Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213092.roa
File: AS213092.roa (raw, json)
Hash identifier: IRgF1mV8MgmU6Sy80HZExWsfR7VhsX2/2ygQBROsLfo=
Subject key identifier: 94:E9:E5:96:5E:02:CF:54:6E:21:19:17:D0:1F:52:53:E0:31:EA:2E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 452FC544E51644EDF59E8891FDACE774E5F10126
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213092.roa
Signing time: Mon 23 Feb 2026 03:48:22 +0000
ROA not before: Mon 23 Feb 2026 03:43:22 +0000
ROA not after: Mon 22 Feb 2027 03:48:22 +0000
asID: 213092
IP address blocks: 2a0f:9400:6145::/48 maxlen: 48
2a0f:9400:7370::/44 maxlen: 48
2a0f:9400:7370::/48 maxlen: 48
2a0f:9400:7376::/48 maxlen: 48
2a0f:9400:7379::/48 maxlen: 48
2a0f:9400:737a::/48 maxlen: 48
2a0f:9400:737c::/48 maxlen: 48
2a0f:9400:737d::/48 maxlen: 48
2a0f:9400:8023::/48 maxlen: 48
2a0f:9400:8026::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:2f:c5:44:e5:16:44:ed:f5:9e:88:91:fd:ac:e7:74:e5:f1:01:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 23 03:43:22 2026 GMT
Not After : Feb 22 03:48:22 2027 GMT
Subject: CN=94E9E5965E02CF546E211917D01F5253E031EA2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:d8:0e:8f:73:5a:0d:9b:23:19:8f:b8:a6:
3c:fe:83:0b:10:a0:68:14:97:08:c8:04:aa:a6:87:
7d:76:08:ef:23:bc:45:df:e8:1d:1a:3c:dc:c4:ef:
64:8a:77:6c:ac:fd:ef:03:d0:bc:3f:94:b9:47:8a:
5e:69:aa:b1:cd:3b:ba:9d:62:1d:68:0a:1f:a0:76:
90:b4:4d:89:a0:d7:6c:ad:c5:f2:9a:26:e8:66:46:
2e:30:3f:d8:1e:60:90:20:5b:3c:46:a1:f5:9c:55:
4d:52:62:ad:e1:ab:a2:4c:86:59:b8:cd:69:2b:be:
5f:0c:64:a4:00:a0:17:73:a8:7f:80:86:a4:90:3f:
9b:63:50:98:9c:e8:bb:d6:e7:1f:0f:1e:2f:c0:da:
a4:b6:32:79:b5:dc:21:64:ee:8a:7e:54:93:23:51:
9e:3f:22:5f:9e:ed:07:fc:71:aa:ab:6d:6a:60:c6:
fb:96:7a:df:9c:06:18:38:e3:b4:dd:93:3f:34:b5:
d9:bd:31:d1:3f:3a:9a:a6:6c:d5:74:54:d0:7f:54:
16:61:47:91:40:29:6f:9a:eb:46:5a:cc:92:ab:4a:
74:ad:5d:9a:04:7f:5d:cf:83:ff:0e:65:a1:80:b6:
d1:e9:99:ff:48:e7:ee:de:51:84:f5:29:4a:5d:f1:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E9:E5:96:5E:02:CF:54:6E:21:19:17:D0:1F:52:53:E0:31:EA:2E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6145::/48
2a0f:9400:7370::/44
2a0f:9400:8023::/48
2a0f:9400:8026::/48
Signature Algorithm: sha256WithRSAEncryption
95:47:cd:6c:72:0a:1a:e1:59:06:12:d9:c1:68:f7:f3:40:76:
a7:a6:d6:f1:a2:fb:64:b3:b5:fb:79:9e:00:12:82:53:f0:c9:
12:39:7c:64:f6:2a:9e:1a:bc:c1:a6:dd:c0:64:73:d9:60:c3:
71:a6:a9:08:dc:04:b0:76:1f:15:2a:23:b3:72:d9:1e:af:b3:
51:b8:bc:40:18:75:3e:97:0e:31:f1:f6:ef:1d:69:e3:07:d7:
b6:f9:b3:90:b0:27:04:e6:fa:f6:8d:2f:a1:95:0f:0a:67:dc:
d5:97:c4:96:1f:1f:83:22:da:e6:69:1b:a7:77:72:9a:01:71:
70:7d:5d:bb:93:fa:80:38:eb:38:10:d4:75:f8:5d:e5:88:28:
2a:27:f2:d2:ee:1c:95:13:da:52:eb:ed:5e:11:ec:c9:de:a9:
52:8b:c5:3a:9d:39:02:5a:bc:bd:6b:cd:b9:b5:d7:9a:16:cb:
0e:52:b3:20:97:88:8e:87:dc:8a:9a:96:2c:2f:f3:e7:3a:6e:
44:b1:e7:8c:c9:e7:79:1f:5b:3f:a8:18:10:9f:f4:82:99:3f:
3b:41:67:b1:36:61:dd:17:22:a1:4b:f3:c2:e7:3b:b3:b5:72:
09:33:52:25:3a:2e:27:93:b2:18:63:a3:c3:34:27:a6:d0:ef:
e0:fe:7f:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:12:54 2026 by rpki-client