Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211144.roa
File: AS211144.roa (raw, json)
Hash identifier: 9DumZmIf3TwUOSJkbFZLTgwVvpG1bk/4qhZifOUQTKQ=
Subject key identifier: B9:85:C8:A4:C1:EF:9E:7A:E9:D9:F2:32:45:1B:28:5B:8B:3C:CA:72
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 47649899760EEF0FB68DE36B0BFB9039DC8B13E4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211144.roa
Signing time: Fri 01 May 2026 03:21:06 +0000
ROA not before: Fri 01 May 2026 03:16:06 +0000
ROA not after: Fri 30 Apr 2027 03:21:06 +0000
asID: 211144
IP address blocks: 2a0f:9400:7000::/48 maxlen: 48
2a0f:9400:7001::/48 maxlen: 48
2a0f:9400:7002::/48 maxlen: 48
2a0f:9400:7003::/48 maxlen: 48
2a0f:9400:7004::/48 maxlen: 48
2a0f:9400:7006::/48 maxlen: 48
2a0f:9400:7007::/48 maxlen: 48
2a0f:9400:7008::/48 maxlen: 48
2a0f:9400:700a::/48 maxlen: 48
2a0f:9400:700b::/48 maxlen: 48
2a0f:9400:700c::/48 maxlen: 48
2a0f:9400:700d::/48 maxlen: 48
2a0f:9400:700e::/48 maxlen: 48
2a0f:9400:700f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:64:98:99:76:0e:ef:0f:b6:8d:e3:6b:0b:fb:90:39:dc:8b:13:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 1 03:16:06 2026 GMT
Not After : Apr 30 03:21:06 2027 GMT
Subject: CN=B985C8A4C1EF9E7AE9D9F232451B285B8B3CCA72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:28:9a:1a:77:41:39:a6:68:10:2f:ce:8a:
88:d7:a6:a4:8d:2e:2f:86:03:5d:92:d9:3d:fd:cc:
e0:7c:5b:31:12:06:b0:b8:26:c5:d6:63:98:8f:56:
fe:bb:41:c5:2f:b2:58:8e:19:ed:50:ac:e5:8e:98:
a8:78:ff:a2:56:a2:71:e4:81:23:14:40:74:8c:4d:
24:a1:b9:3a:8c:a4:6c:65:48:58:23:d4:ce:3e:dd:
d3:eb:b3:8e:fe:6a:da:a0:98:9e:fd:46:0b:a7:d7:
b0:3c:67:c2:36:1c:50:a9:07:cb:9f:36:f0:db:21:
b2:0c:c9:e3:8b:3b:06:2b:d6:60:fe:9b:76:28:aa:
bd:22:ad:c3:af:28:92:68:6e:4d:6c:25:54:1f:17:
a6:4d:54:15:99:88:88:ed:21:64:91:1e:e3:51:a3:
35:fb:22:e9:92:37:fb:f1:ed:b3:2d:ed:c5:d5:f4:
d6:f0:4e:74:28:92:95:e2:aa:2a:9c:da:b7:a7:27:
b1:58:94:09:03:27:31:3f:bb:9c:03:12:4b:d6:eb:
3c:96:25:61:60:88:90:1e:c8:82:7b:8a:e9:3a:32:
8e:58:38:1c:76:45:d1:7f:9a:92:22:22:f1:d8:6d:
35:1f:3a:f0:5a:96:19:5c:fa:ce:3f:14:ee:cf:4c:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:85:C8:A4:C1:EF:9E:7A:E9:D9:F2:32:45:1B:28:5B:8B:3C:CA:72
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211144.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7000::-2a0f:9400:7004:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7006::-2a0f:9400:7008:ffff:ffff:ffff:ffff:ffff
2a0f:9400:700a::-2a0f:9400:700f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
91:aa:16:a4:33:94:fd:04:1f:2d:f1:01:ed:2b:51:f6:c9:e8:
e1:0f:c4:05:31:35:f8:ff:bd:77:b0:cc:25:4d:0e:10:bb:f4:
22:bd:97:cc:25:c9:31:57:4c:e7:41:ba:14:f6:1c:06:41:b5:
c0:f2:15:7f:71:36:22:d2:ad:ce:f6:06:12:17:53:01:0d:1b:
a3:a9:4f:97:d8:f0:d5:85:28:cf:cf:c9:93:76:70:45:14:cb:
2a:73:84:bc:19:46:80:5c:3b:82:88:e6:2d:67:6c:8e:a9:7a:
ee:ec:3a:bd:c1:89:06:47:22:94:3f:c1:2f:b6:ea:76:30:aa:
9d:82:fc:14:a5:22:0f:d3:f7:fa:83:aa:3b:98:d3:7b:75:17:
b9:3f:85:4d:7a:02:34:e0:10:72:08:88:d5:40:01:7c:13:82:
e3:25:c4:52:02:53:79:ce:02:f9:d5:71:50:46:cd:cf:f5:48:
8d:e1:d6:1e:cd:02:c5:45:2f:93:f3:ea:e0:c9:50:2e:ed:5b:
ac:f6:33:4a:c5:be:47:21:8c:0f:d8:2d:88:7b:d3:ac:4e:e0:
91:95:5d:e1:e2:85:da:a9:be:5b:19:22:f9:f4:6e:87:7d:ed:
06:d2:1b:66:87:a2:b7:38:43:b0:3b:e0:ed:8a:a6:90:4e:b8:
d8:a7:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:30:15 2026 by rpki-client