Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210440.roa
File: AS210440.roa (raw, json)
Hash identifier: Qq5+VVoUL/uJbztCBSoVDrFtYQ9qT7+enCS1zDg5uNg=
Subject key identifier: 16:7F:24:F2:EB:11:48:03:36:33:E5:41:09:D8:C1:E9:A3:64:3B:2A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 468852E1B4E11187E3E22691D9E12DED69D8AC41
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210440.roa
Signing time: Thu 19 Mar 2026 04:13:29 +0000
ROA not before: Thu 19 Mar 2026 04:08:29 +0000
ROA not after: Thu 18 Mar 2027 04:13:29 +0000
asID: 210440
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:88:52:e1:b4:e1:11:87:e3:e2:26:91:d9:e1:2d:ed:69:d8:ac:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 19 04:08:29 2026 GMT
Not After : Mar 18 04:13:29 2027 GMT
Subject: CN=167F24F2EB1148033633E54109D8C1E9A3643B2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:dc:4b:88:cf:a5:61:f1:1a:e2:a7:0d:1e:
89:78:9b:cf:84:c8:57:11:a2:f0:62:50:ca:fa:07:
fc:27:8c:31:44:f7:2f:86:96:d4:21:82:d9:e0:99:
53:c3:54:f2:c7:6f:b5:f0:75:17:2a:6d:d5:37:3f:
0a:57:84:83:9d:4f:83:f9:4f:18:49:71:b5:43:05:
cb:f0:1a:d2:c1:bc:dd:f7:bf:0e:05:6f:43:e2:2e:
a9:9b:48:d2:56:92:5f:dd:7f:ff:73:88:b2:e7:81:
cd:a3:54:05:f5:15:29:29:c5:83:a1:59:48:12:d9:
91:0f:0f:01:0c:a8:af:d6:e1:05:9d:e3:6c:3d:11:
e1:85:2c:46:59:b1:0b:e6:ad:14:01:c3:6c:e8:5f:
81:ed:1c:33:5a:da:aa:2d:d2:4e:cf:fb:fd:cb:03:
b0:d0:79:73:d2:bf:b2:e8:1a:c3:17:fa:2a:00:e7:
ec:15:de:80:5c:a9:c3:d0:72:17:d3:60:8c:ec:b4:
e6:26:8e:b8:68:9e:6e:9e:59:28:b0:09:a8:9b:a7:
44:cd:1e:9c:55:d6:c2:3a:a1:d0:d9:a9:75:cf:51:
44:1d:61:cc:67:18:1f:e3:56:29:83:70:e0:8c:72:
b1:87:32:6d:4b:8b:3f:ab:7f:eb:a7:34:51:96:fd:
ab:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7F:24:F2:EB:11:48:03:36:33:E5:41:09:D8:C1:E9:A3:64:3B:2A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210440.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
5f:72:ff:f4:6a:c2:28:d9:a1:31:2d:2d:0e:46:30:ca:f2:3d:
8f:86:1b:61:9c:b0:67:f4:47:49:bd:dd:8c:5c:09:e5:5a:6b:
5a:79:5c:49:3e:64:b2:60:4d:f5:1e:35:09:39:9a:3a:2f:e5:
ae:8c:6b:58:22:79:e6:cd:09:b3:b0:b2:9b:9e:1a:62:23:03:
e8:a6:b7:2c:27:35:e8:b2:29:5a:93:33:ec:4a:b8:6a:c4:a7:
eb:5c:74:0e:8e:c2:3f:d5:f9:4a:e7:2f:53:f0:c1:d9:54:66:
4b:75:c0:07:c3:31:82:75:9d:e8:d6:78:c9:e5:c7:91:64:74:
b0:57:3f:bf:d2:77:5f:e5:5d:d9:e3:dd:62:99:f1:9d:97:c8:
48:23:97:3f:e5:9d:81:e8:70:ec:38:e1:43:1e:43:af:be:be:
52:fb:6f:a1:f5:d5:b7:3b:f0:df:61:5e:3c:9d:93:85:57:c5:
3e:56:37:e1:6f:a0:74:56:fd:c0:03:6f:ee:e2:53:e6:13:90:
89:0f:1a:9f:85:a4:59:48:f1:a2:2b:92:31:1e:f5:55:34:22:
38:cc:de:fa:75:49:62:07:a5:6f:b1:49:3f:c0:1e:80:ed:a6:
f6:9f:32:aa:b1:be:34:a0:98:b4:33:6d:68:c2:42:8f:ce:3b:
45:28:bd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:06:38 2026 by rpki-client