Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: 18t3KZH5ZMyotFfFkdZ0br16apXYEfyzKTydBOqMLuI=
Subject key identifier: D5:2C:95:B3:FF:DA:B3:28:50:D9:E3:AD:28:77:CA:B4:22:2B:10:32
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 14C72B30BABE429425CC6680745494352D9C3848
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS0.roa
Signing time: Fri 05 Jun 2026 07:12:20 +0000
ROA not before: Fri 05 Jun 2026 07:07:20 +0000
ROA not after: Fri 04 Jun 2027 07:12:20 +0000
asID: 0
IP address blocks: 2a05:dfc1:300::/40 maxlen: 40
2a05:dfc1:800::/40 maxlen: 48
2a05:dfc1:2500::/40 maxlen: 40
2a05:dfc1:2600::/40 maxlen: 40
2a05:dfc1:2800::/40 maxlen: 40
2a05:dfc1:2900::/40 maxlen: 40
2a05:dfc1:2a00::/40 maxlen: 40
2a05:dfc1:3000::/40 maxlen: 40
2a05:dfc1:3100::/40 maxlen: 40
2a05:dfc1:3900::/40 maxlen: 40
2a05:dfc1:3a00::/40 maxlen: 40
2a05:dfc1:3b00::/40 maxlen: 40
2a05:dfc1:5000::/40 maxlen: 48
2a05:dfc1:6700::/40 maxlen: 40
2a05:dfc1:6c00::/40 maxlen: 40
2a05:dfc1:6d00::/40 maxlen: 40
2a05:dfc1:8600::/40 maxlen: 40
2a05:dfc1:8d00::/40 maxlen: 48
2a0a:6040:8b00::/40 maxlen: 48
2a0a:6040:8c00::/40 maxlen: 40
2a0a:6040:9b00::/40 maxlen: 40
2a0a:6040:ef00::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c7:2b:30:ba:be:42:94:25:cc:66:80:74:54:94:35:2d:9c:38:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:20 2026 GMT
Not After : Jun 4 07:12:20 2027 GMT
Subject: CN=D52C95B3FFDAB32850D9E3AD2877CAB4222B1032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:ad:11:54:ab:b9:5f:a3:f9:b0:f3:92:37:
02:2b:a8:23:ea:d7:74:5d:6c:a0:ed:27:90:35:82:
33:d0:70:d1:06:65:66:16:dd:3f:d7:ab:ea:cf:87:
ff:9a:c2:ad:54:04:6c:a3:c1:8b:f2:ed:ec:91:94:
ba:01:ed:22:39:8f:46:1c:28:0e:8e:52:41:31:ce:
1c:74:97:c5:10:2c:fc:dd:be:6e:c4:1b:0d:7f:55:
74:ee:e4:11:af:d3:6a:1d:c9:23:49:6c:7d:c0:56:
37:66:d2:ea:07:7c:40:05:4f:68:e4:03:70:16:a0:
27:ab:64:e7:e2:bb:38:89:af:1f:62:08:f9:e5:ab:
dd:9e:8f:24:ab:cb:73:76:7e:1d:6b:ab:9d:50:ce:
43:59:4b:4e:33:3e:ab:3c:37:66:b8:d1:6d:e1:5d:
5f:16:41:ab:96:d9:ef:0b:c7:ae:4e:23:8b:00:e4:
ee:a6:d5:a1:87:30:d2:d9:72:e5:bc:98:29:84:68:
46:aa:95:e1:93:b4:fb:c1:11:73:c9:c1:69:c5:34:
17:3c:69:2c:cd:87:ff:b5:6c:f6:0a:21:4e:65:b4:
28:96:61:7d:51:1c:8e:c7:a1:e3:0b:f5:e1:8d:42:
4f:87:f9:0f:18:7a:a4:d1:6f:aa:06:d9:06:3e:38:
27:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2C:95:B3:FF:DA:B3:28:50:D9:E3:AD:28:77:CA:B4:22:2B:10:32
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:300::/40
2a05:dfc1:800::/40
2a05:dfc1:2500::-2a05:dfc1:26ff:ffff:ffff:ffff:ffff:ffff
2a05:dfc1:2800::-2a05:dfc1:2aff:ffff:ffff:ffff:ffff:ffff
2a05:dfc1:3000::/39
2a05:dfc1:3900::-2a05:dfc1:3bff:ffff:ffff:ffff:ffff:ffff
2a05:dfc1:5000::/40
2a05:dfc1:6700::/40
2a05:dfc1:6c00::/39
2a05:dfc1:8600::/40
2a05:dfc1:8d00::/40
2a0a:6040:8b00::-2a0a:6040:8cff:ffff:ffff:ffff:ffff:ffff
2a0a:6040:9b00::/40
2a0a:6040:ef00::/40
Signature Algorithm: sha256WithRSAEncryption
0a:9f:ee:f6:69:f9:82:9d:7f:38:ff:0a:ed:f6:32:fe:53:a9:
07:5a:37:e4:e0:0b:36:16:0b:7d:18:eb:ad:89:68:9f:ee:97:
5d:35:0d:ca:85:0e:a8:b2:e8:6f:4c:47:19:39:72:05:59:7c:
6c:46:1b:d8:3c:ab:15:03:d8:af:20:31:30:8c:8b:ea:23:9a:
59:1e:1e:e3:33:9e:50:44:df:48:a5:3f:8b:4f:73:18:30:c3:
e3:6c:fd:c3:0a:a6:14:15:ce:18:a0:aa:2f:f9:c6:ba:d5:54:
44:16:5f:2e:18:ed:9f:bf:50:04:a7:b1:05:1b:e6:36:21:8d:
1a:f6:6d:e3:05:b4:c6:45:e4:9a:df:1e:97:02:04:37:1c:5c:
6a:c8:ee:69:1b:34:81:a5:56:bd:ab:25:d6:85:bc:4c:6c:39:
00:09:2b:02:2a:e8:28:d2:22:4a:3f:b3:69:81:de:0b:d4:a9:
d3:c4:92:c9:83:cd:4a:83:99:f9:f4:ac:66:16:f2:df:de:e4:
49:bd:b1:fc:a0:91:9c:a6:1b:02:7b:76:7a:bb:c2:31:d5:ea:
0f:19:5d:d8:d2:91:21:3a:b6:c3:06:ab:84:83:88:5a:de:94:
b1:52:e9:ce:43:4f:17:d4:46:8d:fd:f9:c3:07:e0:f4:2e:7d:
40:3a:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:26 2026 by rpki-client