Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216183.roa
File: AS216183.roa (raw, json)
Hash identifier: aFPW2e3lzWgi9KdGWATM1ucQR4sEUTUp6e8HIaWFgoc=
Subject key identifier: 60:A8:92:52:9D:8D:EC:AC:07:F1:D9:37:3A:1F:64:A3:4B:A6:31:3E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 663C53349D4306B43AF1FFD03A5069D66DBD679E
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216183.roa
Signing time: Sat 09 May 2026 18:59:28 +0000
ROA not before: Sat 09 May 2026 18:54:28 +0000
ROA not after: Sat 08 May 2027 18:59:28 +0000
asID: 216183
IP address blocks: 2a0f:9400:6140::/48 maxlen: 48
2a0f:9400:6141::/48 maxlen: 48
2a0f:9400:6142::/48 maxlen: 48
2a0f:9400:6143::/48 maxlen: 48
2a0f:9400:6168::/48 maxlen: 48
2a0f:9400:616a::/48 maxlen: 48
2a0f:9400:616b::/48 maxlen: 48
2a0f:9400:616c::/48 maxlen: 48
2a0f:9400:616d::/48 maxlen: 48
2a0f:9400:616e::/48 maxlen: 48
2a0f:9400:616f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:3c:53:34:9d:43:06:b4:3a:f1:ff:d0:3a:50:69:d6:6d:bd:67:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 9 18:54:28 2026 GMT
Not After : May 8 18:59:28 2027 GMT
Subject: CN=60A892529D8DECAC07F1D9373A1F64A34BA6313E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:ee:d8:94:46:86:bd:67:ab:ad:ca:a2:6f:
a9:d2:57:0a:19:31:d7:01:d9:94:3e:66:bf:b8:34:
a0:43:1f:a0:23:be:09:d7:1d:fb:cd:6d:20:ac:f6:
3f:c4:ed:59:5b:ed:e4:42:7f:0d:34:f8:87:03:8e:
e7:fd:a0:1b:de:1d:fb:fc:f9:83:a8:09:f4:8c:41:
0a:b0:df:fa:7c:eb:d4:3d:cd:14:95:8e:df:3f:78:
94:02:1f:ca:81:99:1d:49:e3:6b:63:1a:89:cd:f5:
ae:69:55:db:d2:f5:a8:d6:10:fa:72:4b:22:02:52:
90:04:cf:8d:8e:42:48:d7:6e:b3:da:83:9f:fd:9e:
c1:59:4e:26:27:22:b0:04:c3:89:b6:c6:90:e3:3f:
a2:19:6d:37:f6:25:71:b7:ac:05:db:d7:41:9f:1a:
f4:84:01:5a:01:b2:d8:3e:b2:af:76:4f:ab:c8:a0:
ea:58:5a:47:0d:26:1b:c5:cd:91:4f:eb:8e:1e:d7:
fb:9a:81:e7:1f:64:e0:22:ea:af:b0:99:79:6a:80:
cc:57:78:d5:cd:e7:5d:8b:65:9f:b8:0d:03:0f:9d:
8a:c2:0e:02:9d:82:5c:c7:db:86:15:6c:dc:17:05:
15:99:7c:67:a7:e7:41:ea:c1:04:c9:8e:e4:e6:1b:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:92:52:9D:8D:EC:AC:07:F1:D9:37:3A:1F:64:A3:4B:A6:31:3E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6140::/46
2a0f:9400:6168::/48
2a0f:9400:616a::-2a0f:9400:616f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0b:27:fa:20:f9:2f:5f:08:09:bc:e2:11:a8:cc:b0:3b:08:31:
98:e0:87:69:19:b3:11:45:60:20:f9:c2:e7:30:5e:24:12:88:
67:f8:f0:15:50:87:c3:dd:56:91:76:44:b2:f6:9c:12:81:36:
e5:22:60:8f:8c:a3:ec:d7:0d:fa:23:ad:5e:77:06:e0:01:9a:
95:fd:7b:9c:9f:8b:15:67:1d:e0:fe:1d:95:aa:0d:18:66:be:
db:72:5d:f0:a0:67:39:b3:f3:f7:1d:0a:6a:9b:69:fe:41:d7:
70:69:1b:21:f3:6a:2c:0e:a3:73:23:43:ab:07:43:96:82:d5:
aa:18:ab:23:2c:13:6f:3b:0f:23:85:fe:9c:12:51:8f:db:2c:
c7:2f:ba:2e:43:1f:68:01:d5:cf:1a:dd:0a:3d:d4:8e:34:40:
8f:cc:bd:04:c2:e3:90:29:b0:6e:1f:c7:d6:74:92:e8:53:9e:
1b:63:06:d3:6b:dd:50:c2:39:f3:2d:f9:e2:53:6f:f8:67:72:
5d:4d:b8:bd:7a:47:89:d6:aa:8c:4d:15:a4:66:0a:c8:7a:a3:
3a:af:47:11:12:a3:8f:e5:16:46:50:2f:02:b4:19:1c:21:d1:
dc:f5:29:0a:32:0e:df:f5:68:f4:fc:d7:14:b6:85:71:69:42:
f5:20:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:30:14 2026 by rpki-client