This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/1Khy52FZMQ6FyAS_BS22GuQ6JOA.roa File: 1Khy52FZMQ6FyAS_BS22GuQ6JOA.roa (raw, json) Hash identifier: orVFNlwGukDyQpDLzzwIgc3sd8qvRomuULWwiWo5ruo= Subject key identifier: D4:A8:72:E7:61:59:31:0E:85:C8:04:BF:05:2D:B6:1A:E4:3A:24:E0 Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Certificate serial: 0C33 Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1Khy52FZMQ6FyAS_BS22GuQ6JOA.roa Signing time: Mon 20 Jan 2025 23:55:03 +0000 ROA not before: Mon 20 Jan 2025 23:55:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15562 IP address blocks: 194.104.129.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 3123 (0xc33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Validity Not Before: Jan 20 23:55:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=D4A872E76159310E85C804BF052DB61AE43A24E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:1e:4b:8d:d4:1c:0b:5e:98:c4:35:21:74: 16:dc:f9:b0:50:52:b2:20:49:a5:e1:e6:18:7c:cc: 39:3e:af:fd:94:26:0e:0b:20:76:8f:92:31:4d:50: c6:f8:b6:9f:2f:46:46:ff:b8:e7:72:b5:01:8f:c1: 23:38:53:1b:36:df:e7:5b:f1:59:d9:4b:9f:5a:b9: ad:60:3b:6f:ca:c5:c5:5a:24:92:77:75:a0:86:94: 10:f5:c2:7b:6b:ed:06:24:8b:1f:a5:cb:6e:d1:a3: 57:fb:22:c1:46:ee:6b:96:e5:bc:12:6f:fe:26:a7: 09:6c:4b:34:b9:53:17:92:9f:54:79:1b:a0:25:e3: 08:de:b2:93:c0:c1:0d:bf:39:7e:d0:62:25:39:5d: 36:f0:81:13:b3:89:a4:b0:be:cf:d8:de:0a:54:a6: b9:f1:c4:b4:c2:40:e8:e0:d5:1a:a4:03:71:87:92: 7f:cc:f5:2d:08:f8:7e:b0:f5:44:82:ba:e5:e8:d3: 51:29:f0:d2:55:7f:b0:ed:65:3f:ba:dc:20:4d:d0: 12:79:52:8f:a9:8e:85:25:43:94:e8:a5:ef:75:04: 8c:0a:a0:de:cf:4a:c6:38:8e:c8:96:f8:c4:5e:30: 2c:77:d2:6e:9c:3c:e0:a7:52:d2:80:ad:17:ed:3d: c6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A8:72:E7:61:59:31:0E:85:C8:04:BF:05:2D:B6:1A:E4:3A:24:E0 X509v3 Authority Key Identifier: keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1Khy52FZMQ6FyAS_BS22GuQ6JOA.roa sbgp-ipAddrBlock: critical IPv4: 194.104.129.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:4b:a2:8d:99:f1:e7:8f:8d:0b:8a:ec:be:38:71:74:aa:db: b9:97:8c:a3:cb:43:73:34:94:45:b1:53:e0:4e:af:22:ce:24: c4:07:1f:d5:51:43:61:fe:ac:96:3d:f9:5f:c7:db:2d:67:82: ba:e6:0e:32:56:17:d5:62:25:bb:c9:0c:56:d1:6a:84:c0:55: 5e:ff:5d:2a:ff:08:b7:b0:62:03:49:17:24:b8:05:9a:cc:b6: a3:8e:dd:2d:25:60:a4:8c:f0:43:4b:fa:91:72:22:30:93:a0: 81:d8:a5:c1:a0:1a:bc:c4:28:85:b8:cd:e4:d5:01:c1:ed:58: a3:fc:21:14:43:22:ab:c0:f6:70:2c:47:71:fa:dd:31:58:c9: df:17:6f:75:a4:50:8a:5e:01:89:68:d6:8b:fd:ac:bb:55:53: 16:cc:18:5b:93:d2:f7:9b:17:d8:b5:08:e9:c3:01:e1:ae:4e: 10:ad:cb:b7:d7:4f:9f:d8:bc:d1:95:b1:44:54:4d:94:a0:60: 9a:65:c5:92:a0:4e:63:7c:f1:0c:22:74:fe:8a:64:ea:85:cb: e8:03:c4:86:aa:69:78:10:04:52:83:f8:8c:ef:33:13:db:a9: 3e:c2:34:eb:70:33:38:6d:a3:f5:c1:db:31:ce:de:9a:67:fe: e1:d3:01:9c -----BEGIN CERTIFICATE----- MIIEojCCA4qgAwIBAgICDDMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMjAy MzU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEQ0QTg3MkU3NjE1OTMx MEU4NUM4MDRCRjA1MkRCNjFBRTQzQTI0RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7Bx5LjdQcC16YxDUhdBbc+bBQUrIgSaXh5hh8zDk+r/2UJg4L IHaPkjFNUMb4tp8vRkb/uOdytQGPwSM4Uxs23+db8VnZS59aua1gO2/KxcVaJJJ3 daCGlBD1wntr7QYkix+ly27Ro1f7IsFG7muW5bwSb/4mpwlsSzS5UxeSn1R5G6Al 4wjespPAwQ2/OX7QYiU5XTbwgROziaSwvs/Y3gpUprnxxLTCQOjg1RqkA3GHkn/M 9S0I+H6w9USCuuXo01Ep8NJVf7DtZT+63CBN0BJ5Uo+pjoUlQ5Tope91BIwKoN7P SsY4jsiW+MReMCx30m6cPOCnUtKArRftPcbjAgMBAAGjggG+MIIBujAdBgNVHQ4E FgQU1Khy52FZMQ6FyAS/BS22GuQ6JOAwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB /wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzFLaHk1MkZaTVE2RnlB U19CUzIyR3VRNkpPQS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC aIEwDQYJKoZIhvcNAQELBQADggEBAFtLoo2Z8eePjQuK7L44cXSq27mXjKPLQ3M0 lEWxU+BOryLOJMQHH9VRQ2H+rJY9+V/H2y1ngrrmDjJWF9ViJbvJDFbRaoTAVV7/ XSr/CLewYgNJFyS4BZrMtqOO3S0lYKSM8ENL+pFyIjCToIHYpcGgGrzEKIW4zeTV AcHtWKP8IRRDIqvA9nAsR3H63TFYyd8Xb3WkUIpeAYlo1ov9rLtVUxbMGFuT0veb F9i1COnDAeGuThCty7fXT5/YvNGVsURUTZSgYJplxZKgTmN88QwidP6KZOqFy+gD xIaqaXgQBFKD+IzvMxPbqT7CNOtwMzhto/XB2zHO3ppn/uHTAZw= -----END CERTIFICATE-----Generated at Tue Dec 23 06:08:30 2025 by rpki-client