This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/f6hKAUjhBQkpFMqZtpZ6M6HmvLk.roa
File:                     f6hKAUjhBQkpFMqZtpZ6M6HmvLk.roa (raw, json)
Hash identifier:          38YbZrGANuV7K9hzy29IaWE4hhQB3xfNueL2M+guWrI=
Subject key identifier:   7F:A8:4A:01:48:E1:05:09:29:14:CA:99:B6:96:7A:33:A1:E6:BC:B9
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0B4E
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/f6hKAUjhBQkpFMqZtpZ6M6HmvLk.roa
Signing time:             Thu 26 Dec 2024 15:55:03 +0000
ROA not before:           Thu 26 Dec 2024 15:55:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2894 (0xb4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Dec 26 15:55:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7FA84A0148E105092914CA99B6967A33A1E6BCB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d9:dc:ff:e4:1f:32:73:3e:ef:cb:e6:eb:07:
                    40:9b:45:fe:0b:e0:33:69:91:e2:5d:1a:ed:96:52:
                    24:1d:26:2a:64:44:54:c2:bb:0f:b0:25:e2:df:4e:
                    a7:17:74:28:59:4e:c2:0c:f7:e6:c9:13:7f:ab:73:
                    57:ef:4c:e4:64:91:ce:d3:60:4e:a9:f7:f9:10:e1:
                    06:7b:b9:0b:e2:88:2f:50:3b:46:63:8a:6c:4a:95:
                    e5:b0:64:27:3a:e0:81:ab:3b:6d:c6:77:50:d9:b4:
                    9c:c8:7a:9f:71:b8:60:02:34:45:4e:37:b1:a7:9a:
                    9a:44:28:44:c5:ae:2e:d2:b4:73:c2:0a:15:97:5a:
                    b4:43:05:79:49:3e:97:61:b8:cc:f8:a2:2a:1a:0d:
                    9b:ba:80:46:5a:91:b4:a8:99:5e:bd:54:7c:6f:a0:
                    9d:e4:30:6d:94:7e:56:cc:b1:12:20:64:58:48:67:
                    4c:90:73:de:ac:2f:55:b6:63:d0:02:0d:14:4a:4c:
                    ca:cf:cc:62:90:78:e8:d5:2d:30:90:92:06:71:5f:
                    ea:f7:69:a2:63:e7:83:c8:87:be:0a:20:6f:0b:67:
                    15:a9:f9:1e:75:19:c4:62:bc:9b:6d:1c:6e:3c:41:
                    37:a2:2b:a2:9e:58:24:e1:76:85:d5:18:57:94:1b:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A8:4A:01:48:E1:05:09:29:14:CA:99:B6:96:7A:33:A1:E6:BC:B9
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/f6hKAUjhBQkpFMqZtpZ6M6HmvLk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:79:82:bd:ba:61:d9:66:f8:14:f9:3b:02:03:63:dc:ac:a6:
         12:d7:60:50:db:ea:8b:ea:92:4d:38:60:b4:06:98:3b:68:5b:
         41:9f:05:99:cd:db:26:42:1d:5a:d8:f6:fa:5f:c9:15:dd:f5:
         b3:2a:4b:a8:65:1d:58:1d:f8:07:64:9a:dd:f3:62:09:ea:e8:
         0a:7f:b6:5b:98:d1:bd:cf:72:10:26:2f:c0:d7:19:c7:8e:17:
         df:21:23:59:a9:df:02:08:7e:7c:1a:b4:ea:64:b8:86:ad:dc:
         a4:f9:e8:ab:43:7f:b0:79:ae:12:8a:a7:d9:23:d5:dc:43:b4:
         bd:c4:ee:55:a5:33:fc:58:af:51:b6:51:2e:c9:9c:03:26:52:
         78:33:a8:96:bc:0c:af:26:f7:91:11:f8:e1:c6:a5:6b:bf:01:
         ea:58:8b:3c:c5:dc:b5:e8:5f:7b:a8:07:92:42:dc:5b:fe:8b:
         99:86:ee:27:f3:ee:7c:1c:f8:01:23:26:90:cc:58:e1:ae:35:
         8c:e6:70:30:9a:cf:35:68:2e:98:c9:c4:e7:a8:bd:13:1d:b3:
         f8:67:72:af:0e:6b:28:03:2d:ab:50:e0:a8:98:df:d5:86:a7:
         86:d4:4e:08:af:b8:a1:34:73:4e:ee:5e:72:68:d2:47:64:d4:
         44:8a:f0:fd
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgICC04wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk
MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEyMjYx
NTU1MDNaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDdGQTg0QTAxNDhFMTA1
MDkyOTE0Q0E5OUI2OTY3QTMzQTFFNkJDQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC22dz/5B8ycz7vy+brB0CbRf4L4DNpkeJdGu2WUiQdJipkRFTC
uw+wJeLfTqcXdChZTsIM9+bJE3+rc1fvTORkkc7TYE6p9/kQ4QZ7uQviiC9QO0Zj
imxKleWwZCc64IGrO23Gd1DZtJzIep9xuGACNEVON7GnmppEKETFri7StHPCChWX
WrRDBXlJPpdhuMz4oioaDZu6gEZakbSomV69VHxvoJ3kMG2UflbMsRIgZFhIZ0yQ
c96sL1W2Y9ACDRRKTMrPzGKQeOjVLTCQkgZxX+r3aaJj54PIh74KIG8LZxWp+R51
GcRivJttHG48QTeiK6KeWCThdoXVGFeUG937AgMBAAGjggG+MIIBujAdBgNVHQ4E
FgQUf6hKAUjhBQkpFMqZtpZ6M6HmvLkwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl
HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz
Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB
/wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2Y2aEtBVWpoQlFrcEZN
cVp0cFo2TTZIbXZMay5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC
aIEwDQYJKoZIhvcNAQELBQADggEBAMN5gr26Ydlm+BT5OwIDY9ysphLXYFDb6ovq
kk04YLQGmDtoW0GfBZnN2yZCHVrY9vpfyRXd9bMqS6hlHVgd+Adkmt3zYgnq6Ap/
tluY0b3PchAmL8DXGceOF98hI1mp3wIIfnwatOpkuIat3KT56KtDf7B5rhKKp9kj
1dxDtL3E7lWlM/xYr1G2US7JnAMmUngzqJa8DK8m95ER+OHGpWu/AepYizzF3LXo
X3uoB5JC3Fv+i5mG7ifz7nwc+AEjJpDMWOGuNYzmcDCazzVoLpjJxOeovRMds/hn
cq8OaygDLatQ4KiY39WGp4bUTgivuKE0c07uXnJo0kdk1ESK8P0=
-----END CERTIFICATE-----
Generated at Thu Dec 18 08:03:16 2025 by rpki-client