This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/gVxt3zceEmdAfB6K1IfDR2wp1Tk.roa File: gVxt3zceEmdAfB6K1IfDR2wp1Tk.roa (raw, json) Hash identifier: Vulwf36QNx7RGJe8bRF+33pZQ4PnBvk6alC/bHmOvgc= Subject key identifier: 81:5C:6D:DF:37:1E:12:67:40:7C:1E:8A:D4:87:C3:47:6C:29:D5:39 Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Certificate serial: 0CB7 Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/gVxt3zceEmdAfB6K1IfDR2wp1Tk.roa Signing time: Tue 04 Feb 2025 15:55:03 +0000 ROA not before: Tue 04 Feb 2025 15:55:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15562 IP address blocks: 194.104.129.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Validity Not Before: Feb 4 15:55:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=815C6DDF371E1267407C1E8AD487C3476C29D539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:4b:70:84:4c:ac:53:ae:f6:11:da:77:f8: 8b:e8:77:41:a4:e5:64:c7:ed:e6:ab:00:a4:5c:ee: 52:1f:4b:bd:d6:a4:6b:c4:f7:40:55:6b:9e:89:55: b8:13:2a:01:7e:a9:0f:12:12:60:e1:26:73:78:8b: 82:4b:90:78:ee:c4:3b:58:50:b7:18:e4:5d:29:82: 91:c4:20:81:0c:25:9a:6f:67:be:e7:0f:0d:43:c0: 4b:1a:67:e8:4a:0e:0f:eb:f7:9b:a9:bf:a3:7d:8c: a7:d2:5a:77:d1:84:ed:84:d5:4a:10:ff:12:5e:3a: 48:9d:5f:a0:d9:f2:22:38:f4:62:f5:81:ea:c7:6f: 47:05:ff:d5:19:bb:15:20:3d:6f:90:a5:6f:63:ff: b4:41:06:07:56:b3:92:f7:a2:b8:c3:6a:be:1d:57: 90:78:cc:db:87:81:16:0b:c6:f1:fd:52:11:b4:8e: f8:fe:67:ed:20:2c:c7:11:2d:a3:cf:36:7e:10:2a: ff:f9:96:55:78:60:42:ce:1c:88:82:c0:b1:56:2d: 15:de:fa:89:d9:f3:e1:70:7d:8e:cf:e8:dd:3b:81: 8f:cd:e4:94:b4:f5:fc:f1:77:f1:e5:be:6a:1e:e5: 38:db:4f:18:db:de:25:ce:ba:56:26:e1:ec:bf:bd: c4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5C:6D:DF:37:1E:12:67:40:7C:1E:8A:D4:87:C3:47:6C:29:D5:39 X509v3 Authority Key Identifier: keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/gVxt3zceEmdAfB6K1IfDR2wp1Tk.roa sbgp-ipAddrBlock: critical IPv4: 194.104.129.0/24 Signature Algorithm: sha256WithRSAEncryption 71:e2:f1:4c:a6:11:63:f8:4b:76:d8:76:08:0e:cc:e6:ac:37: ee:aa:bd:be:29:42:f2:9e:e1:77:36:32:ef:8d:16:0f:1b:b9: fc:a0:d6:bf:8e:fd:eb:d3:51:ac:6f:74:d8:46:51:da:d3:7a: 2b:ca:99:13:8f:cb:57:49:8f:01:d6:0e:5f:88:38:62:09:b7: ed:ce:80:b2:c7:71:34:43:09:2d:52:1e:08:60:41:5e:9e:63: cd:d9:99:2d:bb:13:45:b0:a8:0d:5f:43:47:1a:f8:1c:3f:a0: 8e:31:96:45:67:5e:de:5a:c7:e5:1e:50:73:f6:13:17:a3:05: 34:41:f0:76:96:a1:3a:e8:f4:93:d3:bc:4e:b2:eb:48:9d:00: b5:ce:bf:fe:53:93:e0:a9:c6:fd:bb:62:35:b7:67:a3:40:a7: 8d:b1:c6:2d:e5:a7:5c:2d:10:d7:4b:2a:5a:78:65:e7:cf:91: 1c:75:e3:41:e8:71:33:57:34:2e:74:ff:14:2a:69:15:af:00: 8c:59:5a:ab:ed:46:93:15:17:ae:62:a4:15:d3:5c:08:25:ae: 61:05:3e:27:a6:0b:ea:ad:c5:4e:3b:b9:0b:48:35:14:4d:90: fe:c6:9f:bb:d7:05:66:0d:ed:f1:bb:8d:68:12:a5:3b:57:8e: 50:7c:47:24 -----BEGIN CERTIFICATE----- MIIEojCCA4qgAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAyMDQx NTU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDgxNUM2RERGMzcxRTEy Njc0MDdDMUU4QUQ0ODdDMzQ3NkMyOUQ1MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6bUtwhEysU672Edp3+Ivod0Gk5WTH7earAKRc7lIfS73WpGvE 90BVa56JVbgTKgF+qQ8SEmDhJnN4i4JLkHjuxDtYULcY5F0pgpHEIIEMJZpvZ77n Dw1DwEsaZ+hKDg/r95upv6N9jKfSWnfRhO2E1UoQ/xJeOkidX6DZ8iI49GL1gerH b0cF/9UZuxUgPW+QpW9j/7RBBgdWs5L3orjDar4dV5B4zNuHgRYLxvH9UhG0jvj+ Z+0gLMcRLaPPNn4QKv/5llV4YELOHIiCwLFWLRXe+onZ8+FwfY7P6N07gY/N5JS0 9fzxd/Hlvmoe5TjbTxjb3iXOulYm4ey/vcSNAgMBAAGjggG+MIIBujAdBgNVHQ4E FgQUgVxt3zceEmdAfB6K1IfDR2wp1TkwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB /wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2dWeHQzemNlRW1kQWZC NksxSWZEUjJ3cDFUay5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC aIEwDQYJKoZIhvcNAQELBQADggEBAHHi8UymEWP4S3bYdggOzOasN+6qvb4pQvKe 4Xc2Mu+NFg8bufyg1r+O/evTUaxvdNhGUdrTeivKmROPy1dJjwHWDl+IOGIJt+3O gLLHcTRDCS1SHghgQV6eY83ZmS27E0WwqA1fQ0ca+Bw/oI4xlkVnXt5ax+UeUHP2 ExejBTRB8HaWoTro9JPTvE6y60idALXOv/5Tk+Cpxv27YjW3Z6NAp42xxi3lp1wt ENdLKlp4ZefPkRx140HocTNXNC50/xQqaRWvAIxZWqvtRpMVF65ipBXTXAglrmEF PiemC+qtxU47uQtINRRNkP7Gn7vXBWYN7fG7jWgSpTtXjlB8RyQ= -----END CERTIFICATE-----Generated at Sun Dec 7 16:59:48 2025 by rpki-client