This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/WlVJQz7IcREx0NrkhuLTFF4XtYY.roa File: WlVJQz7IcREx0NrkhuLTFF4XtYY.roa (raw, json) Hash identifier: gSc1CkMZ7TJdiADmpmaUsXyK3oZUoJCXFB/nPvZBC1s= Subject key identifier: 5A:55:49:43:3E:C8:71:11:31:D0:DA:E4:86:E2:D3:14:5E:17:B5:86 Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Certificate serial: 0C69 Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WlVJQz7IcREx0NrkhuLTFF4XtYY.roa Signing time: Sun 26 Jan 2025 23:55:03 +0000 ROA not before: Sun 26 Jan 2025 23:55:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15562 IP address blocks: 194.104.129.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 3177 (0xc69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Validity Not Before: Jan 26 23:55:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5A5549433EC8711131D0DAE486E2D3145E17B586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:88:ae:8b:ca:ab:95:59:d6:29:62:ef:49: 06:ee:4c:df:6e:c6:7c:b8:8a:66:e2:c3:2a:30:90: 8c:b3:5a:d6:01:57:e8:04:7e:0b:c7:66:7a:01:37: 0f:e2:41:77:42:61:4f:8d:c1:d9:47:ac:62:a9:b4: 02:c8:ff:8b:ae:c3:05:24:43:56:87:6f:4e:9b:63: 4e:87:40:48:e4:30:16:0f:54:cc:bd:36:3d:4d:a9: 9f:0e:9e:5a:65:34:4a:74:0f:00:c6:fc:4c:8d:05: e6:25:17:66:40:72:7f:9c:45:fb:04:95:38:65:71: 3c:78:04:fc:0a:7f:27:c7:e0:f4:58:bc:34:ce:94: c5:31:f1:cc:39:c8:97:e1:a4:8e:76:18:48:7a:48: 00:11:9c:da:2b:f9:be:80:9e:49:10:ea:ed:1c:31: 12:bd:b3:f0:7f:6d:8e:56:60:8d:f4:3f:5f:e7:f3: 75:c0:09:a4:94:fc:09:ed:a1:42:16:c5:09:28:85: 66:37:fb:07:75:57:f5:a3:e9:c8:bb:20:21:b0:b9: a3:f8:61:31:f9:c5:8b:25:ea:ab:d7:a8:28:ce:8c: 98:65:c5:0b:fe:1b:79:c3:0d:9c:53:17:b9:2b:46: 8b:40:97:d6:b3:29:d5:51:76:6b:29:f5:1a:85:90: 48:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:55:49:43:3E:C8:71:11:31:D0:DA:E4:86:E2:D3:14:5E:17:B5:86 X509v3 Authority Key Identifier: keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/WlVJQz7IcREx0NrkhuLTFF4XtYY.roa sbgp-ipAddrBlock: critical IPv4: 194.104.129.0/24 Signature Algorithm: sha256WithRSAEncryption 87:c6:47:35:62:dd:55:77:88:7b:8d:cf:74:5a:c7:86:a1:5a: 66:07:b5:4c:9b:c5:8c:8e:89:3b:52:ba:54:a1:17:b9:15:8b: a0:5b:81:a3:01:20:29:91:b9:c9:5a:5c:8d:8d:94:c9:67:cc: 50:43:2a:a6:33:37:a9:30:aa:d0:d7:e6:3b:40:ad:76:20:9b: 76:37:ce:84:93:97:d3:1d:28:91:2f:1b:54:bf:08:7e:f4:ee: de:15:94:da:79:22:33:9f:d8:1f:4b:58:a5:e4:3b:0c:5a:6b: 86:38:c9:cf:e0:63:0d:19:b0:df:88:8e:81:0b:2e:ae:45:d4: 18:54:c8:c5:37:ff:49:56:d2:ad:88:51:fd:41:6c:34:86:7c: c4:ec:eb:2c:6d:0a:25:c2:49:4d:64:c8:88:c6:65:83:c5:3f: 4d:cd:b9:f4:d7:d9:06:3f:16:2a:a4:5c:97:26:f7:dc:6f:a0: 39:22:38:11:a9:64:25:15:6b:33:31:ae:4a:20:c4:27:37:a6: 5a:e9:5e:6f:d6:10:80:2d:50:3b:30:1b:e9:ed:5d:d5:7a:c4: c9:7f:25:14:92:49:a0:a4:d1:90:54:b0:b8:4c:2f:30:41:69: 3d:b5:4a:60:72:58:63:bd:73:3c:98:1e:5a:46:4b:90:6e:18: 54:48:51:95 -----BEGIN CERTIFICATE----- MIIEojCCA4qgAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMjYy MzU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDVBNTU0OTQzM0VDODcx MTEzMUQwREFFNDg2RTJEMzE0NUUxN0I1ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBF4iui8qrlVnWKWLvSQbuTN9uxny4imbiwyowkIyzWtYBV+gE fgvHZnoBNw/iQXdCYU+NwdlHrGKptALI/4uuwwUkQ1aHb06bY06HQEjkMBYPVMy9 Nj1NqZ8OnlplNEp0DwDG/EyNBeYlF2ZAcn+cRfsElThlcTx4BPwKfyfH4PRYvDTO lMUx8cw5yJfhpI52GEh6SAARnNor+b6AnkkQ6u0cMRK9s/B/bY5WYI30P1/n83XA CaSU/AntoUIWxQkohWY3+wd1V/Wj6ci7ICGwuaP4YTH5xYsl6qvXqCjOjJhlxQv+ G3nDDZxTF7krRotAl9azKdVRdmsp9RqFkEjRAgMBAAGjggG+MIIBujAdBgNVHQ4E FgQUWlVJQz7IcREx0NrkhuLTFF4XtYYwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB /wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL1dsVkpRejdJY1JFeDBO cmtodUxURkY0WHRZWS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC aIEwDQYJKoZIhvcNAQELBQADggEBAIfGRzVi3VV3iHuNz3Rax4ahWmYHtUybxYyO iTtSulShF7kVi6BbgaMBICmRuclaXI2NlMlnzFBDKqYzN6kwqtDX5jtArXYgm3Y3 zoSTl9MdKJEvG1S/CH707t4VlNp5IjOf2B9LWKXkOwxaa4Y4yc/gYw0ZsN+IjoEL Lq5F1BhUyMU3/0lW0q2IUf1BbDSGfMTs6yxtCiXCSU1kyIjGZYPFP03NufTX2QY/ FiqkXJcm99xvoDkiOBGpZCUVazMxrkogxCc3plrpXm/WEIAtUDswG+ntXdV6xMl/ JRSSSaCk0ZBUsLhMLzBBaT21SmByWGO9czyYHlpGS5BuGFRIUZU= -----END CERTIFICATE-----Generated at Mon Dec 22 22:34:33 2025 by rpki-client