
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS207941.roa
File: AS207941.roa (raw, json)
Hash identifier: bN5TxR0SZKAiM2XtQgm0gq/0rIyLu23s+7KJ5i00ZoM=
Subject key identifier: 2F:63:0C:7C:E6:40:38:F5:FC:25:A9:4C:CA:BF:08:3C:7C:5F:64:AE
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 605F9C2EF4A11F77EAB8BA1C4D4329A3C3A78865
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS207941.roa
Signing time: Fri 05 Jun 2026 07:12:19 +0000
ROA not before: Fri 05 Jun 2026 07:07:19 +0000
ROA not after: Fri 04 Jun 2027 07:12:19 +0000
asID: 207941
IP address blocks: 2a05:dfc1:4800::/40 maxlen: 48
2a05:dfc1:4900::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:5f:9c:2e:f4:a1:1f:77:ea:b8:ba:1c:4d:43:29:a3:c3:a7:88:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:19 2026 GMT
Not After : Jun 4 07:12:19 2027 GMT
Subject: CN=2F630C7CE64038F5FC25A94CCABF083C7C5F64AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:86:ac:a0:0c:bc:44:bd:60:42:f6:1b:62:
ec:e0:20:36:e4:42:98:54:b4:bc:85:27:c8:6a:97:
74:4e:48:89:8a:61:07:d6:ed:bb:cd:a5:3a:31:bc:
66:dd:58:bb:3e:4d:85:fa:69:7b:56:81:89:3e:25:
62:10:35:82:6a:83:44:b1:0c:ea:2b:ed:01:a9:b9:
e9:98:78:4f:b5:94:7d:a4:e2:05:9a:48:6d:e1:73:
1c:dd:c5:ca:cc:05:c9:93:88:64:32:7e:f8:8e:f9:
94:22:a1:01:6d:bb:79:67:2e:06:14:46:c2:fc:4b:
d5:f3:ec:3d:24:13:93:68:e2:fc:8c:7a:40:60:6f:
88:64:56:7a:b2:1e:78:d0:d0:00:72:61:6c:83:55:
42:45:d5:8a:28:34:a3:45:4e:35:d0:8a:d6:5b:5a:
af:c9:25:f0:39:af:82:1c:ba:5b:c0:3e:e9:d2:fd:
de:9a:32:3e:a0:dd:ed:22:28:05:0a:af:36:70:cc:
b8:bb:44:67:4f:86:2e:a7:a9:2b:fb:dd:bc:b2:cb:
14:ca:8a:a0:7f:02:c9:a9:bb:bf:a8:5f:d1:60:f1:
6d:a8:f4:ee:68:96:52:d3:15:fd:69:00:9c:84:90:
3a:75:5c:3d:8d:f2:f1:a9:17:55:4a:4b:de:eb:dd:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:63:0C:7C:E6:40:38:F5:FC:25:A9:4C:CA:BF:08:3C:7C:5F:64:AE
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS207941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:4800::/39
Signature Algorithm: sha256WithRSAEncryption
42:87:1d:b7:00:89:fb:bf:37:ad:ea:1b:ce:34:39:78:3e:86:
13:5a:2a:a4:9d:7f:01:83:25:57:b6:94:f0:41:50:e6:6c:82:
16:86:d4:48:c1:37:47:77:56:c1:08:0a:d8:b5:95:01:4d:ba:
55:95:5c:1b:bc:49:62:e6:42:f3:da:21:8f:87:ea:fc:1f:17:
62:53:9e:7e:4f:84:a7:0c:82:88:fb:c2:54:47:6e:8b:5c:3f:
a6:95:44:51:d0:b5:a8:04:ff:f2:66:0b:91:dd:fd:bb:23:b8:
8e:5a:bf:a4:47:0c:b3:cf:92:b0:7e:89:85:ff:85:91:e9:06:
89:15:4f:9c:8d:48:56:1f:02:a5:da:dd:1f:95:e3:25:1a:1d:
77:1a:c0:2a:54:8b:08:a9:21:20:c0:2f:65:91:a1:3a:2b:d0:
c0:21:fc:f6:4f:1a:4c:82:47:dd:07:0d:9a:0c:33:13:83:b3:
05:cb:36:ac:c3:37:9d:ad:ad:4a:85:f8:51:5b:d9:82:8e:0b:
97:cb:8d:82:7d:60:ef:59:e7:84:4d:78:e0:ea:9b:7a:1f:1a:
3f:3f:38:a0:60:19:65:bb:fa:24:0e:f5:ee:cb:dd:0c:c9:e0:
0f:8d:d7:60:09:52:76:89:05:57:35:a3:0a:33:b7:9d:18:c5:
fe:c4:d2:01
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUYF+cLvShH3fquLocTUMpo8OniGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTlaFw0yNzA2MDQwNzEyMTlaMDMxMTAvBgNV
BAMTKDJGNjMwQzdDRTY0MDM4RjVGQzI1QTk0Q0NBQkYwODNDN0M1RjY0QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKYasoAy8RL1gQvYbYuzgIDbk
QphUtLyFJ8hql3ROSImKYQfW7bvNpToxvGbdWLs+TYX6aXtWgYk+JWIQNYJqg0Sx
DOor7QGpuemYeE+1lH2k4gWaSG3hcxzdxcrMBcmTiGQyfviO+ZQioQFtu3lnLgYU
RsL8S9Xz7D0kE5No4vyMekBgb4hkVnqyHnjQ0AByYWyDVUJF1YooNKNFTjXQitZb
Wq/JJfA5r4IculvAPunS/d6aMj6g3e0iKAUKrzZwzLi7RGdPhi6nqSv73byyyxTK
iqB/Asmpu7+oX9Fg8W2o9O5ollLTFf1pAJyEkDp1XD2N8vGpF1VKS97r3ezRAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUL2MMfOZAOPX8JalMyr8IPHxfZK4wHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjA3OTQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYBKgXfwUgwDQYJKoZIhvcNAQELBQADggEBAEKH
HbcAifu/N63qG840OXg+hhNaKqSdfwGDJVe2lPBBUOZsghaG1EjBN0d3VsEICti1
lQFNulWVXBu8SWLmQvPaIY+H6vwfF2JTnn5PhKcMgoj7wlRHbotcP6aVRFHQtagE
//JmC5Hd/bsjuI5av6RHDLPPkrB+iYX/hZHpBokVT5yNSFYfAqXa3R+V4yUaHXca
wCpUiwipISDAL2WRoTor0MAh/PZPGkyCR90HDZoMMxODswXLNqzDN52trUqF+FFb
2YKOC5fLjYJ9YO9Z54RNeODqm3ofGj8/OKBgGWW7+iQO9e7L3QzJ4A+N12AJUnaJ
BVc1owozt50Yxf7E0gE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:17 2026 by rpki-client