Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210352.roa
File: AS210352.roa (raw, json)
Hash identifier: RDxWORx2wRO2MSiSh32gYeRq7yX0zqn0RKd6Ao8zJ0g=
Subject key identifier: 32:19:FB:00:FF:52:46:6F:46:9D:CF:82:2B:AA:A0:18:79:22:30:D0
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1C723DCD116ACE7C28498A90CB09CCCF5FC9EA66
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210352.roa
Signing time: Thu 19 Mar 2026 04:13:29 +0000
ROA not before: Thu 19 Mar 2026 04:08:29 +0000
ROA not after: Thu 18 Mar 2027 04:13:29 +0000
asID: 210352
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:72:3d:cd:11:6a:ce:7c:28:49:8a:90:cb:09:cc:cf:5f:c9:ea:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 19 04:08:29 2026 GMT
Not After : Mar 18 04:13:29 2027 GMT
Subject: CN=3219FB00FF52466F469DCF822BAAA018792230D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:c6:e0:c8:98:bf:e8:bc:80:b2:31:a0:4a:
49:ae:d1:14:60:37:54:e9:21:d6:3a:82:ed:ec:68:
5e:fe:94:4b:24:9e:fc:4b:d4:03:a3:53:2b:0e:5e:
42:2f:dd:94:ef:96:56:7c:40:50:85:c3:b8:03:21:
cb:46:54:85:1f:e5:da:f0:59:bb:a2:18:a3:fa:fd:
10:df:76:34:ca:9b:9e:cd:4d:78:d9:e4:1b:88:6e:
0a:87:33:7b:9f:46:63:00:ac:39:34:e8:c7:7c:dc:
d3:9b:05:61:f8:9e:98:1d:f4:27:53:00:d1:8d:ab:
16:8d:52:af:42:7d:6f:ae:0b:e0:d2:08:a7:93:4c:
51:e6:d6:11:8a:f5:89:09:90:24:79:52:a6:72:af:
56:f4:f1:2c:ce:16:e6:b6:d1:8a:77:e4:c5:db:c4:
91:5c:78:3f:a7:b7:6a:f8:4a:52:bc:a5:ad:c1:50:
d0:cc:bc:01:bb:81:61:47:2f:b9:06:f5:bb:5d:c2:
e3:d0:25:3f:ff:d7:1c:55:c3:3a:da:23:ff:5f:8a:
84:9c:51:f7:6f:e5:4e:f4:45:4a:a8:df:47:6d:a2:
da:85:a3:72:74:54:e0:33:71:26:00:36:e9:06:7d:
29:d7:4e:74:15:29:1d:fa:c5:38:e3:50:64:51:87:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:19:FB:00:FF:52:46:6F:46:9D:CF:82:2B:AA:A0:18:79:22:30:D0
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210352.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
8f:41:b2:f4:99:1d:d1:04:a1:1b:69:43:c0:ec:45:01:78:60:
a5:a9:a5:f4:d6:4d:cc:6a:42:b5:22:b3:88:18:ae:39:d6:b4:
c2:51:a5:08:cb:d1:b6:77:a3:e9:52:79:c4:06:34:2b:87:9b:
bb:48:d3:d4:4c:b4:26:7c:82:b5:5c:8a:d4:01:0e:00:33:16:
31:f7:4d:74:d8:13:82:a7:56:45:90:d8:7f:bd:31:fb:b5:2b:
f0:bc:67:37:77:9e:00:25:ee:65:10:53:fc:ed:17:17:30:e6:
34:06:93:81:dc:fe:46:67:84:d7:cd:42:d4:63:72:7d:47:d4:
36:9a:79:6c:22:57:87:10:78:77:09:67:26:dc:b6:32:26:5c:
be:dc:b2:e3:74:63:8a:f3:c7:0d:4d:bf:84:13:ac:f1:4f:4b:
8a:93:23:17:8a:b7:26:4d:27:00:be:79:81:6f:16:3e:d9:7e:
7a:b4:dc:91:59:d6:0a:e3:d3:65:c3:9c:1f:4d:ba:61:4f:2b:
41:d1:0b:54:87:f7:61:cd:86:30:ca:34:a6:f5:69:79:b9:53:
88:a5:fc:77:ed:35:5a:b2:3d:aa:0a:a4:61:84:36:da:9c:64:
71:80:4f:99:9f:d0:0a:5c:f2:eb:dc:ff:80:75:ef:88:aa:35:
90:7c:db:be
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUHHI9zRFqznwoSYqQywnMz1/J6mYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjAzMTkwNDA4MjlaFw0yNzAzMTgwNDEzMjlaMDMxMTAvBgNV
BAMTKDMyMTlGQjAwRkY1MjQ2NkY0NjlEQ0Y4MjJCQUFBMDE4NzkyMjMwRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChP8bgyJi/6LyAsjGgSkmu0RRg
N1TpIdY6gu3saF7+lEsknvxL1AOjUysOXkIv3ZTvllZ8QFCFw7gDIctGVIUf5drw
WbuiGKP6/RDfdjTKm57NTXjZ5BuIbgqHM3ufRmMArDk06Md83NObBWH4npgd9CdT
ANGNqxaNUq9CfW+uC+DSCKeTTFHm1hGK9YkJkCR5UqZyr1b08SzOFua20Yp35MXb
xJFceD+nt2r4SlK8pa3BUNDMvAG7gWFHL7kG9btdwuPQJT//1xxVwzraI/9fioSc
Ufdv5U70RUqo30dtotqFo3J0VOAzcSYANukGfSnXTnQVKR36xTjjUGRRh4gHAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUMhn7AP9SRm9Gnc+CK6qgGHkiMNAwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMDM1Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC
AQEAj0Gy9Jkd0QShG2lDwOxFAXhgpaml9NZNzGpCtSKziBiuOda0wlGlCMvRtnej
6VJ5xAY0K4ebu0jT1Ey0JnyCtVyK1AEOADMWMfdNdNgTgqdWRZDYf70x+7Ur8Lxn
N3eeACXuZRBT/O0XFzDmNAaTgdz+RmeE181C1GNyfUfUNpp5bCJXhxB4dwlnJty2
MiZcvtyy43RjivPHDU2/hBOs8U9LipMjF4q3Jk0nAL55gW8WPtl+erTckVnWCuPT
ZcOcH026YU8rQdELVIf3Yc2GMMo0pvVpeblTiKX8d+01WrI9qgqkYYQ22pxkcYBP
mZ/QClzy69z/gHXviKo1kHzbvg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:06:40 2026 by rpki-client