
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206218.roa
File: AS206218.roa (raw, json)
Hash identifier: xEw3LwiTYwKpSgLW0VYZQif+D86GHqqVpV4zfrW0ygk=
Subject key identifier: E8:38:14:A6:86:42:83:6B:3E:B9:C1:BE:65:7F:D0:5F:89:24:57:B6
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 61C13C12AE2B31157C510FD44EE6C9D2C84E2916
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206218.roa
Signing time: Fri 05 Jun 2026 07:12:12 +0000
ROA not before: Fri 05 Jun 2026 07:07:12 +0000
ROA not after: Fri 04 Jun 2027 07:12:12 +0000
asID: 206218
IP address blocks: 2a0a:6040:a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c1:3c:12:ae:2b:31:15:7c:51:0f:d4:4e:e6:c9:d2:c8:4e:29:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:12 2026 GMT
Not After : Jun 4 07:12:12 2027 GMT
Subject: CN=E83814A68642836B3EB9C1BE657FD05F892457B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:b6:7a:fe:c7:43:00:11:20:d6:31:3f:62:
3c:cd:48:17:0c:ff:0e:27:d3:d5:4d:49:c2:76:f6:
f4:be:84:59:9e:e9:ad:e1:59:c0:79:5d:99:8d:12:
83:0d:06:2f:80:a9:0e:2a:55:ae:bb:fe:be:09:fd:
f3:f5:5e:91:6e:91:d5:12:e9:6b:db:8c:d6:05:09:
7d:80:db:73:8c:6d:3c:b7:fd:8d:6a:22:4c:d0:f8:
29:52:1e:6d:da:2f:03:0a:54:70:62:55:2f:38:1a:
8f:39:8b:43:b7:09:5e:f7:2a:e0:ba:6d:38:22:fa:
46:69:b4:eb:65:18:d1:dd:5f:0c:fe:0e:f1:34:de:
87:9d:36:f3:82:04:a0:3d:67:bf:d1:81:9e:7d:81:
31:60:d2:21:ac:10:42:b1:11:11:26:03:81:b1:d2:
e6:c4:db:49:70:6c:5b:04:4d:34:4e:31:f5:5e:4e:
dc:f9:62:bd:e4:23:85:ad:cd:99:04:c5:fa:91:36:
cf:cc:e2:67:f2:c4:ae:d6:77:0a:3e:e0:c2:0b:2e:
41:b6:e5:24:cc:f1:7e:99:ac:cc:04:ae:d4:fe:0e:
c3:20:7e:02:70:3a:f4:af:af:43:3d:95:47:00:85:
4a:ba:93:c5:f0:9e:cc:df:f3:e0:68:20:b1:9d:91:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:38:14:A6:86:42:83:6B:3E:B9:C1:BE:65:7F:D0:5F:89:24:57:B6
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206218.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a00::/40
Signature Algorithm: sha256WithRSAEncryption
7b:43:ce:a5:0d:87:86:1a:33:55:3c:ff:22:8f:99:a4:16:e5:
f1:b0:a8:6d:58:f4:14:9c:d9:e1:4f:e7:e1:f1:4f:f3:bb:f3:
c8:58:2b:a9:69:90:49:62:75:e5:42:a9:ee:a8:ac:e3:cb:a2:
52:4b:bb:2b:8e:9a:52:c1:93:5d:ea:e5:23:3a:73:5d:1d:fe:
27:b3:4e:a7:f9:e3:f4:fe:10:58:93:cb:f7:1b:f6:07:b0:1b:
94:62:0e:33:61:af:79:79:80:c6:5e:da:b1:b2:f3:e8:4d:b8:
8c:b3:2b:90:ad:20:ef:25:85:c6:f7:21:bc:24:67:65:20:2d:
f1:32:96:90:1b:91:8c:f7:00:f1:06:31:76:78:dc:db:db:5f:
0b:be:9c:dd:cd:56:1f:f2:f6:3b:e3:ab:5b:f6:4a:7b:b5:35:
0a:78:81:b4:84:a1:41:3f:bc:10:aa:29:a0:d8:bd:4a:93:1f:
a4:ed:8b:75:72:59:94:db:58:86:9f:40:29:c7:3f:ed:8e:b9:
f0:0a:b8:6f:b1:5d:49:2e:d1:9c:64:0f:5c:ff:8c:43:b0:81:
ba:46:e9:52:bf:67:bb:04:39:43:4a:b6:b0:96:aa:b8:e1:04:
ac:60:de:b3:8d:c5:20:e4:d5:f7:6b:b5:30:0a:1c:dd:42:a2:
71:b7:6e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:43:22 2026 by rpki-client