[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-relays] Re: AROI Using proof:dns-rsa Not Getting Verified



We saw this same issue at 1AEO — AROI updates were very slow to verify (sometimes up to a month), and finding the exact problem took even longer. There was no simple, transparent way to see why a relay was not verifying. Running a Tor relay can be complex, especially for new operators, so we wanted to make this easier.

To help, we built, open-sourced, and are now hosting a tool that checks AROI verification every hour: https://aroivalidator.1aeo.com

The tool tests both TXT and URI methods, compares them with each relay’s descriptor, and shows when values are missing or mismatched. Operators can use it in two ways:
• Batch mode for quick command-line checks
• Self-hosted GUI for easier viewing

Everything is fully open source for transparency and control:
• aroivalidator — the verification tool: https://github.com/1aeo/aroivalidator

• aroivalidator-deploy — how to host your own service: https://github.com/1aeo/aroivalidator-deploy

These tools give fast feedback, are easy to reproduce, and can be run locally. We hope they help other operators facing similar AROI verification challenges.


On Friday, November 21st, 2025 at 2:45 AM, zwiebelrouter via tor-relays <tor-relays@xxxxxxxxxxxxxxxxxxxx> wrote:

> 

> 

> On Thursday, November 20th, 2025 at 13:23, algo7 via tor-relays tor-relays@xxxxxxxxxxxxxxxxxxxx wrote:
> 

> > Hi there,
> > 

> > I am trying to setup AROI for my exit relays following the guide here: https://nusenu.github.io/OrNetStats/aroi-setup
> > 

> > I am using the DNS TXT records option. I already waited for more than 1 day; however, it seems like it's not getting verified for some reason.
> > 

> > Here is the link on OrNetStats to my relay family.
> > 

> > https://nusenu.github.io/OrNetStats/w/family/fb5e3cc1855a01ef74fc0843f63e3daac5d96672e8f6462f126b744c90e8536b.html
> > 

> > Relay Fingerprints:
> > 

> > 2B51193205D091CC80B904D65721FF8DCBE51C96
> > 

> > 61137FAC08E0AE62165D18FE8855CCCA26B6D631
> > 

> > Any help will be greatly appreciated.
> > 

> > Thanks.
> 

> 

> 

> You might have to wait for another couple of days, as the page is only refreshed about once per month.
> The last time it was refreshed was 2025-10-24 14:00 UTC (https://nusenu.github.io/OrNetStats/).
> 

> Cheers.
> _______________________________________________
> tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
> To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx

Attachment: publickey - tor@1aeo.com - 0x9288289B.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx