$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/0/326131343a3763323a3a2f33322d3438203d3e203531333936.roa File: 326131343a3763323a3a2f33322d3438203d3e203531333936.roa (raw, json) Hash identifier: Q4TanDo/03WlMBqXG5NZRk00E+9yiRjEKl9vjFnMALs= Subject key identifier: 19:80:45:C3:CA:D9:12:14:DC:4A:7A:66:D6:97:92:51:EB:1A:4E:58 Certificate issuer: /CN=43FB377824B048048B8756B6C65C599B82AEB5B9 Certificate serial: 1E4A56BEFBCC2BDEBFB03417619558D0C0D9622B Authority key identifier: 43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9 Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/0/326131343a3763323a3a2f33322d3438203d3e203531333936.roa Signing time: Tue 29 Apr 2025 16:19:19 +0000 ROA not before: Tue 29 Apr 2025 16:14:19 +0000 ROA not after: Tue 28 Apr 2026 16:19:19 +0000 asID: 51396 IP address blocks: 2a14:7c2::/32 maxlen: 48 Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 00:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:4a:56:be:fb:cc:2b:de:bf:b0:34:17:61:95:58:d0:c0:d9:62:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43FB377824B048048B8756B6C65C599B82AEB5B9 Validity Not Before: Apr 29 16:14:19 2025 GMT Not After : Apr 28 16:19:19 2026 GMT Subject: CN=198045C3CAD91214DC4A7A66D6979251EB1A4E58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:03:67:7e:9f:cf:d2:77:ec:19:81:5d:a6:12: 91:f1:e5:db:98:8a:bb:11:2b:5b:1a:fe:48:2c:48: 2e:2b:2c:f0:18:71:b9:be:09:6a:e9:58:ec:86:50: 9d:2f:a1:15:5a:a4:ef:dd:82:3b:21:bc:54:84:e4: 80:8c:89:22:73:d3:1e:d4:f5:af:06:3a:05:5a:bf: 7e:b6:de:33:55:c3:5b:d8:ad:57:4b:56:1d:98:14: 28:48:9a:43:67:c2:26:ac:1d:5a:1d:29:03:d0:ed: fb:fe:49:0d:a9:86:ec:0e:5d:ca:27:7e:15:41:70: 80:8a:75:17:fd:cf:7b:d9:ef:40:52:ad:45:45:3e: 20:11:8d:d0:5d:10:cf:bd:42:fc:4d:28:86:f1:8d: 5f:64:bf:f5:f2:41:b7:5a:6f:ba:f4:1f:1f:69:7a: 98:f7:04:06:6e:1e:12:38:02:9c:c7:69:3a:91:4d: 1d:df:8d:a0:a1:b9:47:0c:23:d4:0b:f1:d7:3c:09: 06:77:a1:21:ab:d8:a4:dc:13:3c:fe:ac:ef:36:6e: 23:61:b2:4b:9b:f5:ae:eb:39:27:c9:3c:74:1b:09: 53:2a:1a:13:26:9b:0f:83:31:77:3b:ea:e5:71:c2: ad:89:3a:af:02:67:4c:1f:c4:3c:da:13:61:67:49: 39:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:80:45:C3:CA:D9:12:14:DC:4A:7A:66:D6:97:92:51:EB:1A:4E:58 X509v3 Authority Key Identifier: keyid:43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/0/326131343a3763323a3a2f33322d3438203d3e203531333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7c2::/32 Signature Algorithm: sha256WithRSAEncryption 56:56:c1:9a:ec:05:7d:ec:f2:21:69:2b:98:2f:7d:56:e5:79: bf:de:d1:5c:4c:e7:41:50:5e:16:4f:98:c3:f7:ab:cd:f4:ef: 