
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197817.roa
File: AS197817.roa (raw, json)
Hash identifier: w7eiww8Y4ejIrr9tPCu9di6v/LS2vfWoFxOlu7p1ipw=
Subject key identifier: 2C:95:3F:B2:5B:8F:B0:BE:13:40:34:1D:86:12:1A:F4:66:72:E4:61
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 5413E8E82FD2938684958F96CFAFE82DE888B59E
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197817.roa
Signing time: Fri 05 Jun 2026 07:12:24 +0000
ROA not before: Fri 05 Jun 2026 07:07:24 +0000
ROA not after: Fri 04 Jun 2027 07:12:24 +0000
asID: 197817
IP address blocks: 2a05:dfc1:6900::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:13:e8:e8:2f:d2:93:86:84:95:8f:96:cf:af:e8:2d:e8:88:b5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:24 2026 GMT
Not After : Jun 4 07:12:24 2027 GMT
Subject: CN=2C953FB25B8FB0BE1340341D86121AF46672E461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:b6:9a:db:9f:1b:9a:ac:56:cd:4a:a6:49:
e9:dd:8d:68:e6:78:e9:17:9d:bb:97:df:59:01:84:
13:68:49:1f:aa:d5:16:67:2b:09:b3:d0:7d:9a:41:
a6:83:e8:55:a4:e8:85:c3:95:68:6b:f4:64:70:1b:
60:25:92:d4:ca:4d:a1:26:3a:89:4c:07:56:de:dd:
04:b1:0d:df:a4:97:05:b5:39:0e:15:f3:03:cb:37:
91:b7:64:eb:5b:eb:3e:0f:54:6c:83:3a:3c:3e:b8:
9a:89:b5:f2:e1:ce:ec:06:a4:e8:35:a1:9d:0a:fa:
7c:d0:36:38:0d:26:da:71:d3:3c:e6:4e:82:27:f6:
59:36:c9:c7:12:55:f5:6d:e7:5c:02:67:71:04:0f:
f9:df:4e:85:b6:7f:af:d9:6e:ff:0d:8c:bc:63:0a:
b1:10:b9:01:47:25:77:3d:c1:fe:45:68:f0:03:66:
e3:f1:95:0a:5d:6b:df:5d:32:f7:83:fb:71:fa:fa:
05:ba:63:a1:60:24:bf:93:14:1c:ad:e4:df:43:bc:
ad:de:46:f2:bc:86:71:b8:0c:8e:0f:ab:58:63:ff:
9a:10:9c:58:dd:86:f9:13:d7:39:31:55:bf:95:83:
af:f8:6f:76:a7:73:0a:b2:db:93:31:fd:cb:2a:ba:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:95:3F:B2:5B:8F:B0:BE:13:40:34:1D:86:12:1A:F4:66:72:E4:61
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:6900::/40
Signature Algorithm: sha256WithRSAEncryption
35:09:7e:1f:09:91:1c:00:74:2a:d6:e5:14:60:de:84:00:3f:
f1:21:10:9a:45:e5:68:da:8f:2c:c7:78:0f:31:03:44:7d:99:
92:37:13:da:cb:e9:a9:c1:06:03:73:14:b1:56:91:6f:8d:bc:
fe:57:82:c3:c7:d3:cf:a4:77:37:b2:ea:e9:24:ad:ff:ab:48:
3d:fc:73:36:f6:1a:a6:40:b3:36:51:3c:23:47:9f:a7:d4:0f:
05:3e:31:52:61:44:5f:19:6e:a1:aa:e1:b8:ab:5d:e8:fd:99:
e3:d7:19:ca:1c:dd:b6:b0:10:e6:67:11:f8:9e:79:d8:a6:19:
1d:6d:f8:08:42:45:03:2c:77:ea:5a:f7:a2:02:74:3c:4b:af:
a0:fd:e0:3e:42:b7:fe:81:72:dd:37:30:1f:dd:99:37:43:f3:
a4:b2:d0:1f:a5:4a:59:c7:24:28:64:32:9d:d9:26:62:de:42:
dc:4b:71:7a:fa:53:92:94:86:ec:84:03:fc:2b:fd:4c:34:81:
4f:00:cd:ae:e1:37:60:04:54:57:c3:e4:6c:41:99:c5:c8:33:
4f:3b:d3:9b:8b:8c:8b:fe:eb:65:03:7f:98:0d:94:7b:08:75:
48:fd:48:b5:92:dc:d6:b9:66:1e:7c:d6:f0:91:b0:d2:52:34:
52:b1:ab:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:25 2026 by rpki-client