
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS207427.roa
File: AS207427.roa (raw, json)
Hash identifier: UzuWPa/HlyiiINQ1WAXu6TcYApFOTNdj0h1tlXu4UxQ=
Subject key identifier: 26:49:9C:5A:67:C0:09:69:69:5F:5D:4F:B6:3E:39:65:28:ED:A8:82
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 6A1F8D45162ACDE08ABFD41E1D8FB960FD8F2E9C
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS207427.roa
Signing time: Fri 05 Jun 2026 07:12:41 +0000
ROA not before: Fri 05 Jun 2026 07:07:41 +0000
ROA not after: Fri 04 Jun 2027 07:12:41 +0000
asID: 207427
IP address blocks: 2a05:dfc1:6400::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:1f:8d:45:16:2a:cd:e0:8a:bf:d4:1e:1d:8f:b9:60:fd:8f:2e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:41 2026 GMT
Not After : Jun 4 07:12:41 2027 GMT
Subject: CN=26499C5A67C00969695F5D4FB63E396528EDA882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6a:22:29:cf:9e:38:f1:58:27:71:52:af:eb:
38:83:8a:d6:bd:09:e4:a7:59:89:2e:aa:00:51:74:
a5:0d:e2:44:fe:78:36:f8:56:54:11:a5:16:9c:d7:
8d:e1:46:91:a7:fa:8d:8f:de:9a:61:d1:04:af:dc:
65:a5:26:4b:e2:45:e9:2b:c2:26:5b:0c:3a:ae:18:
18:b0:0b:0c:65:bb:85:e0:16:2d:ec:bd:bc:5c:38:
fe:96:06:af:e6:ca:a1:c8:82:ae:64:27:52:25:6b:
3e:dc:51:3c:11:80:a6:43:10:37:e6:63:29:3e:73:
57:b0:ca:c5:a9:b1:9a:e1:0a:f8:a0:da:60:b4:49:
ec:1c:e3:75:49:01:f7:37:f2:5a:5e:9f:16:0e:86:
8a:e8:ec:17:a3:d6:25:1e:78:68:a8:5b:7f:a3:02:
d1:4b:3a:d0:3e:fc:de:05:86:7c:0a:0d:8d:0a:db:
3a:43:38:7b:41:c1:dc:9c:f3:a6:37:98:61:fc:dc:
01:66:b3:7b:1a:a7:c1:56:af:6e:62:c2:ef:a1:32:
d1:1a:92:6b:0a:d2:ea:a3:48:40:0d:db:94:1a:f1:
48:68:b0:84:28:3c:dd:3c:b4:4e:c4:27:7b:68:11:
b6:70:98:ce:fc:09:f0:db:c4:74:4e:2d:16:04:4a:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:49:9C:5A:67:C0:09:69:69:5F:5D:4F:B6:3E:39:65:28:ED:A8:82
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS207427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:6400::/40
Signature Algorithm: sha256WithRSAEncryption
9b:94:7d:47:14:ff:37:41:ca:bf:0d:b4:22:20:d6:9d:04:50:
3f:52:f7:28:b8:a4:47:d9:51:74:d3:7f:f0:e5:69:5c:1b:a3:
26:2d:7a:50:ea:1a:8a:04:5c:3d:9d:51:88:c8:6a:fd:5a:1f:
91:70:34:34:f0:81:72:bf:c5:92:32:47:a6:c8:b2:39:00:5a:
f3:6c:83:55:cf:2d:1c:d6:cb:2a:00:99:00:da:72:20:90:0a:
e6:8a:34:94:29:65:34:19:ba:07:46:f9:56:e1:08:71:67:07:
cb:de:2f:72:16:cc:dc:08:60:4c:69:1e:7f:4e:5f:74:c9:12:
39:bb:07:8f:03:57:d1:5a:2f:8d:0a:70:16:e6:d5:99:19:bf:
c6:c2:fb:d6:f0:34:31:c1:3a:da:34:0c:50:ee:c4:62:cc:76:
9c:12:b8:7c:fd:a6:ae:e5:2d:8b:41:d6:54:1f:8c:b3:34:74:
69:75:02:b3:06:01:c0:4b:ed:d7:e4:5e:0c:05:68:83:1e:a9:
87:08:69:07:d4:f1:54:1f:4f:a2:c4:a9:7d:e2:1c:77:fe:29:
b5:e1:73:86:8a:c4:34:27:ac:d9:31:37:fe:73:65:5d:32:08:
00:68:48:80:56:cd:da:08:e0:ab:92:bc:f5:ee:11:4f:7a:2b:
bc:4f:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:07 2026 by rpki-client