This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/hA0SrQjTIaV894CzrVsKRT3o_io.roa File: hA0SrQjTIaV894CzrVsKRT3o_io.roa (raw, json) Hash identifier: e1GJSGyz9pGUrv0gDkYXuKgCch0VCJVmKrA19EOzfzE= Subject key identifier: 84:0D:12:AD:08:D3:21:A5:7C:F7:80:B3:AD:5B:0A:45:3D:E8:FE:2A Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Certificate serial: 0BE2 Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hA0SrQjTIaV894CzrVsKRT3o_io.roa Signing time: Sat 11 Jan 2025 23:55:03 +0000 ROA not before: Sat 11 Jan 2025 23:55:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15562 IP address blocks: 194.104.129.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 3042 (0xbe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Validity Not Before: Jan 11 23:55:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=840D12AD08D321A57CF780B3AD5B0A453DE8FE2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:96:bf:f2:b6:bf:6b:6a:f7:08:8e:a7:7a:60: e7:70:5b:da:6d:21:12:9b:62:10:c4:7c:27:8f:d7: 46:c3:65:6f:10:9a:26:21:d6:03:37:32:8e:37:aa: 71:5f:fc:78:b3:a6:7c:c5:27:53:d4:fa:fa:ac:9c: 77:2e:df:35:b0:16:86:d9:51:e3:7b:93:d2:fa:98: d9:42:11:e9:cc:1a:f1:62:ff:61:46:fd:0a:65:da: 8a:f6:51:47:dc:b4:f2:aa:e5:5d:53:3b:86:77:43: 56:83:99:c2:d7:b3:a8:1f:ad:58:de:90:bd:1e:7a: 6b:51:c6:ea:36:7e:05:fe:c3:40:96:3b:aa:c3:05: de:23:31:0c:43:5b:25:4a:c0:25:34:45:e6:ab:e3: 6f:28:d8:43:50:47:38:d0:c6:8b:be:01:ab:83:22: 5e:db:e9:3d:29:6c:b6:a6:3b:47:69:cb:d2:ff:f3: 55:b4:81:0c:f3:b7:ed:99:80:fe:07:71:fc:8b:3c: be:88:61:1f:ce:c3:53:c2:93:a9:4e:e1:72:0a:85: 16:1d:53:1a:f2:8c:d9:67:08:9e:54:9a:84:04:a1: a5:75:7b:10:70:d0:81:48:03:f0:7f:e4:fb:a3:25: 55:51:e5:ca:19:9a:fd:43:9a:5b:aa:1e:5d:1f:bd: 17:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0D:12:AD:08:D3:21:A5:7C:F7:80:B3:AD:5B:0A:45:3D:E8:FE:2A X509v3 Authority Key Identifier: keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hA0SrQjTIaV894CzrVsKRT3o_io.roa sbgp-ipAddrBlock: critical IPv4: 194.104.129.0/24 Signature Algorithm: sha256WithRSAEncryption 40:25:07:9b:62:c5:ba:ea:8f:5d:ec:2d:1e:02:12:e0:41:46: 1e:c8:ba:37:71:ec:8b:e5:20:86:4b:82:f0:ae:b9:a0:49:83: 97:a9:74:61:2a:86:da:2f:b9:c8:c4:d5:2f:6d:a0:38:8e:36: 75:28:0c:55:f3:be:63:eb:19:bf:4e:d1:25:fa:e7:f0:ef:db: 7f:a7:62:49:95:6e:ce:84:af:85:8c:de:66:29:fc:8a:00:05: e2:fa:7d:32:d4:e0:23:f4:49:55:14:cf:14:1c:f3:a6:41:f2: b2:1d:b8:c8:12:a3:27:9b:aa:ce:d2:dc:48:7f:b3:30:57:9c: bb:6c:b5:22:54:9c:8c:3a:f8:e4:16:c1:57:1b:23:9e:ec:a4: 4d:4e:89:0d:8b:81:0b:be:94:53:69:6a:0d:e2:05:11:0c:6a: 99:a2:8c:05:7d:0a:9b:86:85:a0:f7:ad:53:8b:a9:de:35:9e: 19:60:31:90:3d:dd:3b:31:a8:e9:ca:f7:14:fc:c7:67:f3:63: ae:f8:2b:84:82:5c:41:af:42:72:ed:1b:32:5f:f2:4b:99:18: 40:f3:41:82:18:15:3a:2b:ea:8e:80:00:19:83:a7:6d:6f:4c: 3e:2b:fb:a2:68:d2:56:37:37:de:7b:7d:fc:a2:c5:ca:da:e0: 0d:84:41:67 -----BEGIN CERTIFICATE----- MIIEojCCA4qgAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNTAxMTEy MzU1MDNaFw0yNjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDg0MEQxMkFEMDhEMzIx QTU3Q0Y3ODBCM0FENUIwQTQ1M0RFOEZFMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWlr/ytr9ravcIjqd6YOdwW9ptIRKbYhDEfCeP10bDZW8QmiYh 1gM3Mo43qnFf/HizpnzFJ1PU+vqsnHcu3zWwFobZUeN7k9L6mNlCEenMGvFi/2FG /Qpl2or2UUfctPKq5V1TO4Z3Q1aDmcLXs6gfrVjekL0eemtRxuo2fgX+w0CWO6rD Bd4jMQxDWyVKwCU0Rear428o2ENQRzjQxou+AauDIl7b6T0pbLamO0dpy9L/81W0 gQzzt+2ZgP4HcfyLPL6IYR/Ow1PCk6lO4XIKhRYdUxryjNlnCJ5UmoQEoaV1exBw 0IFIA/B/5PujJVVR5coZmv1DmluqHl0fvReLAgMBAAGjggG+MIIBujAdBgNVHQ4E FgQUhA0SrQjTIaV894CzrVsKRT3o/iowHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB /wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2hBMFNyUWpUSWFWODk0 Q3pyVnNLUlQzb19pby5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC aIEwDQYJKoZIhvcNAQELBQADggEBAEAlB5tixbrqj13sLR4CEuBBRh7Iujdx7Ivl IIZLgvCuuaBJg5epdGEqhtovucjE1S9toDiONnUoDFXzvmPrGb9O0SX65/Dv23+n YkmVbs6Er4WM3mYp/IoABeL6fTLU4CP0SVUUzxQc86ZB8rIduMgSoyebqs7S3Eh/ szBXnLtstSJUnIw6+OQWwVcbI57spE1OiQ2LgQu+lFNpag3iBREMapmijAV9CpuG haD3rVOLqd41nhlgMZA93TsxqOnK9xT8x2fzY674K4SCXEGvQnLtGzJf8kuZGEDz QYIYFTor6o6AABmDp21vTD4r+6Jo0lY3N957ffyixcra4A2EQWc= -----END CERTIFICATE-----Generated at Sun Dec 21 19:49:04 2025 by rpki-client