Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214669.roa
File: AS214669.roa (raw, json)
Hash identifier: p8pT9JUzP7CVjTsTokeJpmJ2/aV7kf5Np1Zd0VXcEYA=
Subject key identifier: 62:35:2A:1F:20:EC:78:13:7C:3E:B7:9C:AE:6E:29:02:51:DF:A1:1B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7BBF5FB133F654CB4B8713C6AA3049B6B595A6B5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214669.roa
Signing time: Wed 08 Oct 2025 06:43:05 +0000
ROA not before: Wed 08 Oct 2025 06:38:05 +0000
ROA not after: Wed 07 Oct 2026 06:43:05 +0000
asID: 214669
IP address blocks: 2a0f:9400:6150::/44 maxlen: 48
2a0f:9403::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:bf:5f:b1:33:f6:54:cb:4b:87:13:c6:aa:30:49:b6:b5:95:a6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 8 06:38:05 2025 GMT
Not After : Oct 7 06:43:05 2026 GMT
Subject: CN=62352A1F20EC78137C3EB79CAE6E290251DFA11B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:0e:2e:8c:1c:81:42:3c:76:81:b4:5a:b1:
6c:db:d0:a7:aa:5e:e8:b6:6a:e3:35:7c:a5:05:de:
f3:cd:e4:14:d8:43:e2:17:a8:1b:c6:a1:21:ee:84:
c0:77:80:27:64:a6:5f:38:57:56:23:f5:0f:92:00:
0d:4a:7c:21:31:93:33:d9:f8:64:36:f2:e0:b1:08:
ba:f7:d3:95:8b:8c:78:43:32:b3:80:3f:0c:9a:cd:
6a:d5:6e:92:45:12:61:2a:e7:92:4a:16:fa:e8:8a:
42:65:c9:30:f8:fb:c5:73:89:01:54:d1:d7:b0:36:
39:30:49:97:1c:69:35:4e:66:06:e4:f5:8f:b5:4f:
51:d4:e1:db:ed:21:14:2b:34:f0:8a:0c:2a:03:06:
b5:2a:6c:c5:2c:00:0e:e0:46:51:93:d2:ee:0c:68:
d8:af:79:cf:b0:00:e1:4a:3f:00:7c:e7:c2:32:17:
51:51:bd:46:3c:06:d8:8f:db:3f:42:87:26:f5:59:
57:bf:b7:a6:c0:ad:df:13:6b:d4:89:57:aa:b3:3d:
50:a2:b4:7b:6f:be:1c:40:8d:47:16:4d:fa:18:ce:
fb:e8:1e:82:05:0c:c8:17:07:21:ef:dc:3c:86:d4:
5c:d9:2f:14:60:d8:83:4b:60:70:74:8b:c9:c6:1d:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:35:2A:1F:20:EC:78:13:7C:3E:B7:9C:AE:6E:29:02:51:DF:A1:1B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214669.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6150::/44
2a0f:9403::/36
Signature Algorithm: sha256WithRSAEncryption
0a:af:74:cb:1a:cb:76:86:31:32:b1:c2:d1:0b:cd:df:d9:76:
fe:17:9e:61:bc:39:34:a5:f2:82:df:0c:a4:e0:f4:ef:c4:1c:
f8:85:12:4a:f9:01:ea:d4:91:d6:f3:0a:41:78:a3:16:a6:0d:
ac:06:db:eb:db:e5:1b:48:fe:19:68:77:46:8b:95:08:b9:25:
83:4e:e2:d8:77:c8:e1:ba:ca:e0:4a:6f:b7:34:8f:93:fc:f7:
27:59:eb:18:c0:fc:31:6f:2e:8e:09:57:bf:e0:c7:b0:7a:fa:
cb:b8:ae:f2:9d:df:cd:0e:e9:8f:fa:30:56:e5:7e:43:92:72:
a9:fb:36:02:79:f7:03:c4:51:1b:4d:24:70:82:57:8c:24:56:
3a:8b:bd:25:d9:4b:6a:5a:57:83:83:41:5a:05:27:c8:46:85:
bc:49:b4:60:33:bf:44:78:0a:01:d0:19:44:94:b3:be:1b:94:
00:f8:ac:65:43:ca:67:27:31:05:5e:6c:4d:2a:e3:13:d3:db:
54:fd:28:bf:63:81:f1:e8:7c:5b:56:89:66:53:41:98:c5:70:
96:c2:f0:e5:ce:2e:b3:4c:b7:4a:3e:5b:00:63:f2:7f:97:90:
bf:8b:1e:a3:7a:ac:99:d7:3f:dc:c9:d8:80:da:3e:e8:03:31:
80:4a:02:3e
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUe79fsTP2VMtLhxPGqjBJtrWVprUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTEwMDgwNjM4MDVaFw0yNjEwMDcwNjQzMDVaMDMxMTAvBgNV
BAMTKDYyMzUyQTFGMjBFQzc4MTM3QzNFQjc5Q0FFNkUyOTAyNTFERkExMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2EQ4ujByBQjx2gbRasWzb0Keq
Xui2auM1fKUF3vPN5BTYQ+IXqBvGoSHuhMB3gCdkpl84V1Yj9Q+SAA1KfCExkzPZ
+GQ28uCxCLr305WLjHhDMrOAPwyazWrVbpJFEmEq55JKFvroikJlyTD4+8VziQFU
0dewNjkwSZccaTVOZgbk9Y+1T1HU4dvtIRQrNPCKDCoDBrUqbMUsAA7gRlGT0u4M
aNivec+wAOFKPwB858IyF1FRvUY8BtiP2z9Chyb1WVe/t6bArd8Ta9SJV6qzPVCi
tHtvvhxAjUcWTfoYzvvoHoIFDMgXByHv3DyG1FzZLxRg2INLYHB0i8nGHS9dAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUYjUqHyDseBN8Precrm4pAlHfoRswHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxNDY2OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAqBggr
BgEFBQcBBwEB/wQbMBkwFwQCAAIwEQMHBCoPlABhUAMGBCoPlAMAMA0GCSqGSIb3
DQEBCwUAA4IBAQAKr3TLGst2hjEyscLRC83f2Xb+F55hvDk0pfKC3wyk4PTvxBz4
hRJK+QHq1JHW8wpBeKMWpg2sBtvr2+UbSP4ZaHdGi5UIuSWDTuLYd8jhusrgSm+3
NI+T/PcnWesYwPwxby6OCVe/4MewevrLuK7ynd/NDumP+jBW5X5DknKp+zYCefcD
xFEbTSRwgleMJFY6i70l2UtqWleDg0FaBSfIRoW8SbRgM79EeAoB0BlElLO+G5QA
+KxlQ8pnJzEFXmxNKuMT09tU/Si/Y4Hx6HxbVolmU0GYxXCWwvDlzi6zTLdKPlsA
Y/J/l5C/ix6jeqyZ1z/cydiA2j7oAzGASgI+
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:42 2025 by rpki-client