This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ILZt_jv3B7VooeTctGXGTMKPz-w.roa File: ILZt_jv3B7VooeTctGXGTMKPz-w.roa (raw, json) Hash identifier: zxF3gMYUMqYc2ut2ujeDVPGE9b3rRIGQMsIoUMvnT6M= Subject key identifier: 20:B6:6D:FE:3B:F7:07:B5:68:A1:E4:DC:B4:65:C6:4C:C2:8F:CF:EC Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Certificate serial: 0BD9 Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ILZt_jv3B7VooeTctGXGTMKPz-w.roa Signing time: Fri 10 Jan 2025 23:55:03 +0000 ROA not before: Fri 10 Jan 2025 23:55:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15562 IP address blocks: 194.104.129.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 3033 (0xbd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Validity Not Before: Jan 10 23:55:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=20B66DFE3BF707B568A1E4DCB465C64CC28FCFEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:04:74:a1:6a:f3:1a:2f:bb:7a:e8:7b:7a:5d: 50:4e:43:f8:7f:8f:1c:19:55:cf:b5:22:b9:1a:a5: d1:c7:45:2a:63:35:47:67:3a:71:04:68:38:3a:4e: fe:e8:95:cc:34:45:1d:d6:76:c9:ba:76:91:0a:ae: 10:5e:3f:7f:7d:b7:32:b9:7d:cd:d0:fa:d9:b6:01: 6d:4a:dc:66:89:4d:14:dd:d8:e9:22:8d:c6:fc:e7: be:b6:fd:e3:c2:4a:6d:ff:58:62:e1:88:1c:ba:27: b6:31:3c:90:5b:a7:1a:54:46:0c:3a:4e:cc:5a:86: 82:2d:99:85:8c:73:d4:3c:1e:03:17:d7:bd:b0:9d: 19:58:7a:09:a5:15:85:21:73:76:03:b8:9f:33:64: ce:f4:a2:84:59:3a:4a:7f:c5:f6:cc:f9:b6:f2:c1: 9f:c3:e1:16:f3:10:e9:96:0b:e5:8f:fc:3b:f0:16: 91:f4:76:e2:08:11:cd:52:9c:91:cc:79:f2:8a:e7: d3:44:e1:d3:03:40:0b:26:07:e3:e0:02:bc:ec:b3: a7:ea:03:29:16:df:46:4a:d2:ef:eb:9f:cf:e9:47: 12:68:70:34:1b:f2:9b:58:78:da:41:ac:3a:7c:1b: 15:2f:3d:44:28:e6:b0:2a:71:63:7e:e5:70:44:a9: 0c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B6:6D:FE:3B:F7:07:B5:68:A1:E4:DC:B4:65:C6:4C:C2:8F:CF:EC X509v3 Authority Key Identifier: keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ILZt_jv3B7VooeTctGXGTMKPz-w.roa sbgp-ipAddrBlock: critical IPv4: 194.104.129.0/24 Signature Algorithm: sha256WithRSAEncryption 95:fe:c9:6a:59:8d:a4:fe:ac:0f:10:4a:79:a4:bf:d3:09:c6: 22:2c:8d:d2:b4:59:bd:11:c2:aa:86:06:72:fa:ce:bb:f3:b1: 6a:ed:05:7d:c6:5d:2f:ae:e7:6e:e3:e1:8e:22:dd:80:7b:c7: 6b:c4:92:3a:66:af:2b:05:d8:b3:b0:6e:4f:2b:1d:7e:04:f8: 64:3c:5e:97:2d:75:fe:94:ed:f9:cc:74:91:76:2c:12:f6:49: 62:bc:f3:b7:95:de:a6:a2:f0:c8:77:07:89:1f:4c:e9:6f:85: f0:fb:23:aa:0a:35:84:78:fd:d4:f3:d9:f0:be:cd:7e:7a:ea: d3:a6:20:05:ff:54:1d:4c:41:e8:12:59:aa:c4:79:33:f2:03: b2:33:78:0d:b2:4c:4c:d2:fd:96:7b:b5:90:e5:a2:38:4b:32: 02:4c:b1:4f:98:29:66:d6:a6:ed:f6:f1:0b:0f:9a:4d:e0:ce: 5a:23:6e:09:cf:d8:ad:8c:41:16:c5:0b:7f:f6:69:2b:be:db: 8d:d1:73:07:d4:94:30:e1:0f:77:32:a6:a5:63:f5:64:68:3c: 94:ba:a3:27:42:19:e5:35:18:a8:33:08:e5:e6:01:af:60:e0: f1:ad:09:62:f7:59:a2:2a:88:6f:9c:f9:e1:a5:69:c5:e6:81: c3:d3:b8:a0 -----BEGIN CERTIFICATE----- MIIEojCCA4qgAwIBAgICC9kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMTAy MzU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDIwQjY2REZFM0JGNzA3 QjU2OEExRTREQ0I0NjVDNjRDQzI4RkNGRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxBHShavMaL7t66Ht6XVBOQ/h/jxwZVc+1IrkapdHHRSpjNUdn OnEEaDg6Tv7olcw0RR3Wdsm6dpEKrhBeP399tzK5fc3Q+tm2AW1K3GaJTRTd2Oki jcb85762/ePCSm3/WGLhiBy6J7YxPJBbpxpURgw6TsxahoItmYWMc9Q8HgMX172w nRlYegmlFYUhc3YDuJ8zZM70ooRZOkp/xfbM+bbywZ/D4RbzEOmWC+WP/DvwFpH0 duIIEc1SnJHMefKK59NE4dMDQAsmB+PgArzss6fqAykW30ZK0u/rn8/pRxJocDQb 8ptYeNpBrDp8GxUvPUQo5rAqcWN+5XBEqQxhAgMBAAGjggG+MIIBujAdBgNVHQ4E FgQUILZt/jv3B7VooeTctGXGTMKPz+wwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB /wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL0lMWnRfanYzQjdWb29l VGN0R1hHVE1LUHotdy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC aIEwDQYJKoZIhvcNAQELBQADggEBAJX+yWpZjaT+rA8QSnmkv9MJxiIsjdK0Wb0R wqqGBnL6zrvzsWrtBX3GXS+u527j4Y4i3YB7x2vEkjpmrysF2LOwbk8rHX4E+GQ8 Xpctdf6U7fnMdJF2LBL2SWK887eV3qai8Mh3B4kfTOlvhfD7I6oKNYR4/dTz2fC+ zX566tOmIAX/VB1MQegSWarEeTPyA7IzeA2yTEzS/ZZ7tZDlojhLMgJMsU+YKWbW pu328QsPmk3gzlojbgnP2K2MQRbFC3/2aSu+243RcwfUlDDhD3cypqVj9WRoPJS6 oydCGeU1GKgzCOXmAa9g4PGtCWL3WaIqiG+c+eGlacXmgcPTuKA= -----END CERTIFICATE-----Generated at Fri Dec 19 22:53:29 2025 by rpki-client