Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212450.roa
File: AS212450.roa (raw, json)
Hash identifier: WTj1Y1kcXmHpC1+KuJyV2UXmVF0odBj9F1K1V5LPDUg=
Subject key identifier: E1:62:35:12:B4:DE:2B:6E:36:17:E4:03:03:88:2E:CF:13:0B:6C:13
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 241BE82BFB648F2C65DAE8937F83113BDF7D631B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212450.roa
Signing time: Fri 03 Apr 2026 18:20:23 +0000
ROA not before: Fri 03 Apr 2026 18:15:23 +0000
ROA not after: Fri 02 Apr 2027 18:20:23 +0000
asID: 212450
IP address blocks: 2a0f:9400:693c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:1b:e8:2b:fb:64:8f:2c:65:da:e8:93:7f:83:11:3b:df:7d:63:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 3 18:15:23 2026 GMT
Not After : Apr 2 18:20:23 2027 GMT
Subject: CN=E1623512B4DE2B6E3617E40303882ECF130B6C13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:27:7d:fe:2f:54:99:1a:d2:d1:d9:e7:bc:
f1:fe:06:43:b5:83:3d:88:b8:7a:9d:a9:0b:7e:da:
ab:0d:69:c6:54:58:7c:c1:8e:90:d2:49:4a:6c:f0:
57:5c:e0:0e:ae:9d:d1:4c:ac:69:d2:8b:52:f2:5b:
33:9d:bc:23:24:77:0a:36:d6:e1:7a:04:e0:d2:f2:
b0:af:5b:89:e8:c2:05:95:e7:7a:4a:90:77:a0:e7:
85:1f:64:5c:fe:ff:de:85:4f:ee:54:04:e7:e4:d6:
8c:73:40:4d:9f:93:fa:20:3b:22:64:74:6d:f1:d9:
0b:ae:5d:cc:50:90:06:9e:66:a0:4f:df:04:62:e7:
51:1e:40:18:00:6a:34:9b:8b:96:6c:5c:46:b8:62:
d3:b6:32:83:62:22:ac:42:9c:c1:a0:2d:0d:a3:e0:
c7:9f:e3:ae:e4:d9:bb:7f:2c:66:ca:85:90:16:d2:
5d:bb:de:5f:06:42:c7:da:74:65:98:45:91:dd:bf:
00:d0:b0:51:0d:42:b6:25:98:48:39:e5:04:da:0b:
2b:65:28:c6:67:c8:f0:02:2d:ca:b3:dc:b4:70:c3:
e2:9c:5e:70:63:a0:96:27:a9:a3:03:f6:ea:fb:d0:
40:cc:28:39:79:58:42:7d:21:19:86:34:14:4b:6b:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:62:35:12:B4:DE:2B:6E:36:17:E4:03:03:88:2E:CF:13:0B:6C:13
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212450.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:693c::/48
Signature Algorithm: sha256WithRSAEncryption
bc:ea:98:a6:1d:ba:1b:2e:5c:d3:3a:30:89:f9:71:a6:13:d2:
c3:72:10:da:c1:22:6a:91:b0:96:99:63:01:93:95:35:8c:0e:
67:81:32:79:d7:92:9a:c4:4b:77:ad:b6:8c:e0:82:c6:10:88:
47:1a:02:e0:23:9b:36:a3:a4:90:c8:29:5f:00:e6:ca:d8:5c:
d8:af:a1:fd:2c:f8:62:81:76:1b:be:bb:ed:7b:92:8b:34:7e:
8c:be:ef:9f:2c:51:a9:a3:30:a5:8b:6b:eb:b0:cd:2c:1f:c9:
1a:c0:09:49:53:62:94:45:f6:cf:8d:9a:74:e1:d9:83:45:bb:
9c:54:dc:96:b8:3a:8e:64:0e:23:d6:1e:6e:41:71:56:c5:fc:
b5:7f:ab:32:dc:e9:ff:3c:f1:a3:18:0d:15:17:b7:29:2f:5b:
bb:f4:f9:26:20:a7:5e:0f:25:cf:f8:a2:b4:1a:fd:0f:d5:72:
3e:97:69:d6:8b:db:55:f3:cb:8f:03:a0:d6:44:ab:1a:12:9b:
ae:c8:d5:8a:68:fb:0a:36:54:94:4c:fb:85:c1:25:a7:ea:7b:
52:21:72:1f:bb:a7:75:57:6c:00:05:d4:73:b7:98:50:29:b9:
68:b3:36:27:21:ef:06:6f:76:b6:8f:db:da:c6:9b:0e:b0:e5:
26:68:72:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:09:15 2026 by rpki-client