Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216299.roa
File: AS216299.roa (raw, json)
Hash identifier: mIc7aUXp5ApvGdllr6xR8Y6mdHLDzXUFgLQ2uxh38Pc=
Subject key identifier: 3B:C9:C4:A4:EC:81:D9:EA:90:7C:4F:85:09:12:5A:1C:3F:1C:FE:7C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6F4D9FEAE12BC89A387364AE9A6A651DC4F1C070
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216299.roa
Signing time: Fri 15 Aug 2025 06:40:36 +0000
ROA not before: Fri 15 Aug 2025 06:35:36 +0000
ROA not after: Fri 14 Aug 2026 06:40:36 +0000
asID: 216299
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:4d:9f:ea:e1:2b:c8:9a:38:73:64:ae:9a:6a:65:1d:c4:f1:c0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 06:35:36 2025 GMT
Not After : Aug 14 06:40:36 2026 GMT
Subject: CN=3BC9C4A4EC81D9EA907C4F8509125A1C3F1CFE7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:d2:d6:aa:57:71:c9:95:b1:7a:19:85:ea:
8f:53:99:49:8a:cc:d8:2b:df:8c:1b:2e:86:75:63:
18:f7:93:4b:7a:1d:bc:0f:f5:21:c7:e6:9c:8b:7d:
11:7b:1a:d5:71:7b:70:f0:69:15:70:68:6f:e6:3f:
e3:b6:c6:1c:86:a7:25:bd:8c:7d:60:d3:1d:aa:6a:
44:e8:09:74:6b:93:50:e6:eb:97:dc:31:78:a3:06:
ea:78:5f:f8:b6:79:06:92:ba:78:cc:a7:f6:1e:6f:
be:6c:68:d0:a8:06:d2:f4:00:96:2f:dd:af:19:e8:
9b:89:62:8a:60:0b:ca:d9:cc:74:0d:ea:0b:db:d2:
fe:d5:16:78:91:e2:49:6f:26:f2:c9:48:74:5a:8a:
bb:a7:ee:94:11:b3:23:68:dd:79:14:d9:bb:f8:27:
4e:ae:ef:a7:94:50:de:54:53:63:bc:a5:1f:17:66:
e8:fe:9e:f8:9b:45:d9:39:bb:2c:9c:dc:c9:e8:f6:
e9:8c:0b:ae:5e:a6:bf:cc:cc:cf:03:96:02:84:2e:
21:50:a9:69:41:f8:1a:b2:e8:ee:41:4d:83:b3:21:
5a:ae:4c:6a:cf:17:0a:a6:b5:0a:00:81:3e:70:01:
5f:b8:d9:6f:ac:4d:db:3e:e8:44:c7:d6:90:b4:61:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C9:C4:A4:EC:81:D9:EA:90:7C:4F:85:09:12:5A:1C:3F:1C:FE:7C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
7d:dd:c4:3d:54:45:88:9b:1e:67:83:21:33:d8:a5:03:43:3c:
9e:81:a1:b2:30:1d:02:75:21:36:fe:dd:59:e8:97:52:c6:72:
3b:fd:dc:08:8e:f5:83:c6:2c:73:80:21:51:1a:96:d4:f9:9d:
a4:3b:d1:71:94:bd:36:e0:36:53:8c:5c:ca:5b:91:fb:f0:f1:
ec:73:89:c4:83:44:88:17:88:88:2c:b7:ef:fa:39:b0:9a:f2:
5b:9c:84:86:3e:d1:1b:c5:a4:2d:dd:8b:90:a5:71:87:19:3f:
ec:5e:42:0f:40:e4:3c:7d:a1:e1:f3:53:11:3c:18:5b:ad:2c:
02:69:c2:df:3e:06:22:29:fa:43:e2:e9:70:18:95:1a:db:be:
99:f0:22:b6:9f:21:66:05:68:7c:27:66:ff:ee:ed:f5:8a:f1:
94:ed:b7:65:c6:83:d6:c5:da:0d:93:11:2d:aa:07:a5:aa:e1:
c4:a8:ad:bc:ca:85:da:eb:17:5c:f7:29:08:1f:5b:ea:71:da:
20:df:53:19:39:a8:1d:fa:92:fb:ef:b3:a3:b2:0b:84:38:a3:
b1:d1:d5:2e:25:04:9f:65:38:f2:b3:5a:a2:ec:b6:87:fc:4d:
e2:b0:58:74:22:cc:a9:e7:3f:5c:3f:d1:78:43:e9:09:1a:84:
19:2a:07:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:13:42 2025 by rpki-client