Route Origin Authorization
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e2037303130.roa
File: 323030313a3637383a3565343a3a2f34382d3438203d3e2037303130.roa (raw, json)
Hash identifier: NgMsiuiWolklNu0dHOm4jeyy4AZSxHgK7gSzz1LYcr4=
Subject key identifier: 3C:6D:37:97:30:87:36:74:EB:FB:38:2B:17:14:D5:8C:7B:3B:A3:37
Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial: 18A277C2F88C6D8D969B207C2D1930FF5FF69949
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e2037303130.roa
Signing time: Fri 26 Jun 2026 21:03:22 +0000
ROA not before: Fri 26 Jun 2026 20:58:22 +0000
ROA not after: Fri 25 Jun 2027 21:03:22 +0000
asID: 7010
IP address blocks: 2001:678:5e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 19:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:a2:77:c2:f8:8c:6d:8d:96:9b:20:7c:2d:19:30:ff:5f:f6:99:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Validity
Not Before: Jun 26 20:58:22 2026 GMT
Not After : Jun 25 21:03:22 2027 GMT
Subject: CN=3C6D379730873674EBFB382B1714D58C7B3BA337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:d6:0a:72:b9:0d:c5:78:f1:e5:1b:ae:dd:
40:01:c1:20:ae:05:c0:9e:1c:81:9c:cc:be:0a:70:
f6:85:1f:61:b5:39:c9:a4:43:11:38:aa:a8:51:7e:
ed:04:9c:19:4a:eb:81:22:77:7a:70:6f:01:57:30:
bc:88:02:d7:3b:04:e6:b1:a7:aa:25:da:35:fb:03:
35:dd:16:6f:dc:ad:03:ac:fa:ea:2d:2f:31:2d:8c:
17:80:33:0f:b2:ee:6c:99:8b:40:17:8a:f9:9e:44:
2a:b8:d5:a1:75:46:ab:bc:4e:1f:6d:b2:60:3f:7e:
6f:5e:bf:fc:b2:c3:8a:80:6d:c7:94:55:d3:ca:51:
98:aa:f9:c5:b0:b9:28:e5:f5:32:44:d8:b6:d7:0b:
b4:40:45:f0:72:02:c2:30:8f:b5:03:41:9c:e9:60:
3e:71:a3:08:ce:9a:19:d5:74:38:fc:74:4f:49:00:
ca:0b:b7:40:06:05:87:e1:11:6a:0e:99:db:10:45:
4b:00:68:dd:18:64:85:ff:16:cc:43:33:3c:29:1a:
ed:cb:71:cf:72:55:ac:7b:db:e5:1a:f0:e0:00:02:
34:73:7b:a0:b6:3d:a3:63:82:86:bd:03:06:9d:75:
f2:2c:b8:55:18:f9:47:72:a2:29:08:c5:f0:e1:a2:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6D:37:97:30:87:36:74:EB:FB:38:2B:17:14:D5:8C:7B:3B:A3:37
X509v3 Authority Key Identifier:
keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/323030313a3637383a3565343a3a2f34382d3438203d3e2037303130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:5e4::/48
Signature Algorithm: sha256WithRSAEncryption
05:2f:af:2c:2d:c1:66:5b:df:42:1c:a7:4c:a5:4b:10:bf:4d:
f5:39:e2:db:64:07:e9:60:41:76:05:b2:5e:1d:e6:27:65:78:
a2:49:2b:07:a0:b5:28:e4:25:5b:72:66:a3:c7:76:ea:0d:6e:
04:15:a7:2e:84:10:5f:a0:40:7b:fc:20:c8:47:c8:13:05:d5:
c4:02:5f:c1:01:dd:11:6a:ea:48:b7:89:34:57:ab:5f:85:cf:
10:b2:1b:51:c7:91:f6:0e:7c:ed:b3:12:fa:c6:bc:f8:32:ed:
21:60:c2:29:10:65:c5:3b:54:83:f6:57:0f:bd:c9:39:f8:99:
dc:38:c2:80:27:38:2a:bb:9b:07:0c:0b:79:c5:82:0c:5c:b5:
2e:ce:00:ce:c3:79:96:ad:50:3c:64:32:04:e8:70:0b:6b:83:
31:10:63:83:94:70:85:79:73:e0:ae:48:bd:ce:03:e9:06:92:
f6:34:d0:de:d9:78:82:48:30:c1:f8:a6:7b:88:fd:94:f4:0a:
5e:08:48:a9:cd:a4:9a:95:f4:b6:55:8e:33:ed:f1:92:d6:91:
fd:ca:8c:69:c8:7c:e9:b3:1e:4b:4a:69:22:4d:16:3a:57:3b:
ca:1e:d0:0b:40:b2:2d:5e:a8:e0:a2:d4:6e:53:0e:80:b9:aa:
a3:b1:17:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:28:30 2026 by rpki-client