Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214209.roa
File: AS214209.roa (raw, json)
Hash identifier: QZoMK8+vO8dQ8unXUs14/yNNq6xDJteBpfaTx45RuFE=
Subject key identifier: 22:98:F0:CD:69:D7:61:B6:F7:FE:4F:84:C0:6D:97:B0:E4:DE:E2:D1
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 06AB0FB2B00505F2FC9A2248BC6B350070E075C1
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214209.roa
Signing time: Mon 14 Sep 2026 12:31:28 +0000
ROA not before: Mon 14 Sep 2026 12:26:28 +0000
ROA not after: Mon 13 Sep 2027 12:31:28 +0000
asID: 214209
IP address blocks: 2a0f:9400:7e11::/48 maxlen: 48
2a0f:9400:7e15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ab:0f:b2:b0:05:05:f2:fc:9a:22:48:bc:6b:35:00:70:e0:75:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 14 12:26:28 2026 GMT
Not After : Sep 13 12:31:28 2027 GMT
Subject: CN=2298F0CD69D761B6F7FE4F84C06D97B0E4DEE2D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:4a:f2:5c:3c:9b:3c:ad:8f:13:31:ea:8b:
57:36:1d:69:ea:d0:bb:ab:59:28:8d:55:da:c5:ed:
09:89:e9:03:0f:88:b2:08:f8:04:2a:e2:c8:f9:06:
c6:f5:cd:f1:08:87:78:3f:89:82:81:f9:8a:9a:0d:
8b:b3:af:14:c9:a5:83:e3:92:b7:a1:73:8b:e9:86:
38:6f:83:ce:28:86:cc:33:7a:01:cf:8c:32:c6:40:
08:35:e2:05:7f:51:5e:27:bd:87:91:19:34:56:aa:
83:f8:39:c1:07:ec:1d:c0:bd:5d:9d:20:0d:5d:d0:
c5:26:8a:e9:19:b0:8d:92:79:af:33:7a:99:8a:4a:
1a:0e:a3:94:97:a0:81:2a:9b:82:59:e0:9f:bb:4e:
b5:a2:0d:5c:28:ec:d3:67:bf:1f:ef:dd:66:7e:f8:
a9:9a:de:aa:7c:05:67:0d:05:0c:0f:31:f4:c2:9c:
f1:b9:51:c7:5e:a8:8b:46:c1:82:0b:ff:4e:fc:32:
50:65:21:7e:3e:54:4b:30:8d:38:52:e4:b6:ac:6b:
f1:6b:67:f4:ef:25:75:6f:ed:a5:b5:41:fd:19:d3:
37:19:58:35:cf:f3:a9:fb:22:f2:dd:73:91:3c:70:
b8:d5:3d:7b:0d:59:41:65:1f:26:65:a1:37:63:91:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:98:F0:CD:69:D7:61:B6:F7:FE:4F:84:C0:6D:97:B0:E4:DE:E2:D1
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214209.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e11::/48
2a0f:9400:7e15::/48
Signature Algorithm: sha256WithRSAEncryption
cd:f9:93:9d:06:38:6e:02:6d:cb:b9:4c:dd:bb:e9:a7:4e:0b:
5c:e1:88:7b:3f:cc:64:55:2b:89:6e:2c:7a:21:6b:4d:8b:28:
16:db:b6:f7:db:56:22:72:60:23:34:35:4a:0c:3e:90:c8:82:
f2:cd:67:9b:11:e3:c7:e7:8e:ec:7a:d5:98:a3:d6:c3:e1:81:
7f:4e:b7:dc:8d:37:33:2b:c9:79:ea:57:79:a8:fc:47:20:50:
24:59:64:8f:93:57:79:27:b1:8c:5a:d4:45:08:25:4d:ac:d1:
dc:d9:12:14:0a:69:f4:3c:c7:2a:36:79:c3:15:3f:8c:bb:8e:
2f:38:ba:9a:8c:56:97:79:26:3f:5d:3e:20:1e:92:fe:af:5d:
dd:70:5b:21:62:84:cb:7d:c4:0e:85:45:14:0f:30:f7:63:b4:
4b:33:e5:95:89:c0:e3:ee:18:7d:96:d5:ba:4b:3e:a7:d3:dc:
dd:30:29:73:5d:45:67:69:28:2c:5f:d3:18:a0:47:b5:91:94:
b4:b1:3e:6d:44:24:48:b3:b7:51:01:0d:4f:f7:89:72:1f:bc:
7f:ef:eb:4e:b6:71:17:68:2c:e3:57:cc:4f:2c:30:02:ac:06:
38:4b:0a:c1:17:57:62:bf:29:46:bb:61:a2:c2:b3:b2:aa:41:
9f:2a:8c:de
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUBqsPsrAFBfL8miJIvGs1AHDgdcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjA5MTQxMjI2MjhaFw0yNzA5MTMxMjMxMjhaMDMxMTAvBgNV
BAMTKDIyOThGMENENjlENzYxQjZGN0ZFNEY4NEMwNkQ5N0IwRTRERUUyRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YEryXDybPK2PEzHqi1c2HWnq
0LurWSiNVdrF7QmJ6QMPiLII+AQq4sj5Bsb1zfEIh3g/iYKB+YqaDYuzrxTJpYPj
krehc4vphjhvg84ohswzegHPjDLGQAg14gV/UV4nvYeRGTRWqoP4OcEH7B3AvV2d
IA1d0MUmiukZsI2Sea8zepmKShoOo5SXoIEqm4JZ4J+7TrWiDVwo7NNnvx/v3WZ+
+Kma3qp8BWcNBQwPMfTCnPG5UcdeqItGwYIL/078MlBlIX4+VEswjThS5Lasa/Fr
Z/TvJXVv7aW1Qf0Z0zcZWDXP86n7IvLdc5E8cLjVPXsNWUFlHyZloTdjkURnAgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQUIpjwzWnXYbb3/k+EwG2XsOTe4tEwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxNDIwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggr
BgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoPlAB+EQMHACoPlAB+FTANBgkqhkiG
9w0BAQsFAAOCAQEAzfmTnQY4bgJty7lM3bvpp04LXOGIez/MZFUriW4seiFrTYso
Ftu299tWInJgIzQ1Sgw+kMiC8s1nmxHjx+eO7HrVmKPWw+GBf0633I03MyvJeepX
eaj8RyBQJFlkj5NXeSexjFrURQglTazR3NkSFApp9DzHKjZ5wxU/jLuOLzi6moxW
l3kmP10+IB6S/q9d3XBbIWKEy33EDoVFFA8w92O0SzPllYnA4+4YfZbVuks+p9Pc
3TApc11FZ2koLF/TGKBHtZGUtLE+bUQkSLO3UQENT/eJch+8f+/rTrZxF2gs41fM
TywwAqwGOEsKwRdXYr8pRrthosKzsqpBnyqM3g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:10:08 2026 by rpki-client