Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
File: AS210718.roa (raw, json)
Hash identifier: ssBVSxWVw/26uUAS5N7SqXjSpGcAZ8FEqhfYIF7VSAY=
Subject key identifier: 9F:CB:04:FB:B7:7D:9B:BF:6E:68:52:0C:10:05:38:91:C5:5E:5E:36
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2A8EA9081259CA24718E2A8BF639BF67CA793249
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
Signing time: Fri 16 Jan 2026 08:01:21 +0000
ROA not before: Fri 16 Jan 2026 07:56:21 +0000
ROA not after: Fri 15 Jan 2027 08:01:21 +0000
asID: 210718
IP address blocks: 2a0f:9400:7e01::/48 maxlen: 48
2a0f:9400:7e02::/48 maxlen: 48
2a0f:9400:7e06::/48 maxlen: 48
2a0f:9400:7e07::/48 maxlen: 48
2a0f:9400:7e08::/48 maxlen: 48
2a0f:9400:7e17::/48 maxlen: 48
2a0f:9400:7e18::/48 maxlen: 48
2a0f:9400:7e50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:8e:a9:08:12:59:ca:24:71:8e:2a:8b:f6:39:bf:67:ca:79:32:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jan 16 07:56:21 2026 GMT
Not After : Jan 15 08:01:21 2027 GMT
Subject: CN=9FCB04FBB77D9BBF6E68520C10053891C55E5E36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:8b:38:67:38:e9:4b:96:0f:e3:fc:50:65:
ad:07:da:be:e9:cb:65:60:25:34:1a:21:32:f7:a4:
0c:21:b3:63:00:06:ad:a1:33:5e:00:43:5b:da:1e:
8a:8b:a4:4f:d6:fe:fe:0d:bc:3c:b5:8c:5a:35:93:
5e:f4:0f:33:a7:99:5d:5a:08:eb:02:1d:59:3b:f2:
d7:76:9d:be:eb:f9:aa:5a:d7:f4:b1:f4:5d:b3:4d:
82:51:b2:88:45:48:e3:c3:6b:5f:19:2a:db:90:28:
95:8f:f9:68:0f:de:25:bb:3f:70:fd:d7:cb:0e:b7:
c7:a3:32:b2:85:33:95:cd:06:b8:dc:78:42:19:0f:
27:5e:15:52:e8:f0:f8:9f:a0:af:86:b6:17:e0:75:
33:99:41:67:38:ee:3c:05:6e:43:5e:28:d6:5d:8d:
fb:4b:81:9f:c6:ef:ff:86:a0:b6:fa:d2:4c:9f:28:
5e:cd:25:c3:6f:89:0b:0a:cf:a6:c1:2a:e2:43:55:
1d:1a:cc:38:c3:80:05:24:75:b7:7a:ed:7d:4c:e9:
9f:e7:cc:ca:56:6c:35:a9:3b:54:b2:bd:d8:3e:e4:
24:dd:f6:f4:4e:6a:03:2e:c9:fd:d1:96:a0:62:07:
3a:60:84:b4:d8:00:28:3c:42:b4:e0:53:ec:f8:62:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:04:FB:B7:7D:9B:BF:6E:68:52:0C:10:05:38:91:C5:5E:5E:36
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e01::-2a0f:9400:7e02:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7e06::-2a0f:9400:7e08:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7e17::-2a0f:9400:7e18:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7e50::/48
Signature Algorithm: sha256WithRSAEncryption
d1:63:81:31:a4:a5:d4:9a:1a:ee:50:84:7a:07:77:20:8d:fc:
40:0d:d5:1b:5c:62:57:65:32:5e:2e:a7:24:e4:d4:f5:dc:63:
37:27:97:4a:ae:5e:ee:e9:d9:5c:16:f1:1a:5a:48:d6:62:db:
d8:96:50:1a:6c:73:90:f7:55:46:17:3f:64:a7:27:5f:0a:3b:
d1:f7:85:04:00:ee:64:1b:ab:c8:4a:6b:25:b4:f5:58:6d:c5:
0f:06:76:80:b2:f6:46:b6:46:25:67:73:51:0e:e3:fa:f8:d2:
53:19:f8:db:e5:ef:bc:c7:68:de:3a:a7:19:06:f3:32:d2:fd:
6f:3f:d1:c4:01:a7:7e:d8:ad:33:a2:d4:15:db:6e:48:10:67:
c5:d8:b8:55:d5:78:c0:90:77:4e:9f:5f:af:19:71:3e:e6:b7:
9d:73:77:91:39:9d:ef:d5:c0:84:5a:f4:7a:72:f7:1e:55:2d:
32:9e:7a:88:20:40:eb:9f:6f:8a:9b:9c:6b:14:aa:34:49:5e:
6c:a7:07:6e:c3:30:b1:1f:f5:08:f2:ea:d1:93:a7:76:90:51:
b7:64:13:b4:a9:d0:f2:24:28:4e:75:24:b1:fc:4d:f4:41:50:
df:45:4a:d3:22:b7:f9:24:13:1d:41:ea:77:5a:96:70:4c:c4:
a8:ea:fd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:59:40 2026 by rpki-client