
$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa
File: 326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa (raw, json)
Hash identifier: f/cdjCfjhlySyNuo0kgMIF/CdapB1t3ceS2H+YsmCRc=
Subject key identifier: 41:7C:67:56:8E:C9:E2:4D:C2:2B:00:CB:DF:46:10:81:07:AD:4E:95
Certificate issuer: /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial: 2E52FEE5D54E84B1DC4F993BD0EF4BA0BBA98294
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa
Signing time: Tue 17 Feb 2026 17:44:30 +0000
ROA not before: Tue 17 Feb 2026 17:39:30 +0000
ROA not after: Tue 16 Feb 2027 17:44:30 +0000
asID: 201687
IP address blocks: 2a14:7c0:1200::/40 maxlen: 40
Validation: OK
Signature path: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:52:fe:e5:d5:4e:84:b1:dc:4f:99:3b:d0:ef:4b:a0:bb:a9:82:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Validity
Not Before: Feb 17 17:39:30 2026 GMT
Not After : Feb 16 17:44:30 2027 GMT
Subject: CN=417C67568EC9E24DC22B00CBDF46108107AD4E95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:c7:46:a3:d8:0f:70:11:94:fb:f8:04:9a:
93:66:44:c2:70:94:8e:fb:3a:c3:59:67:1c:68:b3:
cd:ec:01:ae:95:68:5c:42:b5:fd:b8:d1:9a:67:db:
df:b2:e3:dc:a8:83:ed:95:61:35:6c:fa:4c:79:ca:
82:a9:e8:ce:7b:ab:bc:93:26:b5:8f:af:fd:b8:a1:
50:35:e3:8f:3b:f4:45:73:86:77:a5:a2:f0:f3:ea:
a3:f7:cc:9e:2f:a5:6b:b5:5a:f8:7e:14:a0:2f:5e:
aa:11:72:7a:5d:70:37:21:e2:e7:52:02:94:e8:53:
7c:fa:4d:e8:99:73:0f:b1:73:22:b0:54:bb:c7:4f:
7c:2f:83:e8:78:7f:4f:a7:2d:07:b8:eb:d6:d1:ba:
bc:ff:c2:b7:a5:54:a6:c4:f0:a6:2f:f6:f7:54:36:
43:d1:c1:7e:e0:9d:0f:81:4a:8d:46:77:38:6c:1f:
0a:61:fc:11:52:0e:6e:fe:d7:6d:4c:68:58:2e:c4:
b4:ef:4a:a4:c1:eb:a9:01:22:fc:23:8a:25:f9:79:
df:d3:ae:0b:93:d1:06:ea:91:81:11:20:f6:c0:9f:
54:92:33:e7:9d:f1:5d:2e:75:a7:ba:c5:f8:2e:e6:
01:0e:35:aa:c5:09:6d:8d:e5:f9:a5:dc:75:55:e3:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7C:67:56:8E:C9:E2:4D:C2:2B:00:CB:DF:46:10:81:07:AD:4E:95
X509v3 Authority Key Identifier:
keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1200::/40
Signature Algorithm: sha256WithRSAEncryption
08:b3:16:cf:69:b5:81:a2:20:b5:cb:3a:eb:d2:58:97:42:fb:
98:86:15:75:bb:f6:1d:01:d7:1d:d2:05:26:2b:7a:e6:d4:02:
1a:0e:44:7b:b5:5c:e2:42:17:c8:d2:e9:17:f6:c1:58:eb:53:
50:63:01:2c:46:7d:74:30:0d:ae:95:aa:3e:d9:99:6d:ab:63:
d2:ee:37:a4:a2:99:17:f7:ae:62:4c:96:ca:9c:99:b2:81:42:
52:e1:2d:d8:9b:e4:9d:30:f0:bc:02:1d:78:49:3a:1d:25:eb:
3b:e9:ac:ee:8b:7c:b3:79:1b:0a:3a:d5:be:d7:d5:76:bf:74:
f6:3c:2e:c5:7d:8b:ed:cb:c5:a7:b3:15:37:1f:00:a8:27:56:
0a:63:c7:56:4e:3d:0a:6e:d9:30:53:a8:c7:96:77:2a:83:1d:
a9:90:f8:ec:31:c4:4b:f8:0c:17:9a:94:db:bf:91:fc:43:21:
34:2a:4f:25:6d:b8:8f:49:d0:bb:ce:3f:8a:18:f5:ab:4e:24:
fa:5d:eb:10:2a:8e:3b:72:0d:da:fa:05:f8:ed:f5:8a:54:c0:
d4:ca:70:a8:a9:96:90:c0:a0:f6:a3:aa:4a:96:48:bc:3b:1d:
50:18:b7:7c:93:67:4b:cf:a2:88:69:11:90:10:e9:63:bf:98:
b7:db:df:2a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIULlL+5dVOhLHcT5k70O9LoLupgpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAz
RUVCMTA4ODAeFw0yNjAyMTcxNzM5MzBaFw0yNzAyMTYxNzQ0MzBaMDMxMTAvBgNV
BAMTKDQxN0M2NzU2OEVDOUUyNERDMjJCMDBDQkRGNDYxMDgxMDdBRDRFOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHS8dGo9gPcBGU+/gEmpNmRMJw
lI77OsNZZxxos83sAa6VaFxCtf240Zpn29+y49yog+2VYTVs+kx5yoKp6M57q7yT
JrWPr/24oVA144879EVzhnelovDz6qP3zJ4vpWu1Wvh+FKAvXqoRcnpdcDch4udS
ApToU3z6TeiZcw+xcyKwVLvHT3wvg+h4f0+nLQe469bRurz/wrelVKbE8KYv9vdU
NkPRwX7gnQ+BSo1GdzhsHwph/BFSDm7+121MaFguxLTvSqTB66kBIvwjiiX5ed/T
rguT0QbqkYERIPbAn1SSM+ed8V0udae6xfgu5gEONarFCW2N5fml3HVV495dAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUQXxnVo7J4k3CKwDL30YQgQetTpUwHwYDVR0j
BBgwFoAUyr83Pq3Nk3blJM4xOrhowD7rEIgwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vcGZjbG91
ZC10Z2V3aWVzZS8wL0NBQkYzNzNFQURDRDkzNzZFNTI0Q0UzMTNBQjg2OEMwM0VF
QjEwODguY3JsMHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5bmM6Ly9y
ZXBvLnJwa2kuc3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xL0NBQkYzNzNFQURDRDkz
NzZFNTI0Q0UzMTNBQjg2OEMwM0VFQjEwODguY2VyMIGQBggrBgEFBQcBCwSBgzCB
gDB+BggrBgEFBQcwC4ZycnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9wZmNs
b3VkLXRnZXdpZXNlLzAvMzI2MTMxMzQzYTM3NjMzMDNhMzEzMjMwMzAzYTNhMmYz
NDMwMmQzNDMwMjAzZDNlMjAzMjMwMzEzNjM4Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqFAfAEjAN
BgkqhkiG9w0BAQsFAAOCAQEACLMWz2m1gaIgtcs669JYl0L7mIYVdbv2HQHXHdIF
Jit65tQCGg5Ee7Vc4kIXyNLpF/bBWOtTUGMBLEZ9dDANrpWqPtmZbatj0u43pKKZ
F/euYkyWypyZsoFCUuEt2JvknTDwvAIdeEk6HSXrO+ms7ot8s3kbCjrVvtfVdr90
9jwuxX2L7cvFp7MVNx8AqCdWCmPHVk49Cm7ZMFOox5Z3KoMdqZD47DHES/gMF5qU
27+R/EMhNCpPJW24j0nQu84/ihj1q04k+l3rECqOO3IN2voF+O31ilTA1MpwqKmW
kMCg9qOqSpZIvDsdUBi3fJNnS8+iiGkRkBDpY7+Yt9vfKg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:31:25 2026 by rpki-client