This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/323630323a663438623a3a2f33362d3438203d3e203631393631.roa
File: 323630323a663438623a3a2f33362d3438203d3e203631393631.roa (raw, json)
Hash identifier: tF1TO5OePBirSA2MxPH7uXQfaSSl0HRibFaeUgy/1P4=
Subject key identifier: 3B:2B:B5:72:E9:F2:CF:01:0F:23:E6:BE:C7:D6:87:E5:6A:A9:FA:D4
Certificate issuer: /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial: 6AF6EB8F9EF2A29B3CBA98FA3D1535580F756137
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/3/323630323a663438623a3a2f33362d3438203d3e203631393631.roa
Signing time: Fri 19 Dec 2025 16:47:55 +0000
ROA not before: Fri 19 Dec 2025 16:42:55 +0000
ROA not after: Fri 18 Dec 2026 16:47:55 +0000
asID: 61961
IP address blocks: 2602:f48b::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 17:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f6:eb:8f:9e:f2:a2:9b:3c:ba:98:fa:3d:15:35:58:0f:75:61:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Validity
Not Before: Dec 19 16:42:55 2025 GMT
Not After : Dec 18 16:47:55 2026 GMT
Subject: CN=3B2BB572E9F2CF010F23E6BEC7D687E56AA9FAD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:bc:b9:9c:4a:24:80:7d:fa:0e:7f:15:a9:
80:e2:3f:ee:5e:49:a4:d3:da:ce:e5:46:bf:5a:68:
59:87:bc:04:50:f7:d0:f0:4f:f9:b3:b8:3e:3e:57:
6b:83:58:82:56:80:9c:11:10:88:2c:ec:3f:eb:02:
d0:b6:f9:00:1d:21:5e:d0:c0:f9:3c:70:20:b8:48:
57:93:cf:9c:44:df:33:28:6b:46:ea:5d:2f:d0:45:
d9:aa:ba:04:b4:76:29:96:87:c1:27:ee:01:84:17:
16:6c:fd:5f:3f:0f:0c:24:cf:8b:c6:44:f1:7e:e2:
b9:54:b9:6f:7b:97:1e:31:bc:3e:e6:40:1e:ab:9c:
48:f1:5f:e6:9d:05:36:80:cb:ad:25:41:82:15:ad:
3c:9b:d0:31:9b:98:1b:03:8f:7f:e5:f6:4e:5b:9d:
71:7b:69:e7:ee:19:be:c9:33:9b:db:ed:a4:39:02:
b2:40:ce:85:8b:4f:1e:b2:34:d6:a7:8f:59:54:ef:
8d:7c:ed:a9:71:8b:8b:1c:5f:13:97:73:71:3f:8a:
15:2b:dc:36:94:37:8f:45:4c:f8:7f:bb:cc:a2:58:
21:a0:53:48:d4:d5:25:46:d4:8e:d2:3c:48:0c:f6:
a8:42:e7:bf:b8:cb:fe:8e:44:5a:c8:d9:28:82:5d:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2B:B5:72:E9:F2:CF:01:0F:23:E6:BE:C7:D6:87:E5:6A:A9:FA:D4
X509v3 Authority Key Identifier:
keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/323630323a663438623a3a2f33362d3438203d3e203631393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f48b::/36
Signature Algorithm: sha256WithRSAEncryption
63:b3:ba:6d:12:67:dd:60:32:60:b5:cd:6c:39:09:b5:e3:5d:
17:06:c6:3b:01:ed:f2:00:ac:3f:f4:0d:af:e8:29:bb:71:c5:
83:8d:3b:df:b0:ba:f8:e8:3e:a5:79:41:be:3c:85:7e:16:1d:
99:73:2c:74:86:54:f3:fb:ea:da:7f:5b:a4:e8:55:20:02:d9:
99:4e:c8:de:3c:12:da:0e:03:dd:69:31:3f:4a:39:07:72:bb:
38:3c:65:2b:2c:2d:3b:52:15:b0:9d:b5:df:f4:75:9c:39:ba:
2b:5b:d2:20:cf:a4:a7:f1:de:32:ea:47:ae:ff:aa:42:a2:cc:
1e:5d:05:7b:e9:5e:c5:67:7d:9e:58:33:68:84:02:cc:8c:6e:
1e:4d:23:37:39:e5:ad:58:9a:c5:7c:63:0a:48:a7:2e:92:2d:
15:f8:1e:38:ee:61:fd:b3:28:d4:64:68:84:19:28:f5:9a:f4:
83:90:1a:7e:00:56:7e:22:88:56:91:bb:dc:b9:94:10:f0:42:
b7:91:0e:79:48:7f:c2:2d:0b:89:1d:30:95:8d:68:63:c8:e8:
ad:12:d9:24:dd:44:08:90:5c:29:4f:50:4f:79:64:0c:e8:89:
03:ed:7a:62:8a:50:8c:5d:83:35:3b:09:72:06:69:a6:d3:f8:
00:6b:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:10:08 2025 by rpki-client