This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ANDlF1-rDxXA5nD-x1hofmrB2MA.roa File: ANDlF1-rDxXA5nD-x1hofmrB2MA.roa (raw, json) Hash identifier: Qw1oJ9NPFtBGHnlTSzN/i2mJlUiTHFUQHWMbtwQzKgc= Subject key identifier: 00:D0:E5:17:5F:AB:0F:15:C0:E6:70:FE:C7:58:68:7E:6A:C1:D8:C0 Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Certificate serial: 0ACA Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ANDlF1-rDxXA5nD-x1hofmrB2MA.roa Signing time: Wed 11 Dec 2024 23:55:03 +0000 ROA not before: Wed 11 Dec 2024 23:55:03 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 15562 IP address blocks: 194.104.129.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 2762 (0xaca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Validity Not Before: Dec 11 23:55:03 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=00D0E5175FAB0F15C0E670FEC758687E6AC1D8C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:72:bc:34:5e:fe:31:e8:de:60:de:94:fe:e6: cc:36:ca:14:1f:b2:d0:28:11:20:20:09:8f:10:6f: dd:0b:57:4b:df:0d:81:b4:7a:30:e8:01:5d:ae:ae: b4:d2:aa:b3:95:22:f9:34:46:de:97:4d:16:55:52: 7d:ec:06:c0:62:24:5e:bf:b0:3b:2c:dd:0e:2e:47: 94:81:7c:e3:5d:24:a6:2f:38:66:70:d3:ee:4d:5b: 68:74:35:11:23:c2:1a:e5:b0:de:70:5f:bf:a3:2a: 45:56:86:4c:a9:1a:01:3a:b9:f5:47:f2:e0:83:40: 16:c1:ad:2c:81:85:96:80:84:3b:a7:f2:3a:2b:65: 1d:8b:7c:0e:43:c1:35:30:48:a6:88:6c:76:f2:f1: cd:03:a9:06:1d:77:15:fc:a6:22:7a:4b:91:00:6d: bd:cb:a1:5e:26:e2:e2:f4:f5:e5:84:5b:47:51:ee: a3:95:a0:a9:a8:e9:8b:3c:08:95:c2:d6:f5:4a:48: 2b:75:45:30:f4:92:a9:1f:6e:af:43:5f:ef:2e:05: 43:74:ac:ad:7b:54:a7:e3:4f:05:50:e3:1a:f9:cc: d1:5a:2d:23:f8:69:54:61:6a:2f:71:20:00:23:c9: e2:48:1d:92:47:6a:46:b8:91:ef:eb:7e:0b:85:d1: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D0:E5:17:5F:AB:0F:15:C0:E6:70:FE:C7:58:68:7E:6A:C1:D8:C0 X509v3 Authority Key Identifier: keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ANDlF1-rDxXA5nD-x1hofmrB2MA.roa sbgp-ipAddrBlock: critical IPv4: 194.104.129.0/24 Signature Algorithm: sha256WithRSAEncryption de:0e:d9:8f:c2:ad:8e:05:b7:ec:c0:43:a3:82:df:51:7d:a1: 3b:43:4e:63:7b:1d:6b:bb:28:56:e7:ab:25:e6:33:0c:71:f2: fe:e9:7b:74:88:9e:16:98:2b:12:20:d7:09:f3:f2:c9:b8:b5: 6b:46:80:59:37:4d:2d:3f:05:45:2f:95:49:f7:fc:bc:ca:b9: 7a:6a:14:4e:52:ff:7f:a8:73:a0:3d:3a:4b:57:2c:0d:9e:aa: e7:f5:6c:b4:2c:1b:f0:bb:5e:19:2b:27:0b:5b:81:1b:42:52: d3:c5:0e:84:7b:0f:9c:7d:e6:8e:bc:dc:11:1a:70:26:04:d4: de:a3:55:c3:52:1a:2d:51:f4:c6:a5:b3:26:98:ac:6a:da:22: 2a:ba:2f:d9:87:c8:d3:58:77:66:3b:27:bf:1c:fc:0f:43:e4: 01:06:25:54:c2:ff:a8:16:11:0e:52:2e:3d:6d:aa:61:35:cf: 18:42:90:af:31:21:52:67:95:9b:f6:f9:ab:79:75:da:1c:fc: 09:06:66:29:5a:d8:76:f5:3a:a1:46:cf:ab:3c:fa:15:42:2c: de:36:9e:27:f9:fd:59:9e:6b:51:6a:71:2e:15:09:83:ec:d2: 28:0e:e1:3a:ab:56:9d:12:84:87:9b:7a:85:df:4e:71:06:62: 11:71:d5:d1 -----BEGIN CERTIFICATE----- MIIEojCCA4qgAwIBAgICCsowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEyMTEy MzU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDAwRDBFNTE3NUZBQjBG MTVDMEU2NzBGRUM3NTg2ODdFNkFDMUQ4QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAcrw0Xv4x6N5g3pT+5sw2yhQfstAoESAgCY8Qb90LV0vfDYG0 ejDoAV2urrTSqrOVIvk0Rt6XTRZVUn3sBsBiJF6/sDss3Q4uR5SBfONdJKYvOGZw 0+5NW2h0NREjwhrlsN5wX7+jKkVWhkypGgE6ufVH8uCDQBbBrSyBhZaAhDun8jor ZR2LfA5DwTUwSKaIbHby8c0DqQYddxX8piJ6S5EAbb3LoV4m4uL09eWEW0dR7qOV oKmo6Ys8CJXC1vVKSCt1RTD0kqkfbq9DX+8uBUN0rK17VKfjTwVQ4xr5zNFaLSP4 aVRhai9xIAAjyeJIHZJHaka4ke/rfguF0V0xAgMBAAGjggG+MIIBujAdBgNVHQ4E FgQUANDlF1+rDxXA5nD+x1hofmrB2MAwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB /wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0FORGxGMS1yRHhYQTVu RC14MWhvZm1yQjJNQS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC aIEwDQYJKoZIhvcNAQELBQADggEBAN4O2Y/CrY4Ft+zAQ6OC31F9oTtDTmN7HWu7 KFbnqyXmMwxx8v7pe3SInhaYKxIg1wnz8sm4tWtGgFk3TS0/BUUvlUn3/LzKuXpq FE5S/3+oc6A9OktXLA2equf1bLQsG/C7XhkrJwtbgRtCUtPFDoR7D5x95o683BEa cCYE1N6jVcNSGi1R9MalsyaYrGraIiq6L9mHyNNYd2Y7J78c/A9D5AEGJVTC/6gW EQ5SLj1tqmE1zxhCkK8xIVJnlZv2+at5ddoc/AkGZila2Hb1OqFGz6s8+hVCLN42 nif5/Vmea1FqcS4VCYPs0igO4TqrVp0ShIebeoXfTnEGYhFx1dE= -----END CERTIFICATE-----Generated at Wed Dec 24 09:15:33 2025 by rpki-client