
Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214085.roa
File: AS214085.roa (raw, json)
Hash identifier: R4wmNmQyrnT1hIgbZsJvpG/yhbwwd0wRrx42pS4Fc7M=
Subject key identifier: AA:35:76:40:15:5E:8A:78:4B:B1:E1:80:B8:1A:E5:29:2C:08:ED:39
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 44366A896C62268C120C8F179396DF5349091B05
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214085.roa
Signing time: Mon 15 Sep 2025 17:55:58 +0000
ROA not before: Mon 15 Sep 2025 17:50:58 +0000
ROA not after: Mon 14 Sep 2026 17:55:58 +0000
asID: 214085
IP address blocks: 2a0f:9400:614a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:36:6a:89:6c:62:26:8c:12:0c:8f:17:93:96:df:53:49:09:1b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 15 17:50:58 2025 GMT
Not After : Sep 14 17:55:58 2026 GMT
Subject: CN=AA357640155E8A784BB1E180B81AE5292C08ED39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:73:93:bf:5e:01:cf:59:67:6e:52:29:a0:f9:
bc:ad:a2:86:22:c6:b1:b4:e9:4a:49:c4:33:19:49:
23:7d:d0:30:60:5b:b7:d3:56:1f:67:af:c0:81:6a:
5f:d3:91:06:48:78:6e:9d:b0:f6:03:f7:68:fe:a1:
21:81:0c:d5:35:81:bf:59:93:4f:51:fe:ab:d4:3a:
4b:97:97:90:c6:6d:42:38:76:cc:ef:da:36:da:5f:
ff:38:78:94:65:76:0a:be:17:a1:1a:dc:e6:fe:19:
61:33:64:5f:07:b9:9d:fb:ab:15:67:da:50:a5:ee:
6c:36:54:a9:b4:38:f3:cd:1b:a0:79:38:3c:1c:9f:
e3:a7:1d:e4:0e:84:cc:94:f0:ed:ad:55:fc:b1:23:
a6:fc:01:8a:b3:b1:53:b4:ab:db:f0:66:e0:d2:a2:
36:45:0a:a3:32:91:6a:dd:20:f3:71:4d:98:b6:6c:
fb:e7:23:f5:23:f5:45:b7:ff:38:1e:6e:bc:b1:82:
7f:8d:6e:11:01:52:b5:37:1c:23:a1:53:b6:6d:6d:
57:8c:99:34:0b:81:d0:89:cc:97:65:62:71:75:39:
d4:d7:d2:bc:eb:f7:a3:13:9b:76:f4:75:ca:09:c8:
13:ad:b1:07:1e:57:7e:4f:7c:7e:52:14:ef:02:24:
b8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:35:76:40:15:5E:8A:78:4B:B1:E1:80:B8:1A:E5:29:2C:08:ED:39
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:614a::/48
Signature Algorithm: sha256WithRSAEncryption
28:73:b7:34:86:68:5b:63:dc:7b:28:48:08:c6:94:78:c3:21:
cc:55:fc:71:db:d1:09:69:52:cf:58:dd:2e:2d:4f:57:a8:c7:
1d:7e:a3:38:ed:4f:82:22:4d:2c:df:f5:74:85:8d:9c:1d:78:
cf:78:95:ac:0f:e5:4c:95:1a:3c:db:43:d2:fe:4d:52:a5:d5:
de:87:c3:4e:05:93:a7:83:7a:e5:ea:a4:54:60:4e:67:3e:b9:
5f:e5:d9:17:77:35:ef:ac:b0:57:1f:8b:00:43:b1:2f:d3:67:
f4:de:4f:d2:e4:36:d0:35:15:8d:10:f3:17:d3:c0:7f:c5:3d:
c4:6f:11:28:e0:de:8f:3c:31:47:4a:4b:e3:5b:bf:96:12:d9:
02:ae:aa:fe:e3:cb:55:d9:7b:32:fd:8c:b2:80:3f:aa:64:81:
17:07:14:43:06:fb:7c:ea:42:58:47:b3:0a:04:06:2b:61:e9:
d8:0e:da:8e:5d:8a:4c:5f:70:46:e2:2e:b4:b0:73:54:0a:a2:
c3:22:e0:cb:c8:99:8a:4e:26:0a:c1:bd:5b:cb:95:b2:7a:d5:
ef:4e:55:c7:c1:1e:7d:22:2f:99:38:ed:9f:c4:45:d5:ec:81:
29:07:ec:d6:35:cb:38:89:f5:b6:05:2c:d1:7f:f7:b5:ba:dc:
45:88:a9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:33:47 2025 by rpki-client