Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213323.roa
File: AS213323.roa (raw, json)
Hash identifier: Mle/SRztKJTFoGJOANZr5B3sO7BsgifNA99oSvyFVp8=
Subject key identifier: 71:69:23:C9:0C:B3:BC:69:F2:79:28:4E:83:34:98:2B:D6:96:47:67
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 20FA0E2D84EA5240D9D7515E79FC6A7696DA3FD8
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213323.roa
Signing time: Wed 18 Feb 2026 08:16:18 +0000
ROA not before: Wed 18 Feb 2026 08:11:18 +0000
ROA not after: Wed 17 Feb 2027 08:16:18 +0000
asID: 213323
IP address blocks: 2a0f:9400:610b::/48 maxlen: 48
2a0f:9400:610f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:fa:0e:2d:84:ea:52:40:d9:d7:51:5e:79:fc:6a:76:96:da:3f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 18 08:11:18 2026 GMT
Not After : Feb 17 08:16:18 2027 GMT
Subject: CN=716923C90CB3BC69F279284E8334982BD6964767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d5:0d:f6:b9:a4:3a:15:12:1f:3b:1b:0e:02:
85:e1:c2:38:9d:12:ef:a2:40:de:e8:1d:80:8b:a7:
ba:92:3f:bb:4f:8b:29:27:41:28:39:38:d6:36:c5:
45:e7:2a:cc:bb:12:5e:86:0c:91:ac:79:e8:e0:ab:
e7:93:a7:ab:92:0a:a0:a9:7f:05:5d:aa:0c:29:43:
3c:a3:40:4d:d3:a5:b5:f2:96:2b:25:e4:98:87:4e:
61:fb:31:f2:8c:11:be:26:7a:d6:41:61:2f:37:2f:
7c:57:45:b5:26:a6:df:2c:30:7c:f9:03:2a:e4:40:
40:43:e6:74:ac:ac:a4:e2:92:9c:55:83:7f:ae:61:
d0:ee:29:94:64:61:f0:d3:d9:c0:3c:96:9f:1c:ba:
52:95:6a:3d:60:14:71:f4:04:ee:94:99:08:78:df:
6d:72:18:da:f5:33:60:48:99:3d:fa:2f:15:bb:50:
a8:6b:55:d2:07:d9:ac:75:b6:b8:1d:6a:42:58:0d:
c7:60:60:3e:75:d3:19:22:c3:0e:7f:39:28:f2:ea:
46:80:56:ef:d0:3b:1c:80:99:fe:cf:c7:ec:70:23:
6f:8f:fe:bc:5f:05:f1:a4:90:7f:07:e0:ae:ea:8e:
38:25:9b:da:65:60:14:21:9e:da:58:29:67:3c:aa:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:69:23:C9:0C:B3:BC:69:F2:79:28:4E:83:34:98:2B:D6:96:47:67
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610b::/48
2a0f:9400:610f::/48
Signature Algorithm: sha256WithRSAEncryption
cb:17:31:91:c5:aa:16:56:13:ea:80:93:a0:f7:8a:ed:14:7d:
60:76:d3:ea:13:0a:df:9b:8f:87:0a:84:b0:30:ac:15:56:d3:
ff:8a:25:35:50:4d:cb:1e:1a:3e:a9:4c:e3:96:00:04:b1:76:
34:df:2c:d8:ca:ae:dd:84:bd:12:72:1c:47:b1:b2:df:26:de:
02:d7:ed:47:64:bc:01:b1:93:39:35:92:af:88:aa:91:e4:af:
18:60:38:56:06:2f:64:af:6a:0b:34:1f:92:ab:52:8a:57:f7:
68:12:c3:12:c6:c8:53:51:a4:d7:8d:ce:76:78:10:38:52:67:
04:85:9a:76:21:65:2d:27:5f:90:ff:a2:f5:ea:59:08:23:d9:
df:c2:74:14:e3:9c:d0:2f:aa:4e:88:a8:31:4e:8a:83:62:46:
62:23:13:a1:ca:18:b7:2f:f3:a6:17:0d:f8:4c:37:a1:67:98:
ad:5b:e9:56:5f:ce:79:15:25:c8:c7:65:72:d0:9e:c0:49:1a:
a9:d3:af:9e:fa:25:eb:12:35:83:3f:12:44:ef:53:93:d4:ae:
74:17:0a:9e:62:42:48:78:09:e6:b9:e5:4d:fc:35:19:f7:03:
ea:37:e4:fd:5f:64:79:93:c9:f2:ab:cf:e3:3d:83:b7:33:bc:
d2:c0:4c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:59:42 2026 by rpki-client