This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/1PxbXR68dYS5Toa8qSze4nfOsZQ.roa File: 1PxbXR68dYS5Toa8qSze4nfOsZQ.roa (raw, json) Hash identifier: dg/3qJEDB8AlfRxvOkXt7SRxjDjCDm7IzmjwA5WRi10= Subject key identifier: D4:FC:5B:5D:1E:BC:75:84:B9:4E:86:BC:A9:2C:DE:E2:77:CE:B1:94 Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Certificate serial: 0C30 Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1PxbXR68dYS5Toa8qSze4nfOsZQ.roa Signing time: Mon 20 Jan 2025 15:55:03 +0000 ROA not before: Mon 20 Jan 2025 15:55:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15562 IP address blocks: 194.104.129.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 3120 (0xc30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Validity Not Before: Jan 20 15:55:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=D4FC5B5D1EBC7584B94E86BCA92CDEE277CEB194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:d3:47:93:7c:4e:17:f6:1b:46:20:c2:56: 61:08:62:7f:57:cf:7a:11:a4:e8:e9:cf:0d:31:94: bb:62:48:14:b7:5c:89:d1:20:d5:1b:70:47:b7:20: 90:8b:2d:bf:62:07:45:42:49:1d:a5:70:0a:49:98: cf:45:fd:37:09:d3:84:a8:a0:1e:7b:d9:c8:ca:92: 40:29:dd:c8:f9:3c:f7:1e:80:e4:10:1e:25:b0:f9: 45:80:9f:dc:11:35:5b:95:79:dc:37:88:35:8b:f9: ab:99:43:d7:61:b6:a6:ff:5e:f8:55:6c:59:17:a1: a8:a5:22:d4:16:63:53:a1:42:8b:2f:bc:1a:f7:3c: 06:54:b8:28:70:48:40:5c:2e:ac:1a:ac:1a:8c:e8: 08:80:e4:73:14:f3:c7:98:2d:7e:ea:cf:e6:6c:21: 69:d9:61:91:37:ae:6f:21:5a:73:f4:7e:d1:3a:fe: 9e:12:b4:e6:9c:84:59:55:d4:78:b7:0b:53:07:af: cf:2b:33:f3:4e:d0:8a:ff:41:8c:e6:e5:46:78:51: 1e:b9:97:d3:46:56:c5:89:c7:e4:7f:24:2f:e5:e9: fb:44:ed:d5:74:42:ac:9c:26:c8:44:da:d2:ad:2b: 42:52:41:1f:fe:03:9e:8f:8f:0d:24:8b:95:57:64: 33:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FC:5B:5D:1E:BC:75:84:B9:4E:86:BC:A9:2C:DE:E2:77:CE:B1:94 X509v3 Authority Key Identifier: keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/1PxbXR68dYS5Toa8qSze4nfOsZQ.roa sbgp-ipAddrBlock: critical IPv4: 194.104.129.0/24 Signature Algorithm: sha256WithRSAEncryption ab:9b:db:5b:a0:67:fb:28:12:8c:e2:d9:5b:69:d3:3d:ce:22: 33:10:6f:01:b2:87:96:cd:8a:46:b0:0d:75:af:d3:5f:58:b9: 2b:a3:13:89:3a:7e:80:8b:95:78:e9:a3:60:93:7b:df:1e:b8: da:35:5f:68:3d:9e:ef:e7:d0:7b:6a:b9:f6:99:16:03:2c:83: 31:67:60:cd:ee:d1:83:0c:5c:13:ab:57:5e:28:02:73:5e:3b: aa:fb:6a:26:62:48:65:17:74:56:38:da:be:99:e4:35:55:4b: 27:8c:bc:a4:00:09:70:bd:79:e7:08:6b:d0:b1:3c:5d:58:44: 21:0e:1e:83:10:4e:46:d1:1f:d4:81:fc:d4:20:10:b2:ba:4f: 37:0d:2e:99:49:9e:65:ab:05:99:54:db:53:33:3c:39:9d:b0: 7c:fb:8d:37:b6:88:0d:8b:67:4e:a8:88:90:5a:12:aa:e2:53: 84:9d:78:9f:37:74:df:aa:6c:d8:53:87:b9:57:c8:6a:b2:78: a8:3a:6a:2e:a4:b0:be:c6:cd:7d:35:89:ed:23:47:44:72:c6: 03:b0:6f:0d:d7:78:1d:75:a7:fa:81:06:8d:ee:cd:97:cf:48: b3:1d:93:dd:7c:15:ca:ee:30:03:a5:dc:84:be:3d:37:a5:07: f9:e2:00:7f -----BEGIN CERTIFICATE----- MIIEojCCA4qgAwIBAgICDDAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMjAx NTU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEQ0RkM1QjVEMUVCQzc1 ODRCOTRFODZCQ0E5MkNERUUyNzdDRUIxOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChaNNHk3xOF/YbRiDCVmEIYn9Xz3oRpOjpzw0xlLtiSBS3XInR INUbcEe3IJCLLb9iB0VCSR2lcApJmM9F/TcJ04SooB572cjKkkAp3cj5PPcegOQQ HiWw+UWAn9wRNVuVedw3iDWL+auZQ9dhtqb/XvhVbFkXoailItQWY1OhQosvvBr3 PAZUuChwSEBcLqwarBqM6AiA5HMU88eYLX7qz+ZsIWnZYZE3rm8hWnP0ftE6/p4S tOachFlV1Hi3C1MHr88rM/NO0Ir/QYzm5UZ4UR65l9NGVsWJx+R/JC/l6ftE7dV0 QqycJshE2tKtK0JSQR/+A56Pjw0ki5VXZDPTAgMBAAGjggG+MIIBujAdBgNVHQ4E FgQU1PxbXR68dYS5Toa8qSze4nfOsZQwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB /wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzFQeGJYUjY4ZFlTNVRv YThxU3plNG5mT3NaUS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC aIEwDQYJKoZIhvcNAQELBQADggEBAKub21ugZ/soEozi2Vtp0z3OIjMQbwGyh5bN ikawDXWv019YuSujE4k6foCLlXjpo2CTe98euNo1X2g9nu/n0HtqufaZFgMsgzFn YM3u0YMMXBOrV14oAnNeO6r7aiZiSGUXdFY42r6Z5DVVSyeMvKQACXC9eecIa9Cx PF1YRCEOHoMQTkbRH9SB/NQgELK6TzcNLplJnmWrBZlU21MzPDmdsHz7jTe2iA2L Z06oiJBaEqriU4SdeJ83dN+qbNhTh7lXyGqyeKg6ai6ksL7GzX01ie0jR0RyxgOw bw3XeB11p/qBBo3uzZfPSLMdk918FcruMAOl3IS+PTelB/niAH8= -----END CERTIFICATE-----Generated at Mon Dec 22 04:02:16 2025 by rpki-client