This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/F5foMpzjUQ-83ThNbf04hY8gFAY.roa
File:                     F5foMpzjUQ-83ThNbf04hY8gFAY.roa (raw, json)
Hash identifier:          s+Rb/Z37jYacWPLtmmTGRwVBi3bfOG/LtattRqVEbrs=
Subject key identifier:   17:97:E8:32:9C:E3:51:0F:BC:DD:38:4D:6D:FD:38:85:8F:20:14:06
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0A55
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/F5foMpzjUQ-83ThNbf04hY8gFAY.roa
Signing time:             Thu 28 Nov 2024 23:55:02 +0000
ROA not before:           Thu 28 Nov 2024 23:55:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2645 (0xa55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Nov 28 23:55:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1797E8329CE3510FBCDD384D6DFD38858F201406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:33:22:23:31:46:05:16:03:74:0d:ae:9b:
                    04:33:11:58:e2:0a:4d:e4:be:9f:88:72:4a:49:65:
                    cb:b3:d7:a9:c8:dc:d7:e9:66:e8:95:54:84:43:46:
                    fe:94:15:1e:96:be:8d:8b:4b:5c:01:c1:66:ea:c7:
                    5c:fd:3e:7c:34:45:57:79:88:9a:ff:42:62:ef:e8:
                    43:2a:60:2e:fe:f1:18:22:7a:98:81:df:0e:e3:37:
                    97:69:bb:a5:f3:b1:3e:87:9e:3b:c0:c8:28:da:cc:
                    26:36:72:99:26:70:b7:52:a3:12:40:4e:11:40:e6:
                    5a:f9:dd:88:e5:ed:dd:94:8d:05:03:d6:e0:49:bc:
                    f7:0c:bf:82:08:e7:41:67:95:2b:e8:b1:d7:65:62:
                    09:bd:a3:06:d7:7b:fc:38:cd:88:12:94:6f:b0:8d:
                    28:28:83:b1:a2:17:ed:fe:8c:ae:4b:5a:5f:dc:c3:
                    29:b6:6c:bf:4d:2d:b7:a5:c9:cf:23:b4:24:97:9d:
                    6a:a3:61:0b:1b:6f:ad:ad:42:85:79:20:46:1d:1e:
                    99:6d:31:24:eb:d6:e8:7c:75:81:1a:cf:cb:7b:71:
                    a6:b3:dc:3a:5c:ae:25:12:06:53:04:ad:15:ef:20:
                    f4:c3:56:f3:aa:54:00:b2:f8:cb:23:f1:95:57:48:
                    69:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:97:E8:32:9C:E3:51:0F:BC:DD:38:4D:6D:FD:38:85:8F:20:14:06
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/F5foMpzjUQ-83ThNbf04hY8gFAY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:95:c5:9f:3f:cf:98:20:42:11:d3:3e:5b:59:40:59:3e:c1:
         b9:25:c5:22:91:02:8b:b3:02:54:12:bd:ce:bd:6f:96:41:54:
         c5:33:04:ac:3c:ed:f4:97:75:cf:53:0e:e4:ed:b4:5c:d3:6b:
         74:c2:0a:63:59:45:cd:f0:3b:78:b8:07:f1:5b:93:f0:99:65:
         7b:01:92:56:7e:0f:5c:08:a0:d8:f7:44:3c:01:af:9a:be:08:
         74:10:7d:32:0f:7a:49:45:24:47:b8:d6:56:5a:29:75:9b:85:
         40:53:2b:ad:d5:80:7e:eb:d9:f4:32:9c:6a:79:ee:a5:cc:52:
         c4:98:5a:5f:1a:2f:ea:89:ae:1d:af:c3:07:68:5a:f2:8f:65:
         1b:66:c4:d7:f2:d8:54:e8:1d:3e:6f:d8:14:f7:8e:03:7a:82:
         fe:da:2e:a9:1b:1e:a7:d8:3e:49:af:87:ce:86:d9:77:32:7b:
         24:6e:4a:60:0d:b5:05:e1:5c:0c:0b:fe:48:d2:28:39:18:41:
         fd:b1:82:ac:9d:af:02:15:2d:9b:ad:6a:ff:d5:64:da:11:0c:
         c8:0c:d0:71:a6:b3:ab:49:30:57:c2:1d:d8:56:a6:14:42:4a:
         98:d2:61:27:5b:3b:e1:84:a7:8d:b3:64:51:09:c1:16:d8:22:
         df:b9:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:56:21 2025 by rpki-client