63:01:dc:7c:02:c1:52:23:86:9e:55:8e:ad:20:e3:3c:e0:1a: 42:1d:c5:7a:b0:f0:bd:fe:bf:6c:80:b9:dd:fb:94:4a:99:fd: 3b:12:61:98:e4:e2:0f:98:46:85:63:09:81:22:24:f9:71:bf: 20:0d:05:8e:7c:39:a5:61:84:33:d7:34:74:92:e6:93:e8:16: 33:d7:62:e7:e0:f6:d5:2b:2e:ce:21:83:1e:76:49:fd:69:67: 6f:9e:c0:a2:c5:cb:fe:6f:11:3b:0f:7a:26:2c:31:c0:51:4d: 28:be:9a:d0:84:2a:55:27:cc:5c:c3:08:24:ae:5f:f6:de:c4: 55:6b:95:57:f8:2f:86:62:4a:7b:52:8a:c0:c6:a6:7b:70:66: ff:56:e7:12:8e:87:b2:cc:89:60:c2:89:64:4b:fc:c1:66:0d: 29:28:05:c9:59:0f:a0:04:6c:43:75:70:78:50:9f:f0:73:64: 25:54:ed:4a:eb:80:cf:37:b9:f7:38:ac:dc:ca:26:e5:4d:11: 62:4b:44:49:09:77:dc:e4:b2:c9:1e:22:37:70:d7:5c:a3:1f: 69:8c:94:53 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUHkpWvvvMK96/sDQXYZVY0MDZYiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGQjM3NzgyNEIwNDgwNDhCODc1NkI2QzY1QzU5OUI4 MkFFQjVCOTAeFw0yNTA0MjkxNjE0MTlaFw0yNjA0MjgxNjE5MTlaMDMxMTAvBgNV BAMTKDE5ODA0NUMzQ0FEOTEyMTREQzRBN0E2NkQ2OTc5MjUxRUIxQTRFNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOA2d+n8/Sd+wZgV2mEpHx5duY irsRK1sa/kgsSC4rLPAYcbm+CWrpWOyGUJ0voRVapO/dgjshvFSE5ICMiSJz0x7U 9a8GOgVav3623jNVw1vYrVdLVh2YFChImkNnwiasHVodKQPQ7fv+SQ2phuwOXcon fhVBcICKdRf9z3vZ70BSrUVFPiARjdBdEM+9QvxNKIbxjV9kv/XyQbdab7r0Hx9p epj3BAZuHhI4ApzHaTqRTR3fjaChuUcMI9QL8dc8CQZ3oSGr2KTcEzz+rO82biNh skub9a7rOSfJPHQbCVMqGhMmmw+DMXc76uVxwq2JOq8CZ0wfxDzaE2FnSTkTAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUGYBFw8rZEhTcSnpm1peSUesaTlgwHwYDVR0j BBgwFoAUQ/s3eCSwSASLh1a2xlxZm4KutbkwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8wLzQzRkIzNzc4MjRCMDQ4MDQ4Qjg3NTZCNkM2NUM1OTlCODJBRUI1QjkuY3Js MHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5bmM6Ly9yZXBvLnJwa2ku c3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xLzQzRkIzNzc4MjRCMDQ4MDQ4Qjg3NTZC NkM2NUM1OTlCODJBRUI1QjkuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcw C4ZdcnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzAvMzI2MTMx MzQzYTM3NjMzMjNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzEzMzM5MzYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAqFAfCMA0GCSqGSIb3DQEBCwUAA4IBAQBWVsGa7AV97PIhaSuYL31W 5Xm/3tFcTOdBUF4WT5jD96vN9O9jAdx8AsFSI4aeVY6tIOM84BpCHcV6sPC9/r9s gLnd+5RKmf07EmGY5OIPmEaFYwmBIiT5cb8gDQWOfDmlYYQz1zR0kuaT6BYz12Ln 4PbVKy7OIYMedkn9aWdvnsCixcv+bxE7D3omLDHAUU0ovprQhCpVJ8xcwwgkrl/2 3sRVa5VX+C+GYkp7UorAxqZ7cGb/VucSjoeyzIlgwolkS/zBZg0pKAXJWQ+gBGxD dXB4UJ/wc2QlVO1K64DPN7n3OKzcyiblTRFiS0RJCXfc5LLJHiI3cNdcox9pjJRT -----END CERTIFICATE-----Generated at Thu May 8 10:28:21 2025 by rpki-client