f4:55:89:db:41:cc:
         37:72:d5:d4:af:db:97:16:e5:b7:c6:95:1d:82:38:b7:f1:72:
         1b:b2:0e:d3:15:a7:2d:ff:a7:79:ed:a7:4c:68:24:7b:11:c1:
         c1:57:3d:11:30:51:39:f5:01:91:52:62:4c:31:69:5f:81:29:
         56:00:4c:2b:1a:29:68:d3:69:66:1f:1f:9a:e4:44:7a:46:fb:
         17:05:64:a4:81:11:1d:27:f0:7e:9b:d4:27:11:1f:d4:79:ff:
         46:15:cb:bc:d6:a9:b7:63:48:49:9d:5d:42:63:ed:69:7c:22:
         c5:07:2d:08:1b:a5:88:46:fe:7f:12:65:e6:fc:bc:9c:97:d4:
         07:c2:ed:7e:34:a1:a5:f8:da:ec:13:bd:0e:39:35:c3:a0:59:
         76:96:07:e9:b2:e9:4b:20:71:5b:da:3d:48:3c:00:64:c2:5b:
         7e:9f:81:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:16:47 2025 by rpki-client