This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/2F0rBpjia5gNF_v1OiLKtUsZn7Y.roa File: 2F0rBpjia5gNF_v1OiLKtUsZn7Y.roa (raw, json) Hash identifier: joaDtM5VE6wsTfgPAtYiJmtebpkJlgjgC1wQvyPj3Xc= Subject key identifier: D8:5D:2B:06:98:E2:6B:98:0D:17:FB:F5:3A:22:CA:B5:4B:19:9F:B6 Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Certificate serial: 0C78 Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/2F0rBpjia5gNF_v1OiLKtUsZn7Y.roa Signing time: Tue 28 Jan 2025 15:55:03 +0000 ROA not before: Tue 28 Jan 2025 15:55:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15562 IP address blocks: 194.104.129.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 3192 (0xc78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Validity Not Before: Jan 28 15:55:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=D85D2B0698E26B980D17FBF53A22CAB54B199FB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:ad:d4:d9:b7:69:ca:b3:d3:45:c2:f2:bd: b1:71:bb:80:4a:8c:30:7a:9f:a7:b3:6f:08:c3:81: 90:59:42:e5:57:7d:03:fb:04:22:e2:cc:7b:13:1e: 08:67:fc:cf:eb:be:3e:a8:2e:92:51:54:59:05:1e: b2:84:68:89:4d:99:8f:5b:62:1d:95:06:6b:52:44: 1c:b4:02:bb:59:72:4f:df:27:e3:29:85:85:e1:21: f4:48:cf:bd:83:ad:d9:4c:3f:68:f1:51:03:73:89: b8:bb:fc:b8:0f:bb:d6:29:d3:28:1c:eb:d0:28:84: fe:16:4e:d0:1d:8b:af:a6:ee:f1:44:20:a6:9d:c5: 03:52:2e:bc:9d:7a:da:b7:22:03:31:aa:2d:e0:c3: 28:91:4e:43:7f:4c:56:bc:d9:83:7b:78:fe:3d:05: ce:e2:6c:cb:62:9e:fd:09:64:23:a6:f8:6f:e0:c7: b6:4c:0b:ee:be:5b:3e:fd:15:b4:67:fa:16:99:ac: 79:39:bb:a6:95:eb:af:ed:97:0f:21:df:f4:ea:f2: 5f:b0:26:e3:83:be:33:58:36:23:af:64:b3:ef:fe: be:e5:3b:4b:bc:58:35:33:6a:e2:f6:24:26:e6:78: 85:4c:b5:a9:44:4f:61:1d:9c:32:67:2b:b4:11:a9: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5D:2B:06:98:E2:6B:98:0D:17:FB:F5:3A:22:CA:B5:4B:19:9F:B6 X509v3 Authority Key Identifier: keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/2F0rBpjia5gNF_v1OiLKtUsZn7Y.roa sbgp-ipAddrBlock: critical IPv4: 194.104.129.0/24 Signature Algorithm: sha256WithRSAEncryption d6:58:1d:a0:f5:c2:d7:cd:74:ab:46:e9:95:30:ed:28:13:23: 08:ff:fd:a0:ee:90:8b:72:eb:87:ea:b8:3a:13:15:a8:1f:2c: 24:d1:28:c9:c7:71:76:cd:6b:99:1e:00:fa:3f:8b:fc:ef:82: 57:35:3f:f7:bb:1f:1c:5f:cc:0a:ab:7e:62:90:c7:e2:27:92: 00:10:d0:8d:41:a9:29:39:43:e9:ec:62:14:77:38:2f:44:f0: f1:b6:ac:e1:e5:f3:15:e5:69:47:26:c4:ac:30:32:7c:e5:03: ef:99:e5:42:06:ff:5f:ce:f3:d6:11:90:f8:2e:11:18:4f:66: 41:99:e5:72:37:dd:5e:24:f1:14:7b:1b:27:ea:e3:13:37:6b: 15:14:7f:2d:42:2a:e8:e5:d9:e8:68:43:c8:89:46:5b:63:57: e6:80:20:4a:06:fe:1e:8c:6b:a9:37:28:51:f3:36:4e:95:fa: 92:3d:20:82:fe:d2:32:f8:46:db:f5:17:cd:4a:e0:e4:9a:16: 43:42:54:7b:1e:2f:76:aa:31:cd:f9:8e:6a:1e:5c:9b:d1:e6: 36:5e:4c:9b:49:ed:fc:40:0e:9b:19:5c:5b:b0:60:06:c9:32: 7c:89:e6:c4:41:b1:14:a9:2d:21:33:f1:52:2e:32:b5:2a:77: da:d8:32:ca -----BEGIN CERTIFICATE----- MIIEojCCA4qgAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMjgx NTU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEQ4NUQyQjA2OThFMjZC OTgwRDE3RkJGNTNBMjJDQUI1NEIxOTlGQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqwa3U2bdpyrPTRcLyvbFxu4BKjDB6n6ezbwjDgZBZQuVXfQP7 BCLizHsTHghn/M/rvj6oLpJRVFkFHrKEaIlNmY9bYh2VBmtSRBy0ArtZck/fJ+Mp hYXhIfRIz72DrdlMP2jxUQNzibi7/LgPu9Yp0ygc69AohP4WTtAdi6+m7vFEIKad xQNSLrydetq3IgMxqi3gwyiRTkN/TFa82YN7eP49Bc7ibMtinv0JZCOm+G/gx7ZM C+6+Wz79FbRn+haZrHk5u6aV66/tlw8h3/Tq8l+wJuODvjNYNiOvZLPv/r7lO0u8 WDUzauL2JCbmeIVMtalET2EdnDJnK7QRqW/rAgMBAAGjggG+MIIBujAdBgNVHQ4E FgQU2F0rBpjia5gNF/v1OiLKtUsZn7YwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB /wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmLzJGMHJCcGppYTVnTkZf djFPaUxLdFVzWm43WS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC aIEwDQYJKoZIhvcNAQELBQADggEBANZYHaD1wtfNdKtG6ZUw7SgTIwj//aDukIty 64fquDoTFagfLCTRKMnHcXbNa5keAPo/i/zvglc1P/e7HxxfzAqrfmKQx+InkgAQ 0I1BqSk5Q+nsYhR3OC9E8PG2rOHl8xXlaUcmxKwwMnzlA++Z5UIG/1/O89YRkPgu ERhPZkGZ5XI33V4k8RR7Gyfq4xM3axUUfy1CKujl2ehoQ8iJRltjV+aAIEoG/h6M a6k3KFHzNk6V+pI9IIL+0jL4Rtv1F81K4OSaFkNCVHseL3aqMc35jmoeXJvR5jZe TJtJ7fxADpsZXFuwYAbJMnyJ5sRBsRSpLSEz8VIuMrUqd9rYMso= -----END CERTIFICATE-----Generated at Tue Dec 23 03:19:57 2025 by rpki-client