Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS402270.roa
File: AS402270.roa (raw, json)
Hash identifier: Nbr/T1MGglIOlOt9GI1j5osDMchaNy+EH97bqBbQ8bA=
Subject key identifier: 83:2A:95:1F:A5:D0:35:29:F9:19:09:5E:57:8B:AD:C1:B2:DA:6E:29
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 403C158C218DF76D0B8468E7FA318BE0701F23C7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS402270.roa
Signing time: Wed 25 Mar 2026 16:25:06 +0000
ROA not before: Wed 25 Mar 2026 16:20:06 +0000
ROA not after: Wed 24 Mar 2027 16:25:06 +0000
asID: 402270
IP address blocks: 2a0f:9400:6800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:3c:15:8c:21:8d:f7:6d:0b:84:68:e7:fa:31:8b:e0:70:1f:23:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 25 16:20:06 2026 GMT
Not After : Mar 24 16:25:06 2027 GMT
Subject: CN=832A951FA5D03529F919095E578BADC1B2DA6E29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:15:d0:c8:c4:bd:c7:83:ec:b4:78:47:91:
d5:d7:36:2b:1b:02:24:7e:21:66:8d:34:af:ff:78:
32:0d:b0:89:13:6c:6a:41:2c:04:18:8e:a4:ef:fc:
b4:c1:ad:1c:bf:0e:cf:ab:45:18:31:6e:83:06:9d:
db:32:9f:69:c3:61:68:76:9f:b0:f5:f9:c8:dd:67:
6e:20:79:61:e6:e6:56:45:41:4e:6f:39:87:62:46:
97:42:de:e4:66:0e:fc:99:9c:e2:c4:b0:f5:0c:70:
68:b2:0d:38:8c:52:60:bb:29:2f:f5:1c:7d:91:71:
93:9d:48:62:37:88:bc:fc:33:7b:b3:a0:6a:99:40:
90:93:18:7e:2b:91:2b:f7:34:94:31:7e:8b:22:f9:
c3:96:dc:4e:d2:b8:a1:d5:6f:14:88:14:a0:5a:51:
34:69:94:e5:f9:f3:c9:37:27:88:5e:cd:b6:79:a6:
2b:a7:7e:10:e7:f3:e3:c9:6a:5f:2e:32:71:b9:af:
04:5e:f2:68:51:40:d8:36:a2:9e:2d:06:41:ff:48:
22:78:63:aa:71:25:f5:69:ff:cf:65:0c:ec:ee:3a:
28:a0:7d:61:5a:f9:5e:0a:70:1b:a9:54:65:19:dc:
64:ac:0c:fe:8b:66:14:e1:00:1f:1b:52:1c:0a:7b:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2A:95:1F:A5:D0:35:29:F9:19:09:5E:57:8B:AD:C1:B2:DA:6E:29
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS402270.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6800::/40
Signature Algorithm: sha256WithRSAEncryption
5a:cc:ef:f7:9d:f0:c4:09:56:62:27:65:01:da:59:a0:a6:24:
b2:95:c7:6c:e9:db:42:f4:fd:f4:83:ba:ce:22:7f:31:f7:76:
03:96:0c:f4:a0:be:99:92:bb:01:5d:ab:85:25:e7:fe:b2:e5:
4e:1f:ac:0a:7d:bc:74:fc:e2:1f:ad:33:7c:1d:11:b2:18:22:
9a:e2:9b:8d:7c:dc:b4:54:03:fa:c1:e5:f1:00:38:9b:61:f6:
d2:34:85:ad:b7:ea:c0:bd:e2:24:ad:8b:cf:60:56:d2:63:34:
f0:ab:83:43:fe:70:ba:66:85:f7:7c:87:12:54:b3:e8:50:5b:
55:66:14:7d:0d:63:91:85:bd:e4:a8:3d:34:66:99:0d:9b:ba:
81:ff:a9:55:ec:46:6d:c9:05:4f:7b:e0:c5:ef:f0:0c:24:3a:
a7:a5:6d:9e:8e:63:11:ff:a4:e3:e3:b8:6a:61:60:3e:1a:48:
81:61:3d:d4:3f:48:84:2c:50:be:52:8f:42:02:97:c6:ca:79:
a6:a8:c4:25:5e:54:36:5f:6f:de:45:ea:bb:92:ea:9f:3f:c1:
b8:9e:66:6b:52:18:75:c4:88:21:39:c4:65:3e:dd:7e:8a:df:
ea:37:e1:76:14:9b:06:64:46:dd:83:94:cb:e2:14:62:af:81:
c5:12:b8:bd
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUQDwVjCGN920LhGjn+jGL4HAfI8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjAzMjUxNjIwMDZaFw0yNzAzMjQxNjI1MDZaMDMxMTAvBgNV
BAMTKDgzMkE5NTFGQTVEMDM1MjlGOTE5MDk1RTU3OEJBREMxQjJEQTZFMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+MRXQyMS9x4PstHhHkdXXNisb
AiR+IWaNNK//eDINsIkTbGpBLAQYjqTv/LTBrRy/Ds+rRRgxboMGndsyn2nDYWh2
n7D1+cjdZ24geWHm5lZFQU5vOYdiRpdC3uRmDvyZnOLEsPUMcGiyDTiMUmC7KS/1
HH2RcZOdSGI3iLz8M3uzoGqZQJCTGH4rkSv3NJQxfosi+cOW3E7SuKHVbxSIFKBa
UTRplOX588k3J4hezbZ5piunfhDn8+PJal8uMnG5rwRe8mhRQNg2op4tBkH/SCJ4
Y6pxJfVp/89lDOzuOiigfWFa+V4KcBupVGUZ3GSsDP6LZhThAB8bUhwKe3ITAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUgyqVH6XQNSn5GQleV4utwbLabikwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzQwMjI3MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoPlABoMA0GCSqGSIb3DQEBCwUAA4IB
AQBazO/3nfDECVZiJ2UB2lmgpiSylcds6dtC9P30g7rOIn8x93YDlgz0oL6ZkrsB
XauFJef+suVOH6wKfbx0/OIfrTN8HRGyGCKa4puNfNy0VAP6weXxADibYfbSNIWt
t+rAveIkrYvPYFbSYzTwq4ND/nC6ZoX3fIcSVLPoUFtVZhR9DWORhb3kqD00ZpkN
m7qB/6lV7EZtyQVPe+DF7/AMJDqnpW2ejmMR/6Tj47hqYWA+GkiBYT3UP0iELFC+
Uo9CApfGynmmqMQlXlQ2X2/eReq7kuqfP8G4nmZrUhh1xIghOcRlPt1+it/qN+F2
FJsGZEbdg5TL4hRir4HFEri9
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:16:45 2026 by rpki-client