$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313230303a3a2f34302d3430203d3e203538323132.roa File: 326131343a3763303a313230303a3a2f34302d3430203d3e203538323132.roa (raw, json) Hash identifier: B9fjxhBETDxMPuBEk4eX4HMycaaFKdpcguPNMhcUOpI= Subject key identifier: B7:BF:82:48:B5:FE:A0:58:74:3C:6E:C3:86:F4:9D:31:F2:B0:57:6C Certificate issuer: /CN=CABF373EADCD9376E524CE313AB868C03EEB1088 Certificate serial: 38E141AB9D254245755ACE8F8D5A013653B6830C Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88 Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer Subject info access: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313230303a3a2f34302d3430203d3e203538323132.roa Signing time: Fri 29 Aug 2025 18:25:19 +0000 ROA not before: Fri 29 Aug 2025 18:20:19 +0000 ROA not after: Fri 28 Aug 2026 18:25:19 +0000 asID: 58212 IP address blocks: 2a14:7c0:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 23:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e1:41:ab:9d:25:42:45:75:5a:ce:8f:8d:5a:01:36:53:b6:83:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088 Validity Not Before: Aug 29 18:20:19 2025 GMT Not After : Aug 28 18:25:19 2026 GMT Subject: CN=B7BF8248B5FEA058743C6EC386F49D31F2B0576C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:20:96:3d:da:bc:6e:d8:45:00:eb:25:45: 8e:20:6c:bb:83:ac:77:1e:13:3c:4c:bd:73:d3:fd: 98:29:ac:50:67:d4:b5:d1:62:39:73:63:73:30:ed: dd:63:81:61:ec:09:a1:0b:ba:86:6b:37:4a:2c:40: 41:f1:81:ba:90:f0:56:d0:d5:be:8a:7f:94:e4:eb: b2:14:e0:bd:b6:89:34:8b:95:e1:ad:be:19:fc:bd: 1b:4e:50:f5:c7:82:0d:ea:e5:a0:ef:ac:3d:2c:ba: 97:28:24:7d:e8:14:5c:32:60:77:96:ea:08:af:42: ed:ba:17:94:da:4e:b5:e5:31:e4:79:8a:60:de:75: ce:70:e7:88:cd:ed:f5:81:10:cb:1b:a4:f6:d1:1d: 47:43:3d:c4:cf:bf:a9:b3:8b:65:41:04:cc:8e:55: ec:9d:57:ae:c6:ec:0f:ed:38:dd:c4:95:72:2a:87: cf:bf:66:f4:f4:63:07:7d:e4:97:46:04:54:0d:48: 88:5a:ca:a6:e4:8d:96:f9:da:06:de:d4:5e:86:be: 4d:c1:28:6e:46:e0:c3:0e:64:46:1e:67:15:7f:53: 67:e1:2d:24:4a:79:45:4b:76:08:05:30:75:ab:ca: e9:70:e5:99:65:c8:0f:a1:27:f1:48:2a:e5:d7:35: e5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BF:82:48:B5:FE:A0:58:74:3C:6E:C3:86:F4:9D:31:F2:B0:57:6C X509v3 Authority Key Identifier: keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313230303a3a2f34302d3430203d3e203538323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7c0:1200::/40 Signature Algorithm: sha256WithRSAEncryption d5:94:aa:ad:8a:2a:f4:94:fe:ac:f5:f9:63:3a:50:00:5b:03: af:ab:ab:fe:6c:52:d8:61:57:e6:f6:86:c7:f9:0c:18:8f:97: