Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS218868.roa
File: AS218868.roa (raw, json)
Hash identifier: 2XSThe3kGSR/4VyNTkxXP9/d/WQougKyMudUGRiJbcY=
Subject key identifier: 25:A0:41:08:D6:67:66:5A:49:30:DD:84:40:57:0D:CA:DA:D6:1F:A1
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2552F36E4A215FC4EED6C94066D9F7F07948629A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS218868.roa
Signing time: Wed 28 Oct 2026 16:19:43 +0000
ROA not before: Wed 28 Oct 2026 16:14:43 +0000
ROA not after: Wed 27 Oct 2027 16:19:43 +0000
asID: 218868
IP address blocks: 2a0f:9400:e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:52:f3:6e:4a:21:5f:c4:ee:d6:c9:40:66:d9:f7:f0:79:48:62:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 28 16:14:43 2026 GMT
Not After : Oct 27 16:19:43 2027 GMT
Subject: CN=25A04108D667665A4930DD8440570DCADAD61FA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:02:f0:63:6a:02:ef:b4:74:2a:cf:7f:0f:
fa:e6:35:63:6a:bf:2b:5d:31:66:8d:73:38:55:40:
0e:ab:9c:c4:95:c2:74:d7:c5:43:b1:f6:6e:04:9e:
90:4e:8b:67:b7:b8:27:47:c6:22:b4:1b:89:13:eb:
13:81:d4:15:97:45:2c:02:ab:7a:bd:9c:5e:90:06:
8f:24:b6:bd:c5:ba:61:e7:e4:6e:53:95:dd:75:8d:
5a:05:44:d9:a2:cd:c8:76:96:c0:05:52:5b:47:01:
3b:f6:30:10:c0:10:a8:67:35:2e:73:64:b7:27:6b:
4f:10:bd:58:1e:70:ed:75:14:34:89:f4:23:4c:ca:
cd:8d:93:53:4c:d2:12:ba:37:1f:7e:b4:22:04:14:
3f:c2:56:e3:81:8f:cd:78:3d:bf:79:7e:5a:f7:bc:
45:d9:ab:cc:aa:51:1a:86:93:1d:4b:9d:d5:0b:9a:
6f:31:e3:2c:e3:01:41:d8:4a:68:b1:25:5a:95:64:
96:27:f1:a5:76:63:86:7f:f7:1a:aa:1c:36:e6:c3:
46:0c:d2:2b:04:74:2c:06:fa:f9:a3:69:e8:33:3a:
d1:e1:85:83:7a:3b:a7:fa:9a:4f:21:f2:e4:65:a0:
ff:6a:05:ca:a8:3e:d6:dc:3e:37:7c:94:c2:2a:95:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A0:41:08:D6:67:66:5A:49:30:DD:84:40:57:0D:CA:DA:D6:1F:A1
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS218868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:e00::/40
Signature Algorithm: sha256WithRSAEncryption
7d:b7:90:e1:e1:c1:75:88:f4:47:0c:b9:7e:ba:21:37:8a:b6:
a5:44:3a:89:32:c4:3e:e9:77:5d:23:bd:23:8b:b5:a3:d3:43:
a0:0e:09:14:8a:75:2e:e3:f2:38:7a:54:1c:0f:83:ff:fc:af:
8a:f4:fe:6d:04:bd:c0:31:9e:71:3e:61:5c:de:fe:eb:4a:2e:
5c:62:61:f0:b9:55:35:60:fa:df:33:9d:85:1d:02:ee:de:5c:
ce:9b:12:d0:89:8a:7c:dc:b1:bc:38:f4:0d:69:f7:9a:63:2c:
51:0f:3f:5d:81:2c:1d:f7:cc:2f:73:8a:ea:07:60:49:ec:05:
f1:a2:5b:54:67:ce:25:8c:7d:4d:09:c6:44:c8:59:ad:0d:0f:
49:be:d4:0a:37:a2:ce:fa:b0:4b:6a:4a:5c:fe:48:80:8a:96:
7d:88:7d:c8:38:22:2c:25:b1:56:cf:a8:c1:e3:dc:6c:02:0e:
27:02:6a:c9:e6:2a:41:d7:78:73:93:8f:bf:77:91:4a:05:1c:
80:34:f1:74:11:24:e7:6a:5c:d3:82:bc:74:97:f9:02:97:1b:
5a:c4:88:47:9c:26:17:d6:8e:7b:65:ba:28:f7:a8:01:02:46:
26:b9:ff:08:d6:97:eb:cd:bf:20:d0:9c:9a:53:ec:da:a2:9a:
8a:02:d4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 08:38:13 2026 by rpki-client