Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211729.roa
File: AS211729.roa (raw, json)
Hash identifier: Fzehj+qgB60sKCbu38Df9UdCZN1YsOCSRfo+JUR/SzI=
Subject key identifier: 9F:CC:7B:2C:56:69:BF:C6:E5:5B:D5:7D:FA:9D:9E:D7:5C:89:C5:5A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4E9674CA95FEC5D908A4125BBEF8D4E48B5D3ADE
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211729.roa
Signing time: Wed 15 Jul 2026 14:29:39 +0000
ROA not before: Wed 15 Jul 2026 14:24:39 +0000
ROA not after: Wed 14 Jul 2027 14:29:39 +0000
asID: 211729
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:96:74:ca:95:fe:c5:d9:08:a4:12:5b:be:f8:d4:e4:8b:5d:3a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 15 14:24:39 2026 GMT
Not After : Jul 14 14:29:39 2027 GMT
Subject: CN=9FCC7B2C5669BFC6E55BD57DFA9D9ED75C89C55A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:e3:47:b9:51:40:dd:a9:0b:c8:87:04:ff:
99:b8:d3:00:1b:cf:1c:41:21:50:f9:87:c9:eb:16:
eb:a2:56:f0:f2:7d:08:4c:bb:03:e1:d1:86:0e:0d:
89:c0:d6:96:30:52:03:44:a4:5c:f2:06:01:ba:92:
ca:3b:12:02:1c:a7:d1:58:23:8c:ac:3a:47:c5:64:
4e:14:2d:20:c6:25:dd:56:2c:f0:ff:fd:a7:dc:8e:
36:8b:9f:ec:40:50:2d:ce:b7:56:cd:df:11:1b:ca:
11:ff:b1:c2:0f:6e:61:8d:1a:08:78:05:5d:e3:31:
be:24:09:33:4e:e4:9d:4d:81:64:10:40:ba:dd:14:
03:ad:eb:84:18:d7:00:72:47:a0:5b:f6:83:15:7b:
6e:56:a4:3d:a6:5a:35:7d:68:5d:4e:ac:c5:89:db:
77:51:c1:a1:2b:e8:95:aa:54:54:e7:0a:08:d3:5b:
07:a1:f8:7f:ea:86:d8:81:52:3e:a4:88:ed:7e:1a:
4c:b9:e4:1b:71:bb:65:e5:df:55:33:22:41:2e:fe:
1f:be:19:41:fc:7a:93:cc:90:b8:ee:fd:2d:db:7c:
b6:c3:49:7e:c3:df:0a:68:c5:9c:42:0e:79:e3:e1:
c6:82:ff:3c:3e:e6:1e:a9:54:02:3a:ee:a7:4d:8e:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CC:7B:2C:56:69:BF:C6:E5:5B:D5:7D:FA:9D:9E:D7:5C:89:C5:5A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211729.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
8c:d6:b2:40:cd:16:0e:c6:0c:dc:69:2c:9c:8a:20:d9:c8:dc:
e0:59:9f:c7:86:d8:c6:b9:0f:a3:25:aa:c1:d1:16:1e:b7:c6:
80:a3:83:3f:c0:37:9d:42:52:78:13:f6:16:1d:de:f7:ec:ce:
ba:28:83:2b:3e:d9:41:8b:15:a9:20:d2:70:fc:b6:46:07:ab:
f7:22:16:de:a4:7a:55:74:f4:f0:81:ae:13:18:c9:8a:17:2c:
a3:45:19:88:5b:e2:3c:26:04:c2:d2:de:fb:60:83:07:41:45:
7b:ae:ff:b1:3f:8d:ff:c1:ab:70:6d:b8:74:69:c7:b2:4d:b8:
64:d6:b0:16:a3:a0:4a:e8:53:b5:9e:c5:a2:ac:09:79:23:10:
b4:35:a6:1a:45:1b:3f:2c:a8:ee:78:df:38:2a:d6:7e:0b:a6:
c9:fa:d6:69:68:32:a4:24:20:4d:f2:05:3e:ce:75:53:a1:13:
8e:15:bb:58:2f:8e:09:35:27:23:16:8d:8f:41:d0:6a:3a:50:
ea:44:14:20:4f:4d:ab:57:7f:82:c0:56:5c:10:b3:82:d0:40:
d0:b3:e0:86:4c:90:9d:0e:b7:b6:98:87:6e:59:01:de:a1:0e:
4c:18:ef:21:03:48:6f:15:35:f1:5f:2b:de:34:9a:8c:ab:5f:
eb:e4:fc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:04:42 2026 by rpki-client