This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/aC4n-OJdhzhFQOgzpVgN4oQhkOg.roa
File:                     aC4n-OJdhzhFQOgzpVgN4oQhkOg.roa (raw, json)
Hash identifier:          RixFZp1iguw/YsFNr0lr/pElx+8o1c4MoQAFjaDy0GY=
Subject key identifier:   68:2E:27:F8:E2:5D:87:38:45:40:E8:33:A5:58:0D:E2:84:21:90:E8
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0BA0
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/aC4n-OJdhzhFQOgzpVgN4oQhkOg.roa
Signing time:             Sat 04 Jan 2025 15:55:02 +0000
ROA not before:           Sat 04 Jan 2025 15:55:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2976 (0xba0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Jan  4 15:55:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=682E27F8E25D87384540E833A5580DE2842190E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4b:98:8f:b3:93:c9:5a:fb:40:56:9c:97:57:
                    a2:b6:16:90:67:6d:96:18:d9:20:fa:64:f2:ce:43:
                    15:55:83:b4:35:89:06:15:3f:79:29:ca:65:ab:77:
                    53:1a:44:f0:06:86:70:e1:80:c9:c7:bf:38:c2:12:
                    c5:57:1c:14:6c:8a:f5:af:41:2b:7e:a4:fc:ef:5f:
                    85:bf:b2:6b:cb:f3:f9:58:a9:2d:6b:37:a3:84:bc:
                    8f:20:b6:6f:f7:06:5b:a9:c1:81:01:ce:7f:a9:9f:
                    0e:49:96:8f:37:3d:4c:96:1c:d0:21:0d:ec:46:26:
                    0c:c8:51:21:33:fe:82:58:e6:cf:a0:a4:ae:63:29:
                    71:bc:21:5d:07:d3:89:8c:88:39:81:eb:16:7e:93:
                    f7:0e:be:d3:8e:65:8b:16:43:4a:07:fb:85:ef:11:
                    f0:8f:b4:fd:bd:f4:03:78:80:14:f8:35:9d:95:99:
                    94:73:a2:3d:1b:2e:78:7a:56:cf:46:28:88:da:65:
                    81:ab:03:f7:67:09:f4:d3:9a:c8:1b:c3:58:9f:0f:
                    d8:33:c5:99:10:4d:08:fd:0d:ab:ba:1a:3f:88:24:
                    a9:af:59:b4:b6:bc:56:50:d8:4d:a6:ab:c6:0e:d5:
                    a5:58:d1:33:55:18:c0:ec:42:67:89:3e:31:76:3c:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2E:27:F8:E2:5D:87:38:45:40:E8:33:A5:58:0D:E2:84:21:90:E8
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/aC4n-OJdhzhFQOgzpVgN4oQhkOg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:e1:29:cf:78:48:84:e8:3d:aa:37:73:6d:b0:10:31:e9:10:
         21:1c:6f:2b:21:9c:a9:e0:e8:39:40:8f:82:3c:b4:76:0f:4e:
         0b:76:d0:5e:10:05:ed:ea:a5:02:90:50:0e:5c:52:c4:e3:70:
         fd:54:9d:21:77:6c:b4:08:f5:49:ee:ea:00:7a:ef:15:1c:22:
         5e:4a:b0:0f:e7:7c:7a:32:87:51:74:0d:3a:9e:73:ce:69:f1:
         05:f4:62:6f:30:52:70:bf:73:cf:dc:e3:d4:83:ff:72:e0:3b:
         24:2d:42:48:7f:c5:07:81:31:15:f7:af:b7:f5:e6:06:9a:b0:
         04:c8:05:37:4c:9e:85:95:41:67:11:e5:6e:87:8e:7b:5e:f2:
         89:ee:0c:09:14:27:e5:ca:db:e1:5e:71:0b:5a:71:d5:21:8f:
         04:c0:d8:cd:f9:bb:b0:de:ad:2c:7c:1b:8a:c0:51:09:4d:f2:
         5e:05:12:60:2c:34:00:c1:ae:69:03:93:31:c0:e7:ef:f8:3a:
         cb:b2:46:89:4d:4d:52:d2:6e:21:51:08:cc:a5:14:32:a9:f4:
         ea:3b:4c:30:8b:df:a8:2f:98:d8:e7:2d:b1:58:ba:5b:2b:44:
         70:d9:bc:a3:24:71:33:b2:da:a6:2b:f7:77:1f:67:ea:95:17:
         d6:da:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:19:58 2025 by rpki-client