
$ rpki-client -vvvf repo.rpki.space/repo/pfcloud-hostarray/1/326131343a3763303a376566663a3a2f34382d3438203d3e20323134393135.roa
File: 326131343a3763303a376566663a3a2f34382d3438203d3e20323134393135.roa (raw, json)
Hash identifier: CzhQrkKByXo+ize+AJ58MIZ+xseP9v2y3gLnGFrQZCw=
Subject key identifier: F1:07:BF:8F:D9:78:31:75:13:81:DF:99:8E:41:FB:C8:D1:39:86:A5
Certificate issuer: /CN=03652B3C78925180B74895BD527DF7C661F7318A
Certificate serial: 107FBA157C8DBA43E8EEDE37BB3F07C654EB4377
Authority key identifier: 03:65:2B:3C:78:92:51:80:B7:48:95:BD:52:7D:F7:C6:61:F7:31:8A
Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/03652B3C78925180B74895BD527DF7C661F7318A.cer
Subject info access: rsync://repo.rpki.space/repo/pfcloud-hostarray/1/326131343a3763303a376566663a3a2f34382d3438203d3e20323134393135.roa
Signing time: Tue 06 Oct 2026 19:50:09 +0000
ROA not before: Tue 06 Oct 2026 19:45:09 +0000
ROA not after: Tue 05 Oct 2027 19:50:09 +0000
asID: 214915
IP address blocks: 2a14:7c0:7eff::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.crl
rsync://repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.mft
rsync://repo.rpki.space/repo/Infiniroute/1/03652B3C78925180B74895BD527DF7C661F7318A.cer
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 12:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:7f:ba:15:7c:8d:ba:43:e8:ee:de:37:bb:3f:07:c6:54:eb:43:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03652B3C78925180B74895BD527DF7C661F7318A
Validity
Not Before: Oct 6 19:45:09 2026 GMT
Not After : Oct 5 19:50:09 2027 GMT
Subject: CN=F107BF8FD97831751381DF998E41FBC8D13986A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:cf:aa:b3:8c:ef:1f:d0:fd:12:15:4f:28:
1f:fc:3a:01:3a:89:b4:07:94:8b:fc:d0:a0:e7:ee:
91:1d:81:09:5f:ac:0b:8e:4e:c1:d1:8d:44:6c:8d:
8b:44:5b:75:f3:33:07:9e:53:25:82:f6:a6:0c:9f:
24:06:86:8c:f3:ef:d0:02:38:27:57:0a:60:91:e0:
53:ec:af:e8:8d:29:31:46:c0:6f:a5:8d:6e:be:52:
f8:0e:db:a6:d0:88:3f:da:3a:fd:cb:15:88:ec:7b:
94:a6:86:2c:fa:e9:db:40:2a:20:0e:44:2a:00:b3:
a8:3b:a1:a1:59:31:9e:7e:98:15:f4:a3:dd:a4:a4:
14:71:6c:e8:df:95:79:1c:a0:31:55:1c:c0:c6:a8:
5c:1f:fd:71:f0:b8:a0:b5:21:ff:a5:11:8e:01:7e:
05:2a:19:38:c6:53:17:55:fc:f7:fe:7e:53:9f:84:
0c:b4:c0:21:6a:e9:54:07:b2:cf:ac:a7:43:40:21:
0f:56:8e:f4:ec:23:e0:8c:56:03:88:f9:0a:3e:cd:
83:8a:d2:d9:f9:b1:2c:f4:46:4b:7d:5f:07:a3:55:
91:b0:c4:d5:51:d1:65:0d:9e:6f:69:b7:e1:5f:55:
f0:94:8b:e0:e6:14:97:2e:d8:db:03:5d:19:a3:6c:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:07:BF:8F:D9:78:31:75:13:81:DF:99:8E:41:FB:C8:D1:39:86:A5
X509v3 Authority Key Identifier:
keyid:03:65:2B:3C:78:92:51:80:B7:48:95:BD:52:7D:F7:C6:61:F7:31:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/03652B3C78925180B74895BD527DF7C661F7318A.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/1/326131343a3763303a376566663a3a2f34382d3438203d3e20323134393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:7eff::/48
Signature Algorithm: sha256WithRSAEncryption
66:b0:01:3a:07:cb:08:c4:af:28:01:2a:8f:b9:e0:0d:b0:91:
49:34:7c:16:d6:7f:fc:ad:3d:67:ed:d8:35:f9:26:73:2d:4e:
58:7b:1e:38:fd:c1:48:58:9b:aa:9c:76:a1:42:14:79:af:77:
53:a7:bc:b3:f3:3b:8d:9e:59:57:eb:75:ca:66:27:5e:87:78:
8c:0c:4b:51:9c:49:40:98:61:97:3c:2e:2f:91:a7:1c:38:1d:
a3:3b:96:56:69:69:ca:63:15:e6:2b:f0:56:a2:83:3a:15:36:
28:0e:35:46:5e:3f:b8:39:9c:49:12:ce:8d:a5:ca:d9:f8:c3:
a6:ab:32:c7:e7:8c:dd:1a:e3:4f:ce:f9:46:ef:fe:0e:b0:a3:
ef:72:42:1f:f6:e2:ed:19:1a:ac:12:0b:11:5e:0b:d3:eb:26:
8d:23:dd:9f:a6:da:e3:46:b0:92:64:f6:66:58:b6:cc:f0:a0:
51:f6:f4:86:ca:a6:d3:b3:1b:29:fb:1b:82:7b:ba:f0:c1:b3:
d5:28:2d:ac:7a:f4:9d:ea:e5:7e:39:0e:61:d9:30:6d:4a:64:
22:26:8c:4d:8c:23:8d:5c:b7:75:2b:8c:52:45:36:34:54:c3:
03:33:e2:f5:9f:11:81:c0:f1:10:5b:fb:e8:33:c1:32:02:c8:
92:cd:a7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:40:56 2026 by rpki-client