This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/6IuuA6Y2-QI_Rl4pz3cOHncyapw.roa
File: 6IuuA6Y2-QI_Rl4pz3cOHncyapw.roa (raw, json)
Hash identifier: EavuuAjrWHeNaNbJungEihh61OiS1aDovrZ1uCkFDHs=
Subject key identifier: E8:8B:AE:03:A6:36:F9:02:3F:46:5E:29:CF:77:0E:1E:77:32:6A:9C
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A5E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6IuuA6Y2-QI_Rl4pz3cOHncyapw.roa
Signing time: Fri 29 Nov 2024 23:55:02 +0000
ROA not before: Fri 29 Nov 2024 23:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2654 (0xa5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 29 23:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E88BAE03A636F9023F465E29CF770E1E77326A9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:16:9c:53:75:d2:a4:e2:8c:33:10:54:d0:c8:
85:b0:73:d7:cf:e9:c4:75:a5:98:10:7a:f4:8c:01:
55:90:92:57:06:81:bf:73:9f:8d:34:2e:a9:dd:66:
8f:e7:4d:65:70:ec:b5:cf:53:5d:cb:98:41:ca:51:
ce:35:71:bb:29:90:92:57:24:6f:ab:73:98:83:85:
b5:cd:8d:41:15:36:27:9a:18:2c:e2:41:c9:26:f0:
4a:ec:31:d8:39:bf:53:26:67:93:26:bb:c0:a6:04:
f7:6f:34:ea:13:17:10:7d:89:7c:94:4c:fe:6e:20:
44:3e:63:a1:07:62:3b:61:16:bb:77:e7:6b:6c:e3:
4b:1e:ae:9b:40:02:02:58:e2:5b:27:b1:41:54:3d:
ed:bc:64:14:26:58:f3:70:51:97:cd:17:23:8d:c6:
b9:39:1b:fa:55:1b:1d:d4:93:6e:67:a5:03:e1:52:
03:da:e3:5c:88:36:a0:c9:0f:24:d6:88:71:ba:60:
c0:e3:30:78:cb:67:17:34:c5:41:81:51:a9:d1:05:
c6:3f:b5:7f:ec:17:25:a5:dd:ec:2e:15:c2:79:ba:
17:19:eb:56:bd:ee:be:25:2e:6e:ee:80:94:4d:a4:
24:65:f1:37:2e:fd:c9:cf:5b:5a:6d:f0:9a:2c:19:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8B:AE:03:A6:36:F9:02:3F:46:5E:29:CF:77:0E:1E:77:32:6A:9C
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/6IuuA6Y2-QI_Rl4pz3cOHncyapw.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1d:b9:88:94:c0:70:63:bd:2b:37:fe:53:72:87:10:be:82:
45:fa:37:b1:31:71:29:1b:ba:93:5a:e7:7c:e8:44:ea:5b:5d:
41:8c:77:1d:c7:22:2a:74:73:9a:a0:3b:f9:68:db:af:96:20:
ed:f3:5a:24:e4:a8:01:a4:3c:6e:fc:4f:7d:2a:d2:c3:ae:6c:
4b:c3:cb:43:51:ce:29:44:56:f9:83:00:b1:03:03:88:a8:7d:
1c:2b:be:00:2c:99:71:ad:d3:3d:6e:1d:f2:d9:d4:90:62:f6:
c6:86:41:a8:b5:9e:a0:d2:e3:5f:53:3e:8b:6c:f1:a7:4f:06:
42:ac:fd:69:da:28:52:b3:5d:e8:39:4d:a9:f5:1f:45:bc:19:
d1:d2:75:e3:20:a1:47:05:4b:57:60:38:04:5e:4a:c4:2a:22:
ea:e7:6e:08:9f:88:3c:f6:36:b5:92:5e:20:c8:e0:24:99:0b:
9f:9c:bf:09:c6:0a:83:19:76:56:83:62:a8:f2:7e:39:05:46:
58:0d:8f:05:52:42:65:9e:5d:79:d2:1b:ce:95:da:3c:10:63:
9d:d0:d3:7c:8b:43:45:85:f4:8f:7e:b1:87:33:13:7e:f1:a3:
2a:28:19:ce:48:5e:68:03:f5:1c:96:1a:fc:27:88:8c:8c:c6:
0e:07:74:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:33:40 2025 by rpki-client