This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ApLvKKDVRIGliXzZYT3_O7-aV6g.roa
File:                     ApLvKKDVRIGliXzZYT3_O7-aV6g.roa (raw, json)
Hash identifier:          p16B6H8N0+G21TpU4fR1fl+24q6/l24FGHkVqWlGcyU=
Subject key identifier:   02:92:EF:28:A0:D5:44:81:A5:89:7C:D9:61:3D:FF:3B:BF:9A:57:A8
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0AE2
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ApLvKKDVRIGliXzZYT3_O7-aV6g.roa
Signing time:             Sat 14 Dec 2024 15:55:02 +0000
ROA not before:           Sat 14 Dec 2024 15:55:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2786 (0xae2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Dec 14 15:55:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0292EF28A0D54481A5897CD9613DFF3BBF9A57A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:d6:1e:12:5d:a1:99:ad:3a:00:b0:03:85:
                    7d:a3:b9:37:6f:25:2d:7b:c0:2b:9a:db:02:69:51:
                    8b:8f:dc:b4:8c:d7:d5:4d:ae:7d:97:dd:04:f5:1f:
                    52:22:29:bd:3e:70:38:e2:aa:aa:25:13:91:81:d5:
                    be:61:f0:f1:9a:50:ee:05:e3:c7:ee:18:c6:c5:bb:
                    c3:5b:39:2b:b9:54:f7:81:f1:15:87:c9:5a:1f:b6:
                    a3:a6:5f:22:58:e5:fa:c2:48:28:43:57:78:cf:f8:
                    ca:42:e4:a5:fe:07:11:1d:49:1d:d3:fd:1a:a8:86:
                    25:ea:da:4b:81:f1:33:0a:d8:c9:a9:6f:f7:9b:f4:
                    9d:b1:7d:04:26:59:99:3c:28:fa:e7:4d:b5:57:bb:
                    1e:fd:ab:e7:f8:18:62:f1:c3:43:fb:62:04:9b:48:
                    19:66:ac:a9:e7:e2:0d:be:55:08:c1:05:a1:a8:b0:
                    af:e1:08:8e:84:c8:02:7a:87:db:bd:35:e4:5d:68:
                    8e:01:e4:87:21:49:8f:b0:96:3c:87:6e:f9:c6:2d:
                    c6:94:cc:8c:c3:c3:56:e0:23:2b:8a:2d:fa:49:45:
                    c5:ea:c0:8f:06:0f:4f:1c:a6:ea:f5:c7:91:2c:31:
                    1b:14:a5:db:35:24:45:63:dd:52:5f:8e:5b:11:45:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:92:EF:28:A0:D5:44:81:A5:89:7C:D9:61:3D:FF:3B:BF:9A:57:A8
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ApLvKKDVRIGliXzZYT3_O7-aV6g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:61:6b:e6:6a:29:09:17:b8:b9:8d:37:e3:fe:98:bb:39:67:
         88:a7:62:46:d4:0c:b4:f8:df:e4:58:fb:62:8a:d4:81:9f:d9:
         75:bc:38:6d:10:d2:40:0a:53:61:06:35:9b:77:54:d1:3b:bd:
         41:15:d4:0b:87:e3:21:c1:29:11:d8:17:fc:25:ad:20:23:63:
         f7:88:45:4e:42:82:21:22:f3:3f:d2:57:d5:b4:84:e6:21:35:
         07:95:bd:df:43:bb:ea:93:b2:bc:69:75:9d:8e:95:9b:d6:a8:
         46:9b:d8:bf:a3:de:4e:c1:78:41:b3:3b:a2:36:d0:8f:a3:4a:
         62:e3:63:cc:f7:af:7a:4d:1a:7d:4f:57:09:4d:22:cc:72:7b:
         c1:d7:55:f2:7b:86:23:d5:25:16:19:c7:97:96:c0:2c:32:a5:
         20:94:3d:6d:a2:e9:68:e7:8b:34:76:9b:33:c8:4b:89:87:90:
         23:a8:08:e2:a9:be:23:f6:6f:0d:d5:77:ea:f8:04:2e:99:83:
         8e:6d:d9:aa:57:c6:6a:28:d3:b0:97:63:88:ea:cb:4a:b5:f5:
         ef:a5:bc:29:b1:a8:04:43:80:e3:71:7e:3c:5b:fd:27:08:41:
         48:54:7e:99:84:7b:d5:1f:1d:4f:7f:c0:e5:51:85:3b:69:d6:
         8e:e8:7c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:11:01 2025 by rpki-client