This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31342e302f32332d3234203d3e203335393431.roa
File:                     3138352e3230342e31342e302f32332d3234203d3e203335393431.roa (raw, json)
Hash identifier:          Ni1YtL2zezhli9NAuRgo8WhITIgkSnirWK4zFbOMs9A=
Subject key identifier:   02:B4:8E:3A:3B:63:DA:59:04:0B:00:31:96:4A:3F:28:3D:58:12:E7
Certificate issuer:       /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial:       793C663E2CAFBD31952C183B1A84585728A5B406
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31342e302f32332d3234203d3e203335393431.roa
Signing time:             Fri 13 Feb 2026 03:46:15 +0000
ROA not before:           Fri 13 Feb 2026 03:41:15 +0000
ROA not after:            Fri 12 Feb 2027 03:46:15 +0000
asID:                     35941
IP address blocks:        185.204.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
                          rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Feb 2026 06:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3c:66:3e:2c:af:bd:31:95:2c:18:3b:1a:84:58:57:28:a5:b4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
        Validity
            Not Before: Feb 13 03:41:15 2026 GMT
            Not After : Feb 12 03:46:15 2027 GMT
        Subject: CN=02B48E3A3B63DA59040B0031964A3F283D5812E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:e7:43:82:78:41:2e:70:ba:e2:34:8b:55:
                    ce:60:05:7b:f0:75:12:a6:84:27:b8:60:3a:ca:b6:
                    ec:df:89:fb:c0:30:64:7c:77:bc:07:92:aa:48:cb:
                    08:4e:2e:d6:b4:3a:9b:4c:f3:2a:a0:d5:c7:80:4a:
                    8d:f6:14:a0:b4:07:65:02:7b:7a:d0:ad:40:55:89:
                    76:1e:0c:11:0e:aa:40:c1:5a:9b:0c:c9:40:9e:4e:
                    ce:44:92:92:20:21:b4:59:69:0d:41:a7:cf:05:dd:
                    4a:44:5d:08:c7:e2:cc:77:80:12:ec:fb:76:d9:ae:
                    ae:cf:e0:bc:65:75:16:81:ff:8c:ea:58:63:92:6d:
                    0f:39:ca:32:df:7a:42:b9:f6:b1:4c:8a:77:4f:b2:
                    f0:bf:b9:b1:ab:ff:aa:6e:92:e7:d7:f6:e0:a1:35:
                    ab:e6:5f:74:00:e4:2b:cf:48:9b:e1:be:1e:95:9a:
                    07:c6:7c:41:51:89:9d:4e:fd:76:e3:8e:01:cf:5d:
                    b1:3d:54:c7:a7:db:3b:98:1c:3d:c9:6d:a3:08:4e:
                    ab:3a:50:bf:1d:0f:a1:fa:25:e1:e7:6f:83:f1:28:
                    3c:a0:17:20:6c:a6:e5:4c:d2:39:16:1e:61:89:bc:
                    65:13:0a:66:16:90:76:b7:df:e0:39:29:df:aa:58:
                    9c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B4:8E:3A:3B:63:DA:59:04:0B:00:31:96:4A:3F:28:3D:58:12:E7
            X509v3 Authority Key Identifier:
                keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31342e302f32332d3234203d3e203335393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:19:63:2c:ef:b4:bb:b1:b0:8b:61:a4:18:ce:18:44:8b:a6:
         08:96:8c:c5:1b:ab:1f:ca:6e:06:80:3f:72:b5:7b:eb:15:50:
         f9:5a:22:e1:2b:a1:67:a1:e1:20:b2:f0:45:9f:76:e1:23:4f:
         41:3f:48:9c:6c:d1:bd:65:b0:2e:ae:3c:89:73:a4:86:d3:d2:
         8c:31:7d:46:02:e9:83:8a:0c:74:c1:65:51:c2:e0:6f:f6:30:
         47:13:59:01:19:f8:ca:ed:eb:55:96:56:25:10:ae:e7:ce:ae:
         3b:b1:be:fd:5a:b3:21:9d:5e:12:d0:7d:34:a1:0d:f4:3b:77:
         33:1a:a3:d9:e6:49:a4:89:55:05:73:f8:86:2d:90:e5:26:60:
         87:c5:95:6d:a4:44:d4:67:82:81:a8:31:99:71:5e:df:ca:b1:
         0f:45:3c:eb:4e:e3:25:c5:fd:29:02:59:fa:95:df:79:81:13:
         1f:6c:76:dc:c8:ae:40:aa:0c:b7:b5:12:73:b7:87:e7:82:e3:
         8c:cb:9a:52:34:f9:91:49:b6:2e:6a:dc:fc:65:59:47:ab:c6:
         5d:bf:d8:fe:14:95:cc:ea:c5:25:4d:62:85:4b:f0:57:55:1d:
         f9:d7:e0:20:02:35:e1:5e:87:2a:48:cf:df:52:c1:6f:c5:36:
         6c:67:e5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 13 13:44:48 2026 by rpki-client