This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/F7A44oIz-TYsY-ET_ZdaEF45BN8.roa File: F7A44oIz-TYsY-ET_ZdaEF45BN8.roa (raw, json) Hash identifier: J4AvkQ0unuGYhxoDgFU5dcS57anupUwGkGB6u9d3wFQ= Subject key identifier: 17:B0:38:E2:82:33:F9:36:2C:63:E1:13:FD:97:5A:10:5E:39:04:DF Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Certificate serial: 0C12 Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/F7A44oIz-TYsY-ET_ZdaEF45BN8.roa Signing time: Fri 17 Jan 2025 07:55:02 +0000 ROA not before: Fri 17 Jan 2025 07:55:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15562 IP address blocks: 194.104.129.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 3090 (0xc12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Validity Not Before: Jan 17 07:55:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=17B038E28233F9362C63E113FD975A105E3904DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bd:b4:f7:0c:17:4b:5f:31:4d:6f:57:c5:62: cd:f9:67:84:1e:6d:29:c3:88:46:d7:3b:d3:34:f7: 25:42:c2:0d:f0:44:e3:f4:14:bd:e8:86:7a:4e:f7: a4:eb:91:15:ee:84:9b:99:f0:07:4a:97:c8:92:ed: 83:29:d2:63:86:5d:5b:75:26:37:2b:ef:7d:4e:bd: f1:a6:a3:b5:a2:f3:7e:9f:33:dc:8a:5a:d9:c1:fa: f2:06:65:91:b3:3c:a9:ec:dc:40:99:d1:eb:96:5f: 53:51:ac:f7:3d:eb:a5:53:a1:0b:e9:44:dd:84:b2: 3f:8a:1a:f1:fa:74:c9:a5:e7:1c:8a:ef:c8:a9:8b: c6:48:da:dd:c7:5e:73:a9:f1:41:33:62:81:60:f6: ba:16:48:32:59:27:fd:3d:29:67:9e:fe:a5:22:88: d3:2a:31:b9:82:0b:7f:32:09:66:7e:6e:ab:26:2a: d9:f1:1a:3c:31:f7:b8:12:12:51:c7:49:a4:9a:15: 23:39:4f:52:67:a2:0b:ca:3d:50:6e:e5:94:83:23: 74:fd:63:62:dd:08:9d:d5:d1:2d:b0:dc:f3:25:72: ea:75:46:96:b2:b6:3d:f1:e0:89:3d:30:19:0a:7d: 6c:82:bd:68:ef:52:e3:d2:b1:6f:45:73:8d:19:aa: 8a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B0:38:E2:82:33:F9:36:2C:63:E1:13:FD:97:5A:10:5E:39:04:DF X509v3 Authority Key Identifier: keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/F7A44oIz-TYsY-ET_ZdaEF45BN8.roa sbgp-ipAddrBlock: critical IPv4: 194.104.129.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:62:24:4a:73:ab:66:6d:88:35:d0:2e:af:15:0c:00:ed:27: 48:e5:99:a8:09:26:f8:06:42:00:08:8c:c1:f6:ce:c9:c8:dd: a0:c8:b2:a9:1b:f3:03:67:b8:33:84:ce:7d:c4:2d:c8:a5:78: fc:48:39:0a:e5:fa:2e:98:5f:e8:2e:54:ca:d0:9c:01:9b:d6: 5c:7e:25:bb:d5:1e:34:e2:a3:50:81:0e:9a:8e:68:ab:51:78: 64:1e:be:73:04:a2:1e:e8:24:fa:f0:a2:49:5a:30:ee:2f:8f: 37:4a:8e:d5:e0:83:00:b6:de:1b:c4:9d:92:f6:21:7f:38:5b: 97:59:d3:92:9d:61:43:22:b3:94:31:4e:0b:76:02:c9:87:4e: ae:1e:a0:c1:dc:db:f6:ee:01:16:d5:a8:02:0c:2f:2a:8c:87: a6:a1:3e:2f:d0:85:0a:76:eb:b5:86:e0:a0:02:f5:41:cd:d1: 98:82:d3:cd:e5:3c:79:c8:72:f1:ba:32:fc:8c:3f:8d:0e:1c: 13:e3:2e:d9:f4:36:33:ed:30:c5:a4:eb:0a:fa:21:ee:41:d9: 1a:14:9a:b2:2a:f7:9e:79:c2:b6:e6:24:4f:e0:c4:d2:af:65: 11:2a:ed:e4:1b:e6:9c:b7:e2:be:91:95:6d:82:5d:07:b1:59: 50:ce:ea:c7 -----BEGIN CERTIFICATE----- MIIEojCCA4qgAwIBAgICDBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMTcw NzU1MDJaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDE3QjAzOEUyODIzM0Y5 MzYyQzYzRTExM0ZEOTc1QTEwNUUzOTA0REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCivbT3DBdLXzFNb1fFYs35Z4QebSnDiEbXO9M09yVCwg3wROP0 FL3ohnpO96TrkRXuhJuZ8AdKl8iS7YMp0mOGXVt1Jjcr731OvfGmo7Wi836fM9yK WtnB+vIGZZGzPKns3ECZ0euWX1NRrPc966VToQvpRN2Esj+KGvH6dMml5xyK78ip i8ZI2t3HXnOp8UEzYoFg9roWSDJZJ/09KWee/qUiiNMqMbmCC38yCWZ+bqsmKtnx Gjwx97gSElHHSaSaFSM5T1JnogvKPVBu5ZSDI3T9Y2LdCJ3V0S2w3PMlcup1Rpay tj3x4Ik9MBkKfWyCvWjvUuPSsW9Fc40ZqorPAgMBAAGjggG+MIIBujAdBgNVHQ4E FgQUF7A44oIz+TYsY+ET/ZdaEF45BN8wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB /wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0Y3QTQ0b0l6LVRZc1kt RVRfWmRhRUY0NUJOOC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC aIEwDQYJKoZIhvcNAQELBQADggEBAJ5iJEpzq2ZtiDXQLq8VDADtJ0jlmagJJvgG QgAIjMH2zsnI3aDIsqkb8wNnuDOEzn3ELcilePxIOQrl+i6YX+guVMrQnAGb1lx+ JbvVHjTio1CBDpqOaKtReGQevnMEoh7oJPrwoklaMO4vjzdKjtXggwC23hvEnZL2 IX84W5dZ05KdYUMis5QxTgt2AsmHTq4eoMHc2/buARbVqAIMLyqMh6ahPi/QhQp2 67WG4KAC9UHN0ZiC083lPHnIcvG6MvyMP40OHBPjLtn0NjPtMMWk6wr6Ie5B2RoU mrIq9555wrbmJE/gxNKvZREq7eQb5py34r6RlW2CXQexWVDO6sc= -----END CERTIFICATE-----Generated at Tue Dec 23 14:55:03 2025 by rpki-client