Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214534.roa
File: AS214534.roa (raw, json)
Hash identifier: ++Z8mbepuUnnl4RO9aPSs1wqnxJTV8/7V2tj1GYb8HA=
Subject key identifier: C2:7D:FA:F5:B6:28:B7:E7:32:AE:7F:3F:DB:9B:70:2B:64:8E:6C:BB
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 41DF5D2FFDF365B80498FB6AC23B95A4BAEF09D5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214534.roa
Signing time: Thu 16 Jul 2026 12:29:44 +0000
ROA not before: Thu 16 Jul 2026 12:24:44 +0000
ROA not after: Thu 15 Jul 2027 12:29:44 +0000
asID: 214534
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:df:5d:2f:fd:f3:65:b8:04:98:fb:6a:c2:3b:95:a4:ba:ef:09:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 12:24:44 2026 GMT
Not After : Jul 15 12:29:44 2027 GMT
Subject: CN=C27DFAF5B628B7E732AE7F3FDB9B702B648E6CBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:ba:02:12:c5:b7:06:f3:96:a8:bc:b0:dd:
4b:34:9c:14:f2:d0:8d:d5:0e:1b:d1:c6:f5:04:f6:
8f:c0:a9:f1:9d:e2:12:cd:8d:d2:ae:56:03:74:26:
08:f3:e4:00:47:df:08:af:2a:18:97:df:1c:61:06:
be:09:b6:a9:a8:b1:a6:ce:9a:51:44:a8:8f:cc:5d:
03:b4:0a:b3:7e:dc:de:e4:5b:8c:61:ce:43:e9:56:
57:34:a0:f0:cd:26:c3:1a:f1:8d:61:1a:30:c2:c1:
cb:77:99:9a:37:34:e8:cf:18:70:87:dd:6c:b0:27:
11:08:1c:97:cc:e2:53:ad:cb:2c:16:d6:2b:57:c7:
03:42:b6:fc:ab:8e:68:59:92:13:af:aa:17:20:4b:
1f:77:b3:c5:53:c6:cb:7c:d6:da:99:b3:e2:63:95:
a3:61:7b:d2:fa:ec:dc:4e:0d:06:23:37:64:7f:d1:
55:20:75:14:d4:29:0d:86:d9:5c:6c:0b:7b:54:f1:
52:ff:39:ca:fa:99:e7:19:d8:5f:07:83:d7:d2:51:
52:ef:4a:52:20:62:a2:96:d8:15:52:87:21:08:f8:
82:52:75:91:6a:9f:57:9f:8f:17:58:9e:62:98:30:
f9:65:d2:3f:d7:8b:c2:e4:40:05:1f:da:bf:3a:9b:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7D:FA:F5:B6:28:B7:E7:32:AE:7F:3F:DB:9B:70:2B:64:8E:6C:BB
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
19:27:14:6d:41:cb:b2:2f:62:63:e7:ec:dc:b6:5c:d7:f0:55:
7e:67:fc:39:a3:7f:a1:5b:46:1e:28:02:0b:ef:de:12:30:e4:
b4:1d:62:cc:4e:1e:e4:ed:05:f8:fa:e1:aa:83:70:56:97:37:
0d:01:47:12:de:9d:dd:88:f4:16:6d:1b:34:c2:83:cb:eb:68:
2c:12:4f:90:ed:26:b6:b0:b6:59:3f:85:c6:f5:7b:b1:a3:e1:
ee:c0:74:5c:57:5b:db:bd:53:32:0a:9f:b9:07:26:58:a9:f8:
11:e0:10:de:36:47:15:cf:fc:22:c6:f7:74:7c:5f:bb:6e:ab:
4b:ec:05:64:1e:25:75:e6:61:09:13:e2:da:0a:26:7d:11:5d:
86:9e:96:a1:cb:04:8e:89:5f:1a:df:6a:7d:cc:c2:2d:78:52:
96:92:7e:d2:20:d4:50:24:ec:27:3e:e0:36:3c:61:a7:20:43:
d0:64:af:66:4f:fc:46:5a:95:e5:71:3c:a5:fd:03:a2:23:c7:
52:04:11:32:1d:88:ac:39:3f:64:86:9e:5e:55:3c:8f:96:42:
57:72:84:1f:92:e6:6a:cc:b6:e3:ce:0f:af:9d:c5:67:e4:ba:
3f:53:70:94:5c:25:dc:d7:76:49:7e:27:c0:30:83:bd:69:27:
d4:5b:fe:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:04:46 2026 by rpki-client