Route Origin Authorization
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/326130613a663034303a3a2f32392d3239203d3e2037303130.roa
File: 326130613a663034303a3a2f32392d3239203d3e2037303130.roa (raw, json)
Hash identifier: axOAY/addUVO+GjS/O49vvKsNcuSOeEME1u8NtFgMAw=
Subject key identifier: E1:C5:31:64:D9:FB:67:03:70:D0:D5:BD:28:52:31:27:BE:10:6B:B8
Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial: 1CCA13A1632E79CE847204C677380C1EC5320991
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/326130613a663034303a3a2f32392d3239203d3e2037303130.roa
Signing time: Fri 26 Jun 2026 21:07:23 +0000
ROA not before: Fri 26 Jun 2026 21:02:23 +0000
ROA not after: Fri 25 Jun 2027 21:07:23 +0000
asID: 7010
IP address blocks: 2a0a:f040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 19:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ca:13:a1:63:2e:79:ce:84:72:04:c6:77:38:0c:1e:c5:32:09:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Validity
Not Before: Jun 26 21:02:23 2026 GMT
Not After : Jun 25 21:07:23 2027 GMT
Subject: CN=E1C53164D9FB670370D0D5BD28523127BE106BB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:5b:c6:4c:b3:84:5e:1f:70:c6:93:f2:93:
a5:fd:75:d4:68:3f:c8:a9:e2:03:fe:80:cc:49:66:
f6:8a:18:39:12:10:37:78:80:aa:5f:29:83:79:2b:
89:41:5f:55:0a:cd:22:c6:c4:7b:3c:7a:ff:6c:2c:
11:4a:3e:fc:35:52:e1:d1:f4:40:8a:70:ce:44:bf:
e0:a1:ca:b5:58:71:6b:41:3a:00:8f:c2:7d:3b:92:
05:74:a4:c3:5d:c2:4a:23:85:a2:27:bc:fc:46:60:
33:b4:b9:cb:21:69:8d:92:f0:4f:5c:86:1b:2c:cd:
31:4f:81:7f:72:12:86:83:f1:73:9a:10:55:b3:ae:
81:fd:05:b3:bc:55:48:f5:f6:1c:aa:18:b9:0a:f3:
7f:14:7a:bc:9a:f6:14:c4:44:72:d8:e6:1e:50:c3:
45:5d:ae:d3:e4:d6:5f:40:9c:6f:e6:6d:98:06:81:
d4:d5:53:bc:19:82:bd:da:0e:c3:48:3a:c0:8f:ed:
91:1f:c7:a1:e7:ae:d3:9b:1d:68:60:67:00:89:e6:
bb:22:68:63:7c:19:95:d4:90:00:a9:26:2a:a0:1e:
b2:5e:6e:c7:27:0b:5c:cb:f5:c2:5f:50:3c:e8:ec:
83:ac:83:44:48:c6:77:7a:96:1b:dc:aa:a4:ef:55:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C5:31:64:D9:FB:67:03:70:D0:D5:BD:28:52:31:27:BE:10:6B:B8
X509v3 Authority Key Identifier:
keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/326130613a663034303a3a2f32392d3239203d3e2037303130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:f040::/29
Signature Algorithm: sha256WithRSAEncryption
59:07:f6:10:26:be:5a:26:d6:58:a5:d3:df:97:f2:e7:01:5e:
d9:99:32:f8:0d:7a:fc:1c:b6:88:a5:e9:ac:bb:b1:38:6a:58:
9b:b4:3f:01:29:a2:83:c2:c5:e5:18:b4:f9:93:a2:f1:4b:e6:
69:d1:59:6e:8f:9a:13:91:d8:43:9b:d8:5d:32:da:40:3f:c0:
78:46:f3:62:43:86:de:eb:73:a1:51:0e:ce:ac:cd:7a:cc:38:
70:b9:72:c9:28:e3:6d:ec:89:59:f2:84:bd:3f:da:92:4c:f7:
a2:a0:6c:33:e8:82:8c:be:b3:11:d8:67:e3:64:3b:15:46:1e:
bd:3c:25:3a:84:0a:6e:99:23:81:99:8a:31:fb:66:76:2b:4c:
ca:3c:a4:42:27:a8:8a:ab:d9:43:87:a2:94:9b:c3:48:6d:34:
ca:e5:34:67:2f:91:70:2c:99:7c:8e:e2:d0:c4:7f:cc:0c:c1:
c5:ff:8e:28:76:77:1a:15:4a:61:04:5a:61:51:f3:1e:72:59:
d2:f6:70:e0:37:9d:8b:50:c1:f2:47:56:a8:b0:3e:7d:e1:5b:
5d:78:64:71:e2:0e:ab:aa:75:4c:f9:4a:b9:57:b8:a5:81:62:
ae:f5:4e:5b:d3:f3:b4:0d:6e:68:f9:a2:51:f4:6e:07:8a:d6:
19:cf:fc:4b
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUHMoToWMuec6EcgTGdzgMHsUyCZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx
N2JkZTlhODAeFw0yNjA2MjYyMTAyMjNaFw0yNzA2MjUyMTA3MjNaMDMxMTAvBgNV
BAMTKEUxQzUzMTY0RDlGQjY3MDM3MEQwRDVCRDI4NTIzMTI3QkUxMDZCQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWUlvGTLOEXh9wxpPyk6X9ddRo
P8ip4gP+gMxJZvaKGDkSEDd4gKpfKYN5K4lBX1UKzSLGxHs8ev9sLBFKPvw1UuHR
9ECKcM5Ev+ChyrVYcWtBOgCPwn07kgV0pMNdwkojhaInvPxGYDO0ucshaY2S8E9c
hhsszTFPgX9yEoaD8XOaEFWzroH9BbO8VUj19hyqGLkK838Uerya9hTERHLY5h5Q
w0VdrtPk1l9AnG/mbZgGgdTVU7wZgr3aDsNIOsCP7ZEfx6HnrtObHWhgZwCJ5rsi
aGN8GZXUkACpJiqgHrJebscnC1zL9cJfUDzo7IOsg0RIxnd6lhvcqqTvVR6bAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQU4cUxZNn7ZwNw0NW9KFIxJ74Qa7gwHwYDVR0j
BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs
aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC
ZTk2YWcuY2VyMHwGCCsGAQUFBwELBHAwbjBsBggrBgEFBQcwC4ZgcnN5bmM6Ly9y
cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvMzI2MTMwNjEzYTY2MzAz
NDMwM2EzYTJmMzIzOTJkMzIzOTIwM2QzZTIwMzczMDMxMzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMq
CvBAMA0GCSqGSIb3DQEBCwUAA4IBAQBZB/YQJr5aJtZYpdPfl/LnAV7ZmTL4DXr8
HLaIpemsu7E4alibtD8BKaKDwsXlGLT5k6LxS+Zp0Vluj5oTkdhDm9hdMtpAP8B4
RvNiQ4be63OhUQ7OrM16zDhwuXLJKONt7IlZ8oS9P9qSTPeioGwz6IKMvrMR2Gfj
ZDsVRh69PCU6hApumSOBmYox+2Z2K0zKPKRCJ6iKq9lDh6KUm8NIbTTK5TRnL5Fw
LJl8juLQxH/MDMHF/44odncaFUphBFphUfMeclnS9nDgN52LUMHyR1aosD594Vtd
eGRx4g6rqnVM+Uq5V7ilgWKu9U5b0/O0DW5o+aJR9G4HitYZz/xL
-----END CERTIFICATE-----
Generated at Mon Jul 13 05:27:39 2026 by rpki-client