This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/lyEreH7uEpqnwvIgPkMeZ7CCFIU.roa
File:                     lyEreH7uEpqnwvIgPkMeZ7CCFIU.roa (raw, json)
Hash identifier:          4+l6VfC/D5K5TEixGTfNOzYbgjYQnosQANfvjJK4b3U=
Subject key identifier:   97:21:2B:78:7E:EE:12:9A:A7:C2:F2:20:3E:43:1E:67:B0:82:14:85
Certificate issuer:       /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial:       0BA9
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lyEreH7uEpqnwvIgPkMeZ7CCFIU.roa
Signing time:             Sun 05 Jan 2025 15:55:03 +0000
ROA not before:           Sun 05 Jan 2025 15:55:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15562
IP address blocks:        194.104.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2985 (0xba9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
        Validity
            Not Before: Jan  5 15:55:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=97212B787EEE129AA7C2F2203E431E67B0821485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:7e:df:f1:9a:c4:60:bb:30:0a:f0:2c:7c:
                    93:94:1b:8e:58:ca:8c:14:e4:6c:62:ed:f3:07:cf:
                    95:2b:5e:a1:e1:43:00:f8:a8:f6:9b:c4:0c:b2:ea:
                    a5:7b:c6:61:f6:51:0a:8d:6e:b5:fb:67:37:6a:ac:
                    0d:54:0c:59:3f:70:d0:70:d6:7e:f9:cd:7e:29:d8:
                    78:e0:4b:8f:62:37:b3:14:9c:34:19:45:4f:c3:3b:
                    4a:1d:0d:10:75:4e:d0:4e:5b:5b:41:65:b8:ef:f8:
                    d5:cc:9c:3c:db:b4:c7:a5:02:08:66:92:5f:28:d9:
                    da:83:d9:89:97:dc:99:7b:c0:15:c6:f7:ae:28:5c:
                    a5:43:b4:63:56:73:f1:0c:c9:9e:06:be:72:86:e8:
                    b9:bd:3f:8a:b6:84:06:30:06:1d:a5:0e:6d:ee:b7:
                    03:00:d1:57:4f:22:b0:24:ee:db:28:65:78:dc:07:
                    51:d7:f2:f9:31:12:f9:84:91:b0:05:3b:a3:d4:65:
                    89:b4:fc:04:33:58:b2:1c:da:4c:17:34:80:ea:3e:
                    4c:0a:bb:60:8f:e5:32:f4:a8:a4:87:ac:37:0f:41:
                    0b:c9:98:9b:00:8e:13:b7:0b:41:60:d6:39:0f:e1:
                    6a:7c:2c:cb:1e:66:e9:c8:7a:09:c4:30:7d:81:af:
                    fa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:21:2B:78:7E:EE:12:9A:A7:C2:F2:20:3E:43:1E:67:B0:82:14:85
            X509v3 Authority Key Identifier:
                keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/lyEreH7uEpqnwvIgPkMeZ7CCFIU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:b6:ec:68:c4:39:62:52:15:92:4f:6a:3c:0c:eb:21:94:1e:
         02:48:f6:e2:86:37:83:b1:af:77:25:1f:4e:cd:c3:5c:18:e2:
         5b:64:54:9b:a5:54:6f:bc:16:5e:2a:7b:09:66:be:da:7d:d7:
         a7:cc:b1:4c:2b:23:84:58:d8:05:15:1b:8c:40:47:95:ae:cb:
         fb:ce:54:59:ff:59:e0:d5:84:15:b8:a6:55:d0:34:89:60:9b:
         b5:50:65:41:aa:b7:3b:07:75:bc:0f:ce:8b:eb:67:3c:14:99:
         fa:fe:79:64:1b:38:03:ac:48:70:90:fb:aa:f0:a8:e7:8c:4a:
         5b:46:23:a7:a6:f4:b6:04:b5:39:d2:62:13:d1:e6:b4:35:a2:
         b9:cc:3d:af:e1:a2:c2:a3:ef:91:65:f0:9c:7f:e1:42:a4:b9:
         da:7e:8e:d9:04:60:26:18:6d:14:e1:47:b3:2d:a3:2c:77:82:
         a2:b8:af:e2:02:f1:37:52:28:79:b4:d5:c3:6a:28:55:7c:b4:
         f1:ed:ec:50:9f:65:22:e2:d2:5a:75:1d:e2:03:fc:76:a7:ea:
         6e:70:f9:d8:5a:73:6b:b4:7d:47:e3:86:e8:80:e3:00:18:f1:
         88:db:ec:2d:f7:9e:14:5d:64:b6:38:bd:eb:b3:31:6c:fe:fa:
         dc:d8:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 20:56:06 2025 by rpki-client