
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215598.roa
File: AS215598.roa (raw, json)
Hash identifier: gbOzaemc1lz52Q3+E72hqfNjkNsaWhyoa19bQWMQFZI=
Subject key identifier: 72:22:D7:CB:F9:7B:8E:00:75:F9:26:48:91:BE:CA:64:80:E0:6E:72
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 57CFDB52E48E8DA1F914DC0D80A15DB583EB9594
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215598.roa
Signing time: Fri 05 Jun 2026 07:12:11 +0000
ROA not before: Fri 05 Jun 2026 07:07:11 +0000
ROA not after: Fri 04 Jun 2027 07:12:11 +0000
asID: 215598
IP address blocks: 2a06:9f81:4100::/40 maxlen: 48
2a06:9f81:4200::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:cf:db:52:e4:8e:8d:a1:f9:14:dc:0d:80:a1:5d:b5:83:eb:95:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:11 2026 GMT
Not After : Jun 4 07:12:11 2027 GMT
Subject: CN=7222D7CBF97B8E0075F9264891BECA6480E06E72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:23:6e:f3:3c:e0:1b:0f:37:dc:ff:bb:02:78:
a3:d3:c8:69:4a:74:8c:f2:5e:2f:9e:a3:1a:8a:2b:
c3:6f:d1:fc:3d:cf:ee:21:be:d4:38:89:8b:f9:ab:
7b:6f:0c:b7:cb:12:39:15:82:7e:92:c5:a5:de:21:
d4:18:59:c9:87:71:00:fd:b8:01:79:cd:88:b0:41:
69:8c:9e:31:7e:4b:b5:17:ea:69:09:0c:fa:bb:45:
bb:93:68:a8:75:16:71:9e:6f:81:03:b6:ab:00:1f:
62:41:f8:0b:5d:1e:c1:a5:11:91:91:2f:a3:be:4e:
1a:08:fd:69:d0:1c:35:2b:d9:39:8b:47:fb:b5:1b:
29:c0:26:48:53:40:07:0b:1d:ba:3f:8d:29:dc:05:
c5:0b:60:33:fe:44:58:9f:a8:ee:8c:c4:af:32:6f:
ab:da:25:f7:b6:79:f0:25:8a:b4:72:1e:7e:c1:a3:
68:4c:9e:2b:e4:3d:b0:e7:d7:40:2c:76:c2:52:0b:
16:6a:b4:75:c3:19:9b:31:bf:e6:9a:c4:73:37:05:
a0:be:0d:97:ed:45:b8:a4:eb:0a:68:e4:96:83:02:
1c:ce:fd:6c:d2:e2:63:a5:e5:67:14:7d:77:35:b6:
61:bb:84:01:7c:f5:66:94:6a:7c:ee:54:25:6a:60:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:22:D7:CB:F9:7B:8E:00:75:F9:26:48:91:BE:CA:64:80:E0:6E:72
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215598.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:4100::-2a06:9f81:42ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
07:a2:04:ba:ec:35:da:91:1f:41:5b:9a:37:d2:f7:2d:28:aa:
18:88:c7:87:12:bc:a8:20:00:c4:87:82:f5:a2:a7:2f:2e:ca:
68:7d:cf:63:ea:75:8e:17:94:e0:1b:3a:89:c2:9a:26:4d:93:
8d:e6:43:49:e1:53:c2:c9:72:5e:54:db:a1:6f:30:7a:48:0e:
a4:42:06:b9:e7:ee:97:38:11:13:a4:75:77:6f:08:8d:91:62:
96:f5:16:bc:6d:a1:a6:69:32:06:8c:6b:7a:e8:7c:d7:8f:da:
b3:ab:b1:a7:f8:eb:98:f1:8e:ff:2b:cd:30:47:0a:6e:37:33:
ce:ae:19:21:d9:dd:28:2a:f0:2d:92:d2:19:52:ab:3a:14:f3:
9c:c5:6c:84:07:25:0e:75:34:5c:26:da:e5:03:39:91:76:5a:
73:fa:20:0d:0e:72:2f:19:c9:b4:63:cb:12:a6:15:6e:51:6b:
f2:d0:64:e1:ef:ec:b1:4b:99:d0:a4:a7:10:19:9d:08:f1:27:
9f:d7:94:92:f8:1b:d9:40:ab:3a:e7:b1:00:f1:19:fb:99:34:
6f:a6:73:c0:c4:f9:16:93:0e:18:38:3b:69:77:c9:b7:67:d1:
b2:3b:ab:1f:f2:e0:68:8c:e0:cd:7c:90:c8:55:7f:16:77:b7:
7a:23:24:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:09 2026 by rpki-client