This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/aW5x43_dqhOhbfY3Rjk00GzovX4.roa File: aW5x43_dqhOhbfY3Rjk00GzovX4.roa (raw, json) Hash identifier: O4KUAY8xCGly+0FwOrtl1wEcVZa7bbM9wZZORFGPnoI= Subject key identifier: 69:6E:71:E3:7F:DD:AA:13:A1:6D:F6:37:46:39:34:D0:6C:E8:BD:7E Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Certificate serial: 0BC7 Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/aW5x43_dqhOhbfY3Rjk00GzovX4.roa Signing time: Wed 08 Jan 2025 23:55:03 +0000 ROA not before: Wed 08 Jan 2025 23:55:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15562 IP address blocks: 194.104.129.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 3015 (0xbc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Validity Not Before: Jan 8 23:55:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=696E71E37FDDAA13A16DF637463934D06CE8BD7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:d4:4a:29:81:80:e0:31:65:2e:bb:5d:f9: 6d:c5:1f:30:8c:66:1a:03:bc:76:03:1a:31:e6:ac: 18:21:47:8d:5b:96:0d:41:44:c3:98:62:bb:12:83: 6b:72:6c:05:cc:9b:cb:70:e0:50:64:0d:30:c0:22: 4d:d6:91:51:44:96:54:c7:f0:d2:03:ff:02:22:e5: 34:e6:6f:b3:f4:3f:35:1f:a0:73:99:45:22:51:16: ca:ce:96:b4:5c:e8:04:83:b5:08:ac:26:87:b7:fd: 9c:3b:dc:e2:d5:9b:d0:de:b9:9c:04:96:37:ec:84: ce:74:99:8b:5e:8d:22:bf:58:d4:e1:11:ed:01:3a: 08:48:89:3d:0b:fe:63:b5:68:dc:67:26:e7:66:27: f4:2a:aa:f7:86:5b:70:c8:0e:c4:14:6b:42:64:23: 6c:96:78:10:58:b0:a1:7f:53:aa:b8:78:7b:6b:a7: 3e:e7:5c:80:47:10:be:cf:9d:08:69:33:15:45:44: 19:fa:2c:16:09:52:a0:08:32:39:88:2d:d3:38:89: a6:c8:71:5f:bb:54:d7:d0:70:95:52:44:27:f5:d2: d6:14:7b:7f:fd:18:c4:0c:3c:4e:a6:3a:1b:41:7a: 25:52:75:52:3a:52:d5:19:52:7e:f9:48:5e:25:84: 61:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6E:71:E3:7F:DD:AA:13:A1:6D:F6:37:46:39:34:D0:6C:E8:BD:7E X509v3 Authority Key Identifier: keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/aW5x43_dqhOhbfY3Rjk00GzovX4.roa sbgp-ipAddrBlock: critical IPv4: 194.104.129.0/24 Signature Algorithm: sha256WithRSAEncryption 45:88:32:1c:f5:37:98:93:d6:a9:d5:56:e0:f6:8b:15:60:47: 4c:cf:ab:1d:2e:52:9a:7d:fd:d8:b9:c3:ae:6a:8a:f2:6b:a1: 48:ce:f5:de:1a:72:f1:5c:a7:81:f7:8a:4d:82:78:a6:17:d4: b6:86:04:a4:0f:ca:cf:c3:68:b7:9c:21:e8:e5:bd:45:d1:5c: c9:b8:0c:40:1f:f6:ad:2a:57:b6:bc:42:89:34:17:5b:94:b6: 4c:f7:ff:8a:6c:5a:ba:24:01:54:e2:cf:aa:ff:be:a4:29:b2: 8c:43:a2:bc:45:86:f0:c7:78:9c:82:34:a6:d0:59:e2:01:36: c3:84:5c:84:28:9a:1f:31:81:bf:e9:58:34:49:f7:51:1b:aa: 06:f1:19:10:60:e4:bf:29:ce:20:6e:80:f6:c8:92:b0:a1:d2: c9:73:1f:25:de:3d:f9:12:1f:07:b8:e0:2c:e6:9a:20:7b:7f: d4:b1:82:5a:78:af:4c:02:aa:36:db:fc:92:79:c8:29:d4:2e: 60:d2:7f:f4:18:7e:63:97:02:fb:d1:e5:6d:80:a7:7d:12:52: ca:f9:a5:d2:1d:d8:f6:d1:79:e9:9a:4a:7a:38:e4:4c:d3:e2: 83:96:09:3e:7f:c6:f3:ee:89:df:ad:35:be:40:69:cb:bc:d9: 93:70:c7:70 -----BEGIN CERTIFICATE----- MIIEojCCA4qgAwIBAgICC8cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMDgy MzU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDY5NkU3MUUzN0ZEREFB MTNBMTZERjYzNzQ2MzkzNEQwNkNFOEJEN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBmtRKKYGA4DFlLrtd+W3FHzCMZhoDvHYDGjHmrBghR41blg1B RMOYYrsSg2tybAXMm8tw4FBkDTDAIk3WkVFEllTH8NID/wIi5TTmb7P0PzUfoHOZ RSJRFsrOlrRc6ASDtQisJoe3/Zw73OLVm9DeuZwEljfshM50mYtejSK/WNThEe0B OghIiT0L/mO1aNxnJudmJ/QqqveGW3DIDsQUa0JkI2yWeBBYsKF/U6q4eHtrpz7n XIBHEL7PnQhpMxVFRBn6LBYJUqAIMjmILdM4iabIcV+7VNfQcJVSRCf10tYUe3/9 GMQMPE6mOhtBeiVSdVI6UtUZUn75SF4lhGFXAgMBAAGjggG+MIIBujAdBgNVHQ4E FgQUaW5x43/dqhOhbfY3Rjk00GzovX4wHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB /wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2FXNXg0M19kcWhPaGJm WTNSamswMEd6b3ZYNC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC aIEwDQYJKoZIhvcNAQELBQADggEBAEWIMhz1N5iT1qnVVuD2ixVgR0zPqx0uUpp9 /di5w65qivJroUjO9d4acvFcp4H3ik2CeKYX1LaGBKQPys/DaLecIejlvUXRXMm4 DEAf9q0qV7a8Qok0F1uUtkz3/4psWrokAVTiz6r/vqQpsoxDorxFhvDHeJyCNKbQ WeIBNsOEXIQomh8xgb/pWDRJ91EbqgbxGRBg5L8pziBugPbIkrCh0slzHyXePfkS Hwe44CzmmiB7f9Sxglp4r0wCqjbb/JJ5yCnULmDSf/QYfmOXAvvR5W2Ap30SUsr5 pdId2PbReemaSno45EzT4oOWCT5/xvPuid+tNb5Aacu82ZNwx3A= -----END CERTIFICATE-----Generated at Tue Dec 23 14:34:33 2025 by rpki-client