This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/Cdh4HhL0i4xdbp7fgJQLWC_vf5I.roa
File: Cdh4HhL0i4xdbp7fgJQLWC_vf5I.roa (raw, json)
Hash identifier: W6A6V/YsqdE7pUZV8fZ2ZWhkziTftF/onIWzckDcTHs=
Subject key identifier: 09:D8:78:1E:12:F4:8B:8C:5D:6E:9E:DF:80:94:0B:58:2F:EF:7F:92
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A88
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Cdh4HhL0i4xdbp7fgJQLWC_vf5I.roa
Signing time: Wed 04 Dec 2024 15:55:02 +0000
ROA not before: Wed 04 Dec 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2696 (0xa88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Dec 4 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09D8781E12F48B8C5D6E9EDF80940B582FEF7F92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:6b:e6:d4:80:2a:78:b2:c0:37:82:1d:21:
92:36:b0:b2:e1:68:94:d3:75:f3:8c:6d:16:69:60:
ee:85:fc:8b:8e:f4:09:70:3a:84:1b:c3:85:df:a0:
02:30:ee:60:70:34:10:b7:12:35:4e:30:1e:22:79:
5e:7f:cb:9d:8d:9e:72:f7:c8:0e:58:28:0a:d7:37:
1e:64:0f:ff:e7:63:3d:9c:05:63:2f:3b:b5:fc:82:
44:ab:1a:76:fb:a6:cb:76:a2:ff:42:b7:52:13:1c:
6b:db:e2:28:ab:a8:14:e9:f8:f5:4a:f5:69:e3:59:
97:9d:87:00:a3:93:18:38:b7:30:c2:6a:03:55:f1:
4d:b5:f6:36:2e:b8:a3:47:68:95:ce:1c:55:4c:93:
a5:43:b7:39:5a:e1:07:35:4c:5c:f6:d4:bd:2f:75:
b7:59:87:d8:49:dc:17:18:40:5d:87:bd:8d:6f:76:
c1:dc:08:aa:aa:b8:7f:fe:ad:bc:50:4a:bd:eb:62:
7c:fd:ce:da:fa:4f:04:39:2d:ef:f1:86:32:cf:54:
44:2b:d0:dd:5e:d6:7b:db:75:34:ff:4b:48:54:20:
b9:9f:72:2d:d4:fa:ae:93:c6:29:e4:be:99:4a:9a:
57:26:f8:c5:d1:eb:17:aa:17:ce:c0:95:4f:d2:c3:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D8:78:1E:12:F4:8B:8C:5D:6E:9E:DF:80:94:0B:58:2F:EF:7F:92
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/Cdh4HhL0i4xdbp7fgJQLWC_vf5I.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
46:58:b8:c9:8d:2c:00:be:ba:54:80:0d:79:3f:07:55:4a:74:
8e:97:cf:a1:eb:7a:26:2d:0f:c9:3a:48:6d:d7:49:4b:0f:37:
9b:4e:ea:2d:1a:65:4d:2e:59:10:22:b9:6d:0c:7a:93:55:45:
88:65:d0:5a:a3:20:20:b3:db:5a:bc:5c:f0:f7:dc:8b:2f:c6:
f7:72:84:36:d4:fb:c6:96:5a:c8:2c:f7:f5:5b:f8:70:27:bd:
e0:35:94:44:7e:ac:3e:20:c3:c7:0a:c2:c7:4a:00:55:aa:16:
35:7c:cc:44:aa:26:e3:95:4a:ec:3b:71:80:6c:a0:cd:f0:c2:
98:c8:d8:41:c6:48:19:44:28:02:ff:22:2a:eb:4f:fa:67:ea:
38:72:ca:d6:8b:bb:2a:5d:2e:de:bc:ad:58:0e:16:67:26:cc:
86:86:08:cb:92:3d:33:9c:eb:7e:92:c6:b4:32:15:8c:13:81:
b0:9a:c7:82:5e:fe:df:22:a9:f4:d3:41:68:89:b6:dc:21:d4:
75:e8:f6:78:66:0f:e1:2a:a9:4c:f2:60:8c:17:f0:05:3a:4a:
02:77:e5:1a:d8:0e:a5:4c:fc:05:e6:6a:85:93:72:61:8a:29:
56:a0:f2:8b:1f:01:e2:d9:d6:8b:52:80:c0:3f:36:ea:a3:37:
f7:fb:b7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:03:20 2025 by rpki-client