Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213186.roa
File: AS213186.roa (raw, json)
Hash identifier: QPhjuT5tJAnYrcC6WADL9PrFQflTZ5Bi27cdT0WkTVc=
Subject key identifier: F9:6B:5E:87:ED:9B:DA:AD:85:B4:BE:E7:22:ED:79:63:86:DE:A5:41
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4139035892DCACBC38798095C42D1FBDE0921EEC
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213186.roa
Signing time: Mon 30 Mar 2026 17:18:43 +0000
ROA not before: Mon 30 Mar 2026 17:13:43 +0000
ROA not after: Mon 29 Mar 2027 17:18:43 +0000
asID: 213186
IP address blocks: 2a0f:9400:6161::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:39:03:58:92:dc:ac:bc:38:79:80:95:c4:2d:1f:bd:e0:92:1e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 30 17:13:43 2026 GMT
Not After : Mar 29 17:18:43 2027 GMT
Subject: CN=F96B5E87ED9BDAAD85B4BEE722ED796386DEA541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:e4:78:53:72:0f:71:a2:c3:93:ee:0b:8a:
2b:e1:27:6e:a3:43:87:e1:7b:7c:f1:a5:ce:64:f6:
72:e1:a4:7b:66:84:3b:e4:aa:4e:46:7d:c3:90:c3:
10:f4:46:bb:d7:a0:77:46:ef:2f:d7:ab:22:73:98:
0b:11:c1:b4:80:06:97:a2:88:d1:22:8d:28:d5:30:
ac:9c:2c:6b:3b:e4:7b:c6:fb:57:8d:6a:74:5d:ca:
4d:e5:39:f5:e1:dd:5b:e9:cc:6e:3f:95:c8:3a:82:
78:4d:d0:9c:1d:de:96:d7:01:98:bb:0d:55:fa:c1:
47:14:0d:d3:a6:7e:f2:d1:ae:84:2e:17:99:1e:e8:
21:13:67:b7:41:78:3f:48:06:db:13:4b:99:6f:cd:
2a:e3:65:9c:c4:f2:30:94:68:33:2a:db:56:47:a7:
46:56:24:3a:83:57:87:9a:9b:33:45:cc:5b:92:74:
81:77:67:00:55:84:35:dc:f0:ee:2b:5a:b4:14:59:
50:9f:e3:d6:61:84:b1:fb:bc:85:39:2c:91:86:ed:
1b:84:e0:75:ad:c9:3f:d5:ba:b7:0b:db:9f:c0:fd:
36:26:45:00:ff:15:86:93:43:ba:b5:65:96:6c:ad:
f5:1c:ab:1e:f2:e1:66:23:74:74:3a:f3:d0:4b:21:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6B:5E:87:ED:9B:DA:AD:85:B4:BE:E7:22:ED:79:63:86:DE:A5:41
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6161::/48
Signature Algorithm: sha256WithRSAEncryption
a0:94:22:79:88:23:c4:c2:8f:58:a4:f2:ee:43:a5:e9:3b:95:
dd:c7:c4:5f:90:0b:a3:d9:50:03:17:09:e6:16:31:60:e6:c9:
ad:ba:48:a0:02:fc:92:10:6b:2d:3a:f1:91:d7:2b:4e:07:15:
3f:65:78:98:54:32:e7:04:45:48:c9:6c:4f:46:17:14:fb:c3:
1e:b6:02:cb:fe:9b:ca:44:b8:3c:93:96:45:0e:c9:91:e6:d9:
74:6f:84:9c:dd:94:9e:b7:7a:c2:98:12:d8:44:23:b1:8b:1c:
cc:4c:66:64:46:d2:85:19:35:79:61:f9:d0:62:9b:60:38:1e:
e7:d1:79:38:b8:5d:43:20:fc:34:b9:92:83:d4:ed:44:cb:93:
6f:dc:1e:a4:84:15:8f:fb:89:15:1b:68:4e:2d:c8:77:0e:d0:
0f:b6:72:5a:18:f6:75:6f:65:37:2c:b8:3e:ce:a1:e3:df:4f:
ed:5c:18:35:62:c9:fe:1f:57:d2:cb:9d:51:ad:12:ea:bd:c8:
4f:e0:dc:92:cc:41:e2:f8:15:0a:9a:73:98:e1:38:a9:0e:a4:
88:de:21:dd:fc:c3:4f:36:de:99:69:81:19:18:ad:14:ef:f1:
ed:4b:55:e5:0a:ed:a2:18:b3:73:5b:2c:de:3b:cb:93:8f:fc:
f6:79:33:1d
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUQTkDWJLcrLw4eYCVxC0fveCSHuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjAzMzAxNzEzNDNaFw0yNzAzMjkxNzE4NDNaMDMxMTAvBgNV
BAMTKEY5NkI1RTg3RUQ5QkRBQUQ4NUI0QkVFNzIyRUQ3OTYzODZERUE1NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxz+R4U3IPcaLDk+4LiivhJ26j
Q4fhe3zxpc5k9nLhpHtmhDvkqk5GfcOQwxD0RrvXoHdG7y/XqyJzmAsRwbSABpei
iNEijSjVMKycLGs75HvG+1eNanRdyk3lOfXh3VvpzG4/lcg6gnhN0Jwd3pbXAZi7
DVX6wUcUDdOmfvLRroQuF5ke6CETZ7dBeD9IBtsTS5lvzSrjZZzE8jCUaDMq21ZH
p0ZWJDqDV4eamzNFzFuSdIF3ZwBVhDXc8O4rWrQUWVCf49ZhhLH7vIU5LJGG7RuE
4HWtyT/VurcL25/A/TYmRQD/FYaTQ7q1ZZZsrfUcqx7y4WYjdHQ689BLIU0bAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQU+Wteh+2b2q2FtL7nIu15Y4bepUEwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMzE4Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhYTANBgkqhkiG9w0BAQsFAAOC
AQEAoJQieYgjxMKPWKTy7kOl6TuV3cfEX5ALo9lQAxcJ5hYxYObJrbpIoAL8khBr
LTrxkdcrTgcVP2V4mFQy5wRFSMlsT0YXFPvDHrYCy/6bykS4PJOWRQ7JkebZdG+E
nN2Unrd6wpgS2EQjsYsczExmZEbShRk1eWH50GKbYDge59F5OLhdQyD8NLmSg9Tt
RMuTb9wepIQVj/uJFRtoTi3Idw7QD7ZyWhj2dW9lNyy4Ps6h499P7VwYNWLJ/h9X
0sudUa0S6r3IT+DcksxB4vgVCppzmOE4qQ6kiN4h3fzDTzbemWmBGRitFO/x7UtV
5Qrtohizc1ss3jvLk4/89nkzHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:09:18 2026 by rpki-client