Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215899.roa
File: AS215899.roa (raw, json)
Hash identifier: YXPChzEfMxH6AP3E4QXWRFP8k0KSUQv48bEq1M8Bu7E=
Subject key identifier: 20:FB:63:7C:2F:3C:E0:F7:44:FB:BD:8F:EA:95:F8:3E:68:FC:7A:1E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 42A2581BC88A7A46728E994EC1E7BABABC0562D5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215899.roa
Signing time: Sun 08 Mar 2026 13:23:08 +0000
ROA not before: Sun 08 Mar 2026 13:18:08 +0000
ROA not after: Sun 07 Mar 2027 13:23:08 +0000
asID: 215899
IP address blocks: 2a0f:9400:6938::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a2:58:1b:c8:8a:7a:46:72:8e:99:4e:c1:e7:ba:ba:bc:05:62:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 8 13:18:08 2026 GMT
Not After : Mar 7 13:23:08 2027 GMT
Subject: CN=20FB637C2F3CE0F744FBBD8FEA95F83E68FC7A1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:78:38:74:a6:2e:7e:cc:0f:26:0b:23:7f:
c3:3f:c2:8b:51:79:6b:a4:7e:4c:b3:33:fb:ea:56:
b7:58:eb:90:ea:b2:65:92:0a:07:c2:66:23:b2:04:
6b:c2:db:35:82:a9:6f:28:99:aa:dc:e0:0e:e8:17:
39:66:d5:31:92:06:8d:64:67:f6:f2:b2:12:b2:b8:
b5:aa:74:df:dc:eb:6a:cd:37:46:2d:e2:dd:53:fa:
8c:c3:e2:3b:24:e6:28:5a:1b:82:cb:2e:53:fc:ed:
10:b6:43:c0:33:4b:c1:f4:da:40:51:89:56:a8:19:
cf:2b:8e:84:cd:a5:1b:81:29:51:45:15:b7:fc:6f:
07:8c:d8:2a:fc:7b:8e:16:b0:21:4c:78:24:3b:4e:
60:d0:c9:84:0f:02:be:ca:d3:19:b8:9c:ab:3e:94:
2c:6a:a0:55:23:65:44:f0:b2:27:03:76:3a:3f:5b:
e9:67:88:33:b0:ed:1f:00:a1:2f:e8:a6:72:10:6a:
dc:4a:ce:9f:45:e3:8c:9c:a0:da:76:e7:39:cf:f1:
f1:94:d0:70:f8:6d:a9:f7:c8:ac:0d:f4:86:99:ff:
9a:0b:cd:92:10:16:d0:14:8f:44:fa:ec:95:11:af:
cb:b1:22:a9:76:b0:ce:33:f5:ac:64:52:11:e6:d2:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FB:63:7C:2F:3C:E0:F7:44:FB:BD:8F:EA:95:F8:3E:68:FC:7A:1E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6938::/48
Signature Algorithm: sha256WithRSAEncryption
c2:37:c7:96:87:e7:c1:3b:e4:24:f1:5a:62:7a:35:c4:dd:ac:
92:29:2c:af:9a:2e:9c:77:d6:21:a6:be:15:ce:50:11:5f:26:
4a:b4:7e:e4:13:a6:e8:2b:0c:fb:28:d8:54:99:f1:38:e2:6a:
d4:90:07:81:c3:71:32:80:68:ef:4f:4a:78:46:29:90:48:fa:
e4:16:3d:93:27:7a:6f:36:f9:ea:33:49:76:ec:5d:fe:31:b2:
b7:ba:94:e1:56:9a:0d:50:4b:5f:02:eb:00:19:52:96:44:f2:
0d:49:ae:6e:43:61:dd:50:2c:b0:87:3c:e7:4a:18:10:d5:08:
e2:79:ec:4e:57:40:26:19:fb:ff:de:c3:70:00:52:cf:7d:40:
2c:ea:53:ee:90:9c:67:54:df:4f:c6:22:45:62:8f:5b:33:d5:
75:02:84:f0:8c:fa:eb:b2:80:39:e2:12:a8:39:ca:a8:dd:ab:
98:f6:ca:13:13:c2:42:fa:ef:b9:5c:1f:19:d9:ad:2c:3c:d7:
4b:62:a4:38:9a:bf:52:47:92:77:c5:15:d0:54:91:30:06:70:
4d:cc:bb:f0:d8:20:a1:20:b8:a9:0c:2c:4a:fe:48:fd:98:9b:
f3:82:47:47:2b:6c:80:d2:1e:cc:01:ad:ff:15:88:0a:ca:a9:
1f:ec:e0:f0
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUQqJYG8iKekZyjplOwee6urwFYtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjAzMDgxMzE4MDhaFw0yNzAzMDcxMzIzMDhaMDMxMTAvBgNV
BAMTKDIwRkI2MzdDMkYzQ0UwRjc0NEZCQkQ4RkVBOTVGODNFNjhGQzdBMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcRng4dKYufswPJgsjf8M/wotR
eWukfkyzM/vqVrdY65DqsmWSCgfCZiOyBGvC2zWCqW8omarc4A7oFzlm1TGSBo1k
Z/byshKyuLWqdN/c62rNN0Yt4t1T+ozD4jsk5ihaG4LLLlP87RC2Q8AzS8H02kBR
iVaoGc8rjoTNpRuBKVFFFbf8bweM2Cr8e44WsCFMeCQ7TmDQyYQPAr7K0xm4nKs+
lCxqoFUjZUTwsicDdjo/W+lniDOw7R8AoS/opnIQatxKzp9F44ycoNp25znP8fGU
0HD4ban3yKwN9IaZ/5oLzZIQFtAUj0T67JURr8uxIql2sM4z9axkUhHm0hElAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUIPtjfC884PdE+72P6pX4Pmj8eh4wHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxNTg5OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABpODANBgkqhkiG9w0BAQsFAAOC
AQEAwjfHlofnwTvkJPFaYno1xN2skiksr5ounHfWIaa+Fc5QEV8mSrR+5BOm6CsM
+yjYVJnxOOJq1JAHgcNxMoBo709KeEYpkEj65BY9kyd6bzb56jNJduxd/jGyt7qU
4VaaDVBLXwLrABlSlkTyDUmubkNh3VAssIc850oYENUI4nnsTldAJhn7/97DcABS
z31ALOpT7pCcZ1TfT8YiRWKPWzPVdQKE8Iz667KAOeISqDnKqN2rmPbKExPCQvrv
uVwfGdmtLDzXS2KkOJq/UkeSd8UV0FSRMAZwTcy78NggoSC4qQwsSv5I/Zib84JH
RytsgNIezAGt/xWICsqpH+zg8A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:12:59 2026 by rpki-client