ba:04:b6:51:31:85:4d:14:46:48:1f:34:22:ca:a7:ac:e4:e2: 6f:83:db:88:bc:0f:de:c3:73:1f:50:36:3a:e6:ed:0d:c3:04: 01:43:22:b7:4e:06:6d:5d:58:b8:60:75:56:28:3e:5f:09:31: 7b:17:b5:3b:ac:b6:d0:31:0a:89:f4:f0:95:56:bd:d3:48:ac: 06:12:1e:1c:ea:12:45:c4:67:b7:bc:7f:94:e7:c8:a6:29:2f: 34:15:cb:00:4e:10:cd:68:11:b4:7d:19:8a:14:27:d9:e5:05: cf:2d:85:ac:1b:41:a7:ec:45:40:0e:a7:9e:86:ea:44:0d:ec: e4:9b:1d:d0:7e:8f:59:8f:e0:ee:38:38:3b:a0:bd:a3:58:8d: 5d:59:f9:6f:ca:36:01:29:4c:55:54:d6:8a:f2:7a:82:7a:25: 17:da:e9:ec:92:d5:eb:d6:6d:21:83:fe:ec:1c:37:0f:40:5e: ec:34:98:17:6a:16:eb:44:0f:b3:b7:e9:42:df:30:ba:72:1f: 62:6b:31:d1:84:b2:1b:b1:ce:4b:33:88:a0:da:25:1a:f0:96: e5:ad:73:64 -----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgIUOOFBq50lQkV1Ws6PjVoBNlO2gwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAz RUVCMTA4ODAeFw0yNTA4MjkxODIwMTlaFw0yNjA4MjgxODI1MTlaMDMxMTAvBgNV BAMTKEI3QkY4MjQ4QjVGRUEwNTg3NDNDNkVDMzg2RjQ5RDMxRjJCMDU3NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZiCWPdq8bthFAOslRY4gbLuD rHceEzxMvXPT/ZgprFBn1LXRYjlzY3Mw7d1jgWHsCaELuoZrN0osQEHxgbqQ8FbQ 1b6Kf5Tk67IU4L22iTSLleGtvhn8vRtOUPXHgg3q5aDvrD0supcoJH3oFFwyYHeW 6givQu26F5TaTrXlMeR5imDedc5w54jN7fWBEMsbpPbRHUdDPcTPv6mzi2VBBMyO VeydV67G7A/tON3ElXIqh8+/ZvT0Ywd95JdGBFQNSIhayqbkjZb52gbe1F6Gvk3B KG5G4MMOZEYeZxV/U2fhLSRKeUVLdggFMHWryulw5ZllyA+hJ/FIKuXXNeWpAgMB AAGjggIFMIICATAdBgNVHQ4EFgQUt7+CSLX+oFh0PG7DhvSdMfKwV2wwHwYDVR0j BBgwFoAUyr83Pq3Nk3blJM4xOrhowD7rEIgwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud HwRmMGQwYqBgoF6GXHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vcGZjbG91 ZC10Z2V3aWVzZS8wL0NBQkYzNzNFQURDRDkzNzZFNTI0Q0UzMTNBQjg2OEMwM0VF QjEwODguY3JsMHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5bmM6Ly9y ZXBvLnJwa2kuc3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xL0NBQkYzNzNFQURDRDkz NzZFNTI0Q0UzMTNBQjg2OEMwM0VFQjEwODguY2VyMIGNBggrBgEFBQcBCwSBgDB+ MHwGCCsGAQUFBzALhnByc3luYzovL3JlcG8ucnBraS5zcGFjZS9yZXBvL3BmY2xv dWQtdGdld2llc2UvMC8zMjYxMzEzNDNhMzc2MzMwM2EzMTMyMzAzMDNhM2EyZjM0 MzAyZDM0MzAyMDNkM2UyMDM1MzgzMjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqFAfAEjANBgkq hkiG9w0BAQsFAAOCAQEA1ZSqrYoq9JT+rPX5YzpQAFsDr6ur/mxS2GFX5vaGx/kM GI+XugS2UTGFTRRGSB80IsqnrOTib4PbiLwP3sNzH1A2OubtDcMEAUMit04GbV1Y uGB1Vig+Xwkxexe1O6y20DEKifTwlVa900isBhIeHOoSRcRnt7x/lOfIpikvNBXL AE4QzWgRtH0ZihQn2eUFzy2FrBtBp+xFQA6nnobqRA3s5Jsd0H6PWY/g7jg4O6C9 o1iNXVn5b8o2ASlMVVTWivJ6gnolF9rp7JLV69ZtIYP+7Bw3D0Be7DSYF2oW60QP s7fpQt8wunIfYmsx0YSyG7HOSzOIoNolGvCW5a1zZA== -----END CERTIFICATE-----Generated at Sun Sep 7 12:33:40 2025 by rpki-client