This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/ckEBAvpS05fvi_agP0YjjNVWFVU.roa
File:                     ckEBAvpS05fvi_agP0YjjNVWFVU.roa (raw, json)
Hash identifier:          8oPBi52A5hsGjsgl0wJ15i8ECf0cnXtaqsoJnlasup0=
Subject key identifier:   72:41:01:02:FA:52:D3:97:EF:8B:F6:A0:3F:46:23:8C:D5:56:15:55
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0C5A
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ckEBAvpS05fvi_agP0YjjNVWFVU.roa
Signing time:             Sat 25 Jan 2025 07:55:03 +0000
ROA not before:           Sat 25 Jan 2025 07:55:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3162 (0xc5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Jan 25 07:55:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=72410102FA52D397EF8BF6A03F46238CD5561555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:28:40:e1:8e:39:ed:61:f0:3e:e1:41:fc:
                    f8:2d:5d:29:96:fa:57:c0:a6:81:25:0c:2c:fd:5b:
                    63:81:8f:b7:78:fc:16:a9:11:b9:63:57:d8:c4:46:
                    80:ae:29:40:d7:86:d0:ac:12:ed:66:25:b6:fc:2b:
                    33:fa:39:3d:6e:be:ce:67:64:fe:de:17:92:86:55:
                    ff:0c:1f:18:9e:b8:50:77:1c:68:5d:39:bd:2e:06:
                    dc:78:6e:24:44:c4:43:93:c1:4a:ce:dd:a1:c6:32:
                    05:eb:97:8e:4c:c5:68:3a:68:0f:37:95:83:f4:ec:
                    61:81:73:1c:5d:92:03:da:9c:38:dd:3e:9a:3d:f2:
                    a6:a5:7d:33:c1:2f:10:d1:2f:29:95:a6:64:90:93:
                    d6:b2:4b:00:0e:8b:98:b5:2d:56:a4:6e:95:d6:8f:
                    14:a3:91:ab:6d:49:db:27:32:ea:10:64:04:49:74:
                    6e:84:96:df:c3:0f:81:82:86:34:40:f4:3c:0a:52:
                    02:86:69:52:25:0b:65:2e:5d:ad:45:ce:c9:55:c5:
                    2c:4d:61:2a:7f:56:6d:ee:57:50:8f:27:5e:c3:5c:
                    55:9a:ea:ed:98:0e:1d:4f:cf:97:b9:c5:ed:87:26:
                    5d:c3:7d:59:ea:8c:da:b6:c4:f7:77:87:13:a9:87:
                    05:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:41:01:02:FA:52:D3:97:EF:8B:F6:A0:3F:46:23:8C:D5:56:15:55
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/ckEBAvpS05fvi_agP0YjjNVWFVU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:7e:0c:20:cc:cb:83:a1:b3:23:f4:1e:38:04:19:48:c1:31:
         88:b8:c2:92:fe:59:5a:2d:e7:5c:ad:b2:de:80:9c:ec:b7:b5:
         c8:39:53:87:07:d3:c0:c7:e0:86:8a:9d:66:17:49:36:26:18:
         6c:d5:b9:ed:0a:47:cf:47:0e:c7:e3:90:db:94:a8:df:f5:79:
         63:c5:e6:21:63:74:42:20:ef:6d:4d:cb:65:36:b6:ef:50:c1:
         f2:36:8e:26:18:54:98:65:f6:a3:da:0a:fb:c4:02:7e:5b:68:
         b9:77:78:70:3f:c4:34:d6:7f:b0:44:b0:df:45:58:b8:92:6a:
         99:a9:0f:72:7d:97:bd:b4:92:e3:03:52:e4:60:c9:19:17:d0:
         5d:2a:be:a9:ad:e0:92:3f:c5:32:86:a1:4a:d1:ee:77:cc:d1:
         d1:0f:b5:03:7b:17:7b:dd:df:af:2c:10:0b:5e:ad:5d:65:4b:
         dc:df:b8:2b:09:64:42:d4:ce:e1:ea:02:12:57:72:b8:09:55:
         e8:26:a5:ac:13:25:03:a5:91:52:aa:76:d5:8a:01:7b:ae:0f:
         dd:2c:ac:42:bf:c7:96:08:1e:0b:44:62:49:e8:a5:b5:b5:06:
         38:e2:4b:27:17:17:a6:5a:8e:0b:66:41:eb:e4:8d:8a:66:be:
         ff:2c:e5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 20:39:29 2025 by rpki-client