Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216271.roa
File: AS216271.roa (raw, json)
Hash identifier: a3713Vb0l6hE1oLB6o5bSPKTfksmDcu9TZ673HWXtJs=
Subject key identifier: 2D:90:06:35:9D:02:CD:4A:69:D7:32:11:DA:03:0B:0F:57:E5:BA:86
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 25805167783EACA4A824A661A70D86B90A57DD10
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216271.roa
Signing time: Fri 20 Mar 2026 18:14:09 +0000
ROA not before: Fri 20 Mar 2026 18:09:09 +0000
ROA not after: Fri 19 Mar 2027 18:14:09 +0000
asID: 216271
IP address blocks: 2a0f:9400:6180::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:80:51:67:78:3e:ac:a4:a8:24:a6:61:a7:0d:86:b9:0a:57:dd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 20 18:09:09 2026 GMT
Not After : Mar 19 18:14:09 2027 GMT
Subject: CN=2D9006359D02CD4A69D73211DA030B0F57E5BA86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:f6:ca:a4:50:c8:0f:cc:02:1d:0c:47:45:
50:c9:1c:2b:a9:81:23:ef:45:3b:e6:30:61:25:1f:
f0:ee:ba:79:d4:67:90:5e:bb:e9:59:ba:0c:61:e8:
50:ae:e0:cf:23:67:96:b7:3e:5d:9d:63:8a:48:24:
83:cb:64:51:f8:37:ae:ef:75:dd:39:32:a2:a2:27:
84:20:35:93:d8:25:9b:03:28:5e:41:e9:94:15:4d:
d1:d4:04:e6:b5:c3:f4:9c:3f:08:47:e3:63:ae:c6:
b6:8f:d8:b8:c0:9b:7e:fd:4c:79:65:52:40:de:43:
0f:af:02:a8:3a:7b:5e:3a:9a:f2:c4:90:fc:f2:e9:
b3:ee:74:b0:cc:1f:ca:cd:41:1c:fe:81:f9:3b:bb:
9e:98:f9:13:bd:93:9b:b3:43:b2:73:57:01:6d:2b:
74:53:db:dc:f7:ef:13:a0:f6:49:88:a1:24:14:00:
c4:94:9f:8e:f6:91:c0:22:09:66:bf:c6:a0:99:ad:
db:d2:aa:cc:c3:3c:f1:04:ed:01:ff:a8:b6:cb:86:
fc:df:3f:16:9f:cd:01:dc:ea:f0:02:53:b9:8c:85:
63:e9:ab:6d:82:43:8f:57:df:41:8c:92:7f:ab:a8:
a7:b1:83:51:80:dd:fb:90:1f:49:ca:ae:b5:9a:d8:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:90:06:35:9D:02:CD:4A:69:D7:32:11:DA:03:0B:0F:57:E5:BA:86
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216271.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6180::/44
Signature Algorithm: sha256WithRSAEncryption
7f:f3:0f:77:ff:b3:38:28:7f:31:ab:58:44:56:df:68:4c:47:
ec:42:0e:b7:e3:ec:77:f3:f0:42:02:f5:94:7a:ac:77:b6:b6:
e6:7a:b7:e4:fc:64:ea:3c:8c:0a:50:8c:40:33:7b:01:c5:48:
f5:62:5a:ba:c5:03:1b:3f:cc:4e:05:d5:35:d9:59:81:1e:35:
70:15:b5:a9:ae:28:9a:45:3e:6b:69:f5:eb:6c:0b:39:9c:a6:
a1:23:e6:b7:a4:80:85:a0:08:26:0b:16:2e:15:b1:c1:26:06:
33:9e:a2:ca:46:68:a1:cc:5b:d7:c4:b0:ec:c5:06:d2:51:8b:
c6:68:31:37:c8:b1:16:a3:8d:47:c4:9a:f6:92:10:93:65:01:
56:03:a6:c0:30:92:22:bf:96:2e:7f:04:57:8c:df:3c:3f:a4:
c8:68:e1:ca:97:65:92:c1:0f:56:df:ea:bb:b6:7f:65:cd:bc:
e9:0d:e1:55:64:b0:c4:44:ae:6f:a3:ce:9c:bc:1b:24:11:fe:
6b:28:ea:11:69:7e:e7:ba:67:85:a5:0e:64:66:59:4e:35:cd:
d7:86:3d:6e:eb:fc:ea:ab:2d:1b:09:10:6b:40:13:9e:4a:b1:
e1:ee:1b:45:ed:fa:5c:42:e8:19:72:68:3c:76:df:af:6a:e3:
42:4b:87:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:32:34 2026 by rpki-client