
$ rpki-client -vvvf repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa
File: 326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa (raw, json)
Hash identifier: 52am6l6+tQG53jbBmoIbh3IUWWpTrXA2Xko5UCGu8Co=
Subject key identifier: A0:B0:02:2F:C5:74:2E:0C:66:85:31:3F:3D:0E:71:4E:2A:99:87:77
Certificate issuer: /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial: 30C4B2B7D30F3129DFE57352FD79386818BC1888
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa
Signing time: Wed 30 Sep 2026 13:55:39 +0000
ROA not before: Wed 30 Sep 2026 13:50:39 +0000
ROA not after: Wed 29 Sep 2027 13:55:39 +0000
asID: 213850
IP address blocks: 2a14:7c0:1300::/40 maxlen: 40
Validation: OK
Signature path: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 02:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c4:b2:b7:d3:0f:31:29:df:e5:73:52:fd:79:38:68:18:bc:18:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Validity
Not Before: Sep 30 13:50:39 2026 GMT
Not After : Sep 29 13:55:39 2027 GMT
Subject: CN=A0B0022FC5742E0C6685313F3D0E714E2A998777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:f4:6d:7d:b9:0a:51:18:97:1a:c0:44:31:
f7:67:9c:a2:ec:09:e6:b1:41:8e:47:41:22:89:6a:
73:43:75:c2:3a:78:12:e6:fa:05:5f:20:5d:56:4c:
c0:ca:89:98:c2:e6:08:cb:a5:0a:40:6d:2b:d7:60:
46:86:fa:d2:fb:17:dd:e0:9d:47:fa:94:f9:c7:85:
97:24:a0:3b:c3:de:c7:5e:f4:0d:a0:e3:94:2e:a1:
d4:6c:23:8d:57:ec:2b:23:54:42:73:9c:77:6e:87:
85:ef:c5:ec:76:19:38:99:ba:f5:fd:c5:9c:98:06:
31:26:f1:24:d6:eb:75:4c:ef:fe:b9:fb:8b:20:c2:
22:fa:52:3b:de:c4:05:e9:aa:e4:66:08:f7:16:6c:
25:7b:80:2c:eb:33:b9:91:77:e1:bf:d8:aa:8d:e1:
35:96:2c:57:9a:56:8c:d3:a5:b9:b3:26:c6:1e:9f:
84:93:be:56:fd:63:fd:a6:f6:55:5c:9f:71:1f:6c:
0b:c5:a3:a7:12:f5:9f:7c:93:a1:ff:46:02:27:45:
2e:e0:32:81:42:23:3e:1f:fe:cc:12:5b:23:50:b8:
f4:9d:84:ee:91:78:44:73:e2:f5:fa:91:bc:93:06:
a6:39:55:5e:b4:71:56:20:86:93:0c:cd:1b:d0:0b:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B0:02:2F:C5:74:2E:0C:66:85:31:3F:3D:0E:71:4E:2A:99:87:77
X509v3 Authority Key Identifier:
keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1300::/40
Signature Algorithm: sha256WithRSAEncryption
83:9c:5b:f1:29:8f:08:a0:af:13:5e:a3:f1:bc:b8:23:00:55:
3d:9e:2b:fe:ee:ba:bd:97:8c:95:6f:bb:9e:a1:52:0d:8a:b8:
74:9b:5b:b4:59:3e:c6:34:e6:4a:2b:3a:5a:34:47:07:dc:a6:
06:6b:5a:e9:68:aa:2c:8b:2e:67:59:33:99:b2:fd:8b:bd:1e:
27:64:2a:73:58:60:16:bd:b3:89:c2:5c:8c:69:89:57:26:44:
79:d2:a4:2c:56:1a:3e:bd:f5:6c:a2:92:36:5a:1e:49:5a:aa:
a1:8c:f2:2f:e4:40:33:11:d7:24:4f:ed:67:cb:31:7d:b1:c6:
c1:33:44:68:94:a6:2e:0b:8d:ec:40:45:55:b9:63:1e:fa:08:
47:f1:5b:3a:97:5a:ef:5c:3c:c5:80:4b:8a:06:0a:44:f5:02:
14:a0:bf:f9:9b:17:a7:d2:bd:fe:f6:e8:dc:65:ff:5d:3d:f2:
c3:74:3d:5c:be:b3:40:23:28:4a:2b:c1:c3:4f:d9:35:ed:8f:
fa:d3:0f:82:b2:73:63:47:a8:67:51:55:dd:b8:a1:b3:3f:52:
6a:64:53:1c:34:c3:2d:20:49:cd:11:97:ec:91:9c:07:f3:7d:
1d:29:fc:2d:5d:f0:d9:05:b9:53:00:f1:41:89:78:71:4a:a8:
cd:e2:0f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:10:45 2026 by rpki-client