Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213404.roa
File: AS213404.roa (raw, json)
Hash identifier: scbKISYhlSJ+mxG8A8hssEc9r0oqXUQm/bhb/wJbpqA=
Subject key identifier: D5:22:04:68:E3:1B:57:A1:12:C3:50:9C:D5:C7:5E:02:8F:F3:3C:8E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 580856363ECA5482BBE2A636D84FE9C654755E76
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213404.roa
Signing time: Thu 16 Jul 2026 13:29:45 +0000
ROA not before: Thu 16 Jul 2026 13:24:45 +0000
ROA not after: Thu 15 Jul 2027 13:29:45 +0000
asID: 213404
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:08:56:36:3e:ca:54:82:bb:e2:a6:36:d8:4f:e9:c6:54:75:5e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 13:24:45 2026 GMT
Not After : Jul 15 13:29:45 2027 GMT
Subject: CN=D5220468E31B57A112C3509CD5C75E028FF33C8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:08:ca:3c:2d:fc:10:bd:51:12:cc:d5:6c:
01:5f:69:b1:06:9b:94:37:98:1d:a9:25:ab:63:14:
58:5a:34:be:41:4f:02:fd:5e:eb:2d:20:4e:f6:7d:
f8:69:f4:d1:a3:e0:b5:34:7c:46:12:4c:9d:55:87:
76:0f:ab:5e:48:e0:a4:38:87:3f:f3:7b:d6:c9:44:
7c:49:c0:bc:12:2c:2c:5e:cf:3f:db:74:31:75:15:
44:f3:a0:a5:19:2e:4d:ec:59:14:8b:09:2c:19:f5:
a4:c5:b2:db:99:e0:a3:ca:33:a8:fb:5e:ab:03:5d:
e9:84:46:3b:f9:ec:d7:03:4b:3e:54:e5:27:0c:34:
bb:ab:c6:72:f8:a9:fc:85:30:2f:67:cf:22:20:43:
f5:4e:ad:39:a4:3e:2e:b1:48:9d:87:e3:77:91:36:
ce:ca:f7:52:71:86:e1:c4:84:14:cb:1b:d9:0b:38:
97:87:c9:88:ba:a0:e4:c9:0b:cb:dd:69:3c:1f:71:
de:3e:46:e2:cf:55:53:06:44:c9:af:32:44:0a:d4:
c7:d3:db:08:7b:cf:cf:9c:f3:9c:c1:fb:06:57:85:
a9:33:8d:d5:98:7a:fa:18:34:15:d5:18:64:ba:3a:
1c:38:98:e9:9b:1d:8a:e2:27:e3:1e:a0:95:23:65:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:22:04:68:E3:1B:57:A1:12:C3:50:9C:D5:C7:5E:02:8F:F3:3C:8E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
8a:d3:60:51:18:f8:a8:df:4d:29:1e:46:8e:08:1d:27:e8:82:
03:cc:22:93:31:4d:c7:bf:20:03:9b:44:a1:8f:5d:51:1a:dc:
08:16:01:bf:56:19:e5:e1:28:0c:d5:66:da:03:23:da:81:66:
3f:4c:03:fa:24:42:91:5a:ce:e0:39:30:01:16:29:89:e3:83:
5e:32:40:ca:6c:df:4a:81:b1:b9:95:50:d7:96:c9:da:1e:2f:
8c:e1:bb:49:f5:8c:e1:b5:24:f8:89:f5:c3:f1:f0:5a:f5:83:
30:c0:1c:f1:34:b1:b7:5e:e7:08:2e:75:12:2a:1f:b1:2b:70:
7e:8f:8b:fd:78:fc:e0:a1:e6:71:e3:b2:45:e4:91:9a:e9:f8:
c5:e9:15:b6:5d:df:c9:ca:76:aa:f1:5a:4f:60:21:9b:9f:3d:
bf:d7:69:8e:a2:c6:01:c5:41:64:20:89:85:d4:b4:e7:61:4f:
42:e3:65:02:76:71:05:2f:4d:da:98:d7:a7:77:81:4d:e8:83:
cc:2d:38:e4:24:0a:27:9b:ff:ff:f0:d6:a7:c5:b8:5f:ca:4e:
35:63:cc:b6:73:96:b4:1e:0d:3a:de:00:c5:02:3d:70:ab:47:
b0:33:ae:37:24:46:b6:17:94:ac:05:5c:94:2a:b2:36:32:4f:
b1:8e:81:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:04:51 2026 by rpki-client