
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS204676.roa
File: AS204676.roa (raw, json)
Hash identifier: ifvk9DlQn3y0fXq5O1GJmOPDgmVJgRw+XF7gxzJ+rEM=
Subject key identifier: D5:D2:EC:C9:3A:FA:2D:5D:23:15:83:66:B0:44:B8:20:9A:A3:FE:09
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 4847D47F3AAB307FD2B5C4E06D497F143E9ED4C8
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS204676.roa
Signing time: Fri 05 Jun 2026 07:12:48 +0000
ROA not before: Fri 05 Jun 2026 07:07:48 +0000
ROA not after: Fri 04 Jun 2027 07:12:48 +0000
asID: 204676
IP address blocks: 2a0a:6040:7000::/40 maxlen: 40
2a0a:6040:8000::/40 maxlen: 48
2a0a:6040:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:47:d4:7f:3a:ab:30:7f:d2:b5:c4:e0:6d:49:7f:14:3e:9e:d4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:48 2026 GMT
Not After : Jun 4 07:12:48 2027 GMT
Subject: CN=D5D2ECC93AFA2D5D23158366B044B8209AA3FE09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:23:0f:4d:43:d5:44:b1:28:1b:4e:ca:88:
5f:1d:92:b4:6d:32:a1:ca:7d:9f:7d:99:62:44:4d:
cd:55:77:a3:36:da:74:e9:72:e3:8c:48:a5:58:eb:
87:35:fd:83:ab:a2:57:12:bc:93:9c:6b:1c:72:a5:
21:fb:8c:4c:9b:5d:43:b9:68:b9:e2:29:8b:74:7a:
93:ef:cb:e5:58:45:e1:3c:fa:a9:e5:d5:cc:33:ac:
7d:26:b4:0b:00:08:e7:7f:f6:5d:3c:7b:10:f4:ec:
96:d7:4b:dc:2f:62:b6:94:37:79:85:ed:81:ea:9c:
1a:eb:36:6f:2e:0a:6c:eb:60:d1:c1:ce:10:ff:67:
e6:a4:f6:24:17:8a:8e:fc:d2:3e:8d:2f:19:08:c8:
be:aa:c4:df:e5:81:94:00:88:77:d3:cf:43:be:1a:
05:89:be:13:32:b7:a8:21:23:86:3a:22:b3:b5:57:
d9:e9:a3:d5:72:d5:84:90:fa:13:ea:75:d7:11:60:
b7:fc:a8:f6:d0:37:ac:e3:31:cf:fe:f1:4a:86:5c:
43:79:dd:ea:c6:b8:f3:9c:1e:81:06:fd:7e:9b:60:
bb:36:bb:14:b1:d4:8e:37:6b:c0:98:dc:0e:a4:63:
4c:6e:f2:ba:9d:f1:d1:e2:e2:50:15:80:22:32:73:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:EC:C9:3A:FA:2D:5D:23:15:83:66:B0:44:B8:20:9A:A3:FE:09
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS204676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:7000::/40
2a0a:6040:8000::/40
2a0a:6040:9000::/40
Signature Algorithm: sha256WithRSAEncryption
0a:cc:33:71:6d:93:4d:69:e4:06:dc:18:3e:e8:b5:63:cd:be:
fd:7a:56:2d:92:d6:a2:33:6a:85:03:c6:e8:cd:72:1a:8e:be:
f1:76:66:a5:9f:35:ed:87:41:2d:84:db:c1:30:76:45:d1:05:
b6:b4:0f:97:e7:ba:89:aa:70:a5:2d:36:44:40:2e:c6:fe:89:
eb:2b:dc:d0:fa:74:61:22:a6:1b:54:fe:b1:70:ca:81:fe:24:
7f:27:4b:f2:4e:b7:74:da:a3:8b:e1:75:c6:be:9f:e2:b2:33:
f4:f2:6c:77:f4:b4:32:e8:ff:14:bd:1f:91:6b:c2:97:b3:83:
86:27:17:68:60:32:b5:5d:19:c8:9a:80:cc:0a:36:8c:13:fe:
e9:c6:bf:2c:b2:b5:ea:f4:18:f3:73:4d:ad:47:06:62:92:c0:
43:0e:01:85:9d:46:bb:09:6d:06:c4:4c:bd:a5:06:49:29:86:
4a:da:c7:ac:9f:14:d5:86:d4:ea:82:fb:80:10:98:03:e2:a8:
fa:a6:2a:a9:7d:45:4a:a5:bc:0d:66:c9:ee:cd:34:81:55:4e:
09:af:2d:82:fb:d2:a7:7c:74:b9:d2:87:56:c2:cf:f4:0e:98:
f6:eb:96:e2:ac:fa:22:b0:0b:65:c0:49:e9:3e:85:de:91:3f:
f6:7a:dd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:55 2026 by rpki-client