Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214344.roa
File: AS214344.roa (raw, json)
Hash identifier: BnyLBneml/g7+94zJtqi4wcWoJmKsJCauiaWpqBwvEw=
Subject key identifier: A9:15:3D:76:88:E1:A6:C6:4D:AA:F6:12:97:78:C1:7B:48:87:29:9E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0EFA299A12C7431F917974FB9FEC2477AD35358C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214344.roa
Signing time: Thu 26 Feb 2026 00:59:59 +0000
ROA not before: Thu 26 Feb 2026 00:54:59 +0000
ROA not after: Thu 25 Feb 2027 00:59:59 +0000
asID: 214344
IP address blocks: 2a0f:9400:611b::/48 maxlen: 48
2a0f:9400:6144::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:fa:29:9a:12:c7:43:1f:91:79:74:fb:9f:ec:24:77:ad:35:35:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 26 00:54:59 2026 GMT
Not After : Feb 25 00:59:59 2027 GMT
Subject: CN=A9153D7688E1A6C64DAAF6129778C17B4887299E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:01:50:5a:e7:5a:1d:e4:63:63:ff:b9:c8:
4e:92:ab:ce:73:d4:1a:1a:13:82:8