Hi Martin, On Thu, Jun 25, 2026 at 09:31:26AM +0200, Martin Pels wrote: > IANA has provided Early Registrations of the codepoints required for RPKI > publishing. > > Additionally, several errors in the ASN.1 module have been fixed.
I think I managed to produce a signed community definition reference chained up to RIPE NCC TAL, and validate it using a modified version of rpki-client. Feel free to add to the Implementation Status section: "- An experimental CDR signer was provided by Job Snijders." "- An experimental validator implementation based on rpki-client was provided by Job Snijders." At the bottom of this email is a Base64 encoded version of my CDR, it decodes as follows: $ rpki-client -f ./jwso98ODQgZo9SY9cIli3KyKspY.cdr File: ./jwso98ODQgZo9SY9cIli3KyKspY.cdr Hash identifier: Dy+1JMvh33cg1DA3OWAM6RwbGN2qtMkeZS6P99pPqQo= Subject key identifier: EB:A1:DE:06:62:FE:26:B8:C6:2D:80:EF:91:39:46:5B:0A:7B:E3:33 Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8 Certificate serial: A1C7752FF8B1D2E021 Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/jwso98ODQgZo9SY9cIli3KyKspY.cdr Signing time: Thu 25 Jun 2026 14:21:42 +0000 CDR not before: Thu 25 Jun 2026 08:33:16 +0000 CDR not after: Fri 14 Jul 2028 08:33:16 +0000 asID: 15562 Location: https://chloe.sobornost.net/AS15562.cdr.json Validation: OK Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Jun 2026 18:32:19 +0000 The CDR object: MIIGxgYJKoZIhvcNAQcCoIIGtzCCBrMCAQMxDTALBglghkgBZQMEAgEwUQYLKoZIhvcNA QkQATqgQgRAMD4CAjzKMDgGCCsGAQUFBzAPhixodHRwczovL2NobG9lLnNvYm9ybm9zdC 5uZXQvQVMxNTU2Mi5jZHIuanNvbqCCBJwwggSYMIIDgKADAgECAgoAocd1L/ix0uAhMA0 GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNhYTgwNWRiYWMzNjQ3NDliOWIxMTU1OTBh YjZlZjBmOTcwY2RiZDgwHhcNMjYwNjI1MDgzMzE2WhcNMjgwNzE0MDgzMzE2WjAZMRcwF QYDVQQDEw5TaW1wbGUgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCgg EBAL2CSnDQbQRQU9V95AZgr5+vP6RzZU9FQDTQLmNsIPZSK2HJVU4SZQlkDWgbsjq3ZE/ DHsMZzIiS/GvmB5CIg59xLj8ybDecQky5vqb6M4tVgnf/evPbmBT7BMbRaNV3tAdEdPFm j1idj0qQ/MO4AmSzJyjzpDlCCTiLV81pcuNsg6l8jExJDslt/HXYB2Ra8XJICs/WccHnx 6HmWjVwzr2O6AKVAs+XnI7ZCi3lNli/77GsMsArzocuLiM2fr1bMMJActCr3v+4kZCmXs mXQ9ZuViXme4xDI46jeh6yeVNGsI3G2gbmXWZSyM89NnwMFL1tg+X1xTBKlXDdFe5qLMs CAwEAAaOCAcYwggHCMA4GA1UdDwEB/wQEAwIHgDAdBgNVHQ4EFgQU66HeBmL+JrjGLYDv kTlGWwp74zMwHwYDVR0jBBgwFoAUyqgF26w2R0m5sRVZCrbvD5cM29gwGAYDVR0gAQH/B A4wDDAKBggrBgEFBQcOAjAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI8yjBkBggrBgEFBQ cBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J 5L0RFRkFVTFQveXFnRjI2dzJSMG01c1JWWkNyYnZENWNNMjlnLmNlcjBkBgNVHR8EXTBb MFmgV6BVhlNyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5sam9ic 25pamRlcnMveXFnRjI2dzJSMG01c1JWWkNyYnZENWNNMjlnLmNybDBvBggrBgEFBQcBCw RjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vY2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1J JUEUtbmxqb2JzbmlqZGVycy9qd3NvOThPRFFnWm85U1k5Y0lsaTNLeUtzcFkuY2RyMA0G CSqGSIb3DQEBCwUAA4IBAQC9NQBvi8sNgUg0sSf5ZybC+IAnDgs0NDCzmNk5N49zPW2/i rZ0tvZwz9pKKluoxbqBCPAxp6KvV4W50pPxWZC6S8OuV8LttmdkxCmR+b1lNFwcsBzr3D JTaPQzbC1cvJbakBKbfy6DEXvpkByKCmbtWE2/nf0s05+66GglVxf9Pu7JkIHqFn/tST4 qzGdl6HN3VKbkrmlJTEEzSbbZf4SgqO+fMmwQw2GtjqwgnXIQz/WCGRq45HylJ6l/IBA6 pVpKWEqpkwChG6+IlLTAzheI59hBuzBvNo/vrUbq+01l4/aYTCC1rRt2U+O+DXArOsDLk 8hjzWjrkVkYEa/sfF50MYIBqjCCAaYCAQOAFOuh3gZi/ia4xi2A75E5RlsKe+MzMAsGCW CGSAFlAwQCAaBrMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABOjAcBgkqhkiG9w0BCQU xDxcNMjYwNjI1MTQyMTQyWjAvBgkqhkiG9w0BCQQxIgQgheYSNBJsYLP9VKy3HDAdyf9u aAMefrI99pBhF/ZFB4MwDQYJKoZIhvcNAQEBBQAEggEAgE22/NcDFp8vHazdAeZe90Wg8 m+IRZB+OVSRDBHA20SATIUDrg5efuAMgQCiA9g//yWDyYTPkIDHxgYQd27vgvhKCDzNG9 F1CxK3PqnAtj+WuRxZB7OP6/heLmEVw8STvZZtXq+D9fSMnuFT91U6qAx6+ao6sn5VfZ/ f3v86pRtrzHXRB2RyzDWKt6ad7Ud9DxPaKeUjrSnc6bXnwKYxiS7mS01IclLO/gCYiE3L aBN5qmU5SxDdgW/tmz3S7nu5yeclGLGqkAbenBwF6Mh2/5b5D4ZNrwTCg8DueNxzPf1bd FI8vkVVAEsYWArO6DasnOry5HMDLPHhh4PMaqUDeg== _______________________________________________ GROW mailing list -- [email protected] To unsubscribe send an email to [email protected]
