This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/hsORu78Q7KVSY5CzdTA5hVCNW7M.roa File: hsORu78Q7KVSY5CzdTA5hVCNW7M.roa (raw, json) Hash identifier: elDnMHv07KN8BbuQg9HjL4aa1FdZgYfBcH0jnWubR8U= Subject key identifier: 86:C3:91:BB:BF:10:EC:A5:52:63:90:B3:75:30:39:85:50:8D:5B:B3 Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Certificate serial: 0AF1 Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hsORu78Q7KVSY5CzdTA5hVCNW7M.roa Signing time: Mon 16 Dec 2024 07:55:02 +0000 ROA not before: Mon 16 Dec 2024 07:55:02 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 15562 IP address blocks: 194.104.129.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 2801 (0xaf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f Validity Not Before: Dec 16 07:55:02 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=86C391BBBF10ECA5526390B375303985508D5BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:d9:6e:d9:ac:fd:40:8c:21:28:12:d9:d8: e7:81:95:c4:59:d1:96:a4:6b:9b:84:75:e7:ff:18: 43:19:d3:be:de:1f:4b:ad:6b:e3:cf:b8:ac:60:67: 12:4b:da:9e:3b:de:ac:44:1d:cd:6a:9d:2d:8a:35: 7d:71:78:07:f1:5f:4d:78:56:2e:38:5d:3b:29:9b: 10:81:1e:84:62:64:2b:3e:09:a7:7f:00:2e:36:4a: 2d:0f:0d:a6:94:88:0e:d4:fb:ca:61:5f:ac:43:84: b4:18:b4:9f:fe:bc:92:9e:6e:fc:95:25:72:96:92: 24:ca:ad:62:23:91:23:5f:89:f4:46:ba:0f:3a:b2: e8:f0:45:4c:5b:ea:2a:b6:be:5c:8e:31:ae:63:7b: a1:99:90:ff:1a:41:ee:b4:aa:42:af:8f:0e:6e:1e: 6d:03:cc:a5:14:b1:43:73:ef:93:35:20:d8:79:ec: 1a:13:df:76:74:4b:bc:0e:71:51:61:47:79:37:c1: 8e:0b:bf:9b:12:ca:7c:8d:f9:52:9b:0f:6e:c6:ca: 41:13:c3:ad:69:73:90:a9:cf:23:81:df:28:2d:92: f6:c5:eb:86:19:49:13:6e:18:48:c1:d2:ac:82:d6: 64:11:71:1f:ec:78:ca:58:fa:84:7a:96:5d:0d:5c: 04:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C3:91:BB:BF:10:EC:A5:52:63:90:B3:75:30:39:85:50:8D:5B:B3 X509v3 Authority Key Identifier: keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/hsORu78Q7KVSY5CzdTA5hVCNW7M.roa sbgp-ipAddrBlock: critical IPv4: 194.104.129.0/24 Signature Algorithm: sha256WithRSAEncryption 86:2d:7a:c9:30:64:58:91:5c:a5:e9:ed:9b:3e:4a:d6:2d:e5: c7:43:9e:db:f3:53:24:85:f9:c7:3e:a0:fe:84:37:05:4f:67: 7e:dd:6f:94:3f:9b:a8:bb:db:98:7b:71:83:cf:5a:1c:41:d8: 67:e4:f1:dd:7f:02:73:ae:68:de:71:50:75:3e:11:8d:2d:42: 73:70:3b:37:1b:b9:f8:7d:a4:9e:08:1d:8a:1f:48:3f:a7:e6: c8:a4:85:4d:5a:c3:59:58:53:d7:2f:3d:98:73:d4:70:3b:e2: 88:51:5d:3f:3d:85:ca:0d:bf:02:c3:04:ca:b7:c0:42:74:0d: 03:5c:26:41:8c:4c:6f:4a:b9:c5:6f:1a:0d:2a:55:e6:d9:b2: d9:a1:cb:77:de:37:ff:2f:45:2d:67:b8:3d:4e:2e:f5:df:ed: 55:50:37:07:5c:64:ff:51:0c:d1:18:d1:88:1e:84:bd:66:69: 64:47:5b:83:75:7a:49:42:44:87:2d:a8:1d:f4:cb:e8:5b:80: 62:4c:34:c0:87:dd:1e:1b:8d:af:c4:40:a9:1b:bf:49:53:5a: e5:53:3d:07:3b:47:0d:ee:13:c1:19:88:43:45:e1:f2:b5:c7: 25:97:95:c9:32:ef:a8:0f:ba:ba:96:a9:65:13:e0:5e:14:21: db:0b:2a:60 -----BEGIN CERTIFICATE----- MIIEojCCA4qgAwIBAgICCvEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFk MTRlYmIyNTVkYzA1OGQ0YmZhNWE1MWM5M2Y3M2Y4MzBhYjg4ZjAeFw0yNDEyMTYw NzU1MDJaFw0yNTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDg2QzM5MUJCQkYxMEVD QTU1MjYzOTBCMzc1MzAzOTg1NTA4RDVCQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6itlu2az9QIwhKBLZ2OeBlcRZ0Zaka5uEdef/GEMZ077eH0ut a+PPuKxgZxJL2p473qxEHc1qnS2KNX1xeAfxX014Vi44XTspmxCBHoRiZCs+Cad/ AC42Si0PDaaUiA7U+8phX6xDhLQYtJ/+vJKebvyVJXKWkiTKrWIjkSNfifRGug86 sujwRUxb6iq2vlyOMa5je6GZkP8aQe60qkKvjw5uHm0DzKUUsUNz75M1INh57BoT 33Z0S7wOcVFhR3k3wY4Lv5sSynyN+VKbD27GykETw61pc5CpzyOB3ygtkvbF64YZ SRNuGEjB0qyC1mQRcR/seMpY+oR6ll0NXAQTAgMBAAGjggG+MIIBujAdBgNVHQ4E FgQUhsORu78Q7KVSY5CzdTA5hVCNW7MwHwYDVR0jBBgwFoAUcdFOuyVdwFjUv6Wl HJP3P4MKuI8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5scnNz Zi9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY3JsMGQGCCsGAQUFBwEBBFgw VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv REVGQVVMVC9jZEZPdXlWZHdGalV2NldsSEpQM1A0TUt1STguY2VyMA4GA1UdDwEB /wQEAwIHgDBoBggrBgEFBQcBCwRcMFowWAYIKwYBBQUHMAuGTHJzeW5jOi8vY2hs b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1JJUEUtbmxyc3NmL2hzT1J1NzhRN0tWU1k1 Q3pkVEE1aFZDTlc3TS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADC aIEwDQYJKoZIhvcNAQELBQADggEBAIYteskwZFiRXKXp7Zs+StYt5cdDntvzUySF +cc+oP6ENwVPZ37db5Q/m6i725h7cYPPWhxB2Gfk8d1/AnOuaN5xUHU+EY0tQnNw Ozcbufh9pJ4IHYofSD+n5sikhU1aw1lYU9cvPZhz1HA74ohRXT89hcoNvwLDBMq3 wEJ0DQNcJkGMTG9KucVvGg0qVebZstmhy3feN/8vRS1nuD1OLvXf7VVQNwdcZP9R DNEY0YgehL1maWRHW4N1eklCRIctqB30y+hbgGJMNMCH3R4bja/EQKkbv0lTWuVT PQc7Rw3uE8EZiENF4fK1xyWXlcky76gPurqWqWUT4F4UIdsLKmA= -----END CERTIFICATE-----Generated at Sun Dec 21 15:39:25 2025 by rpki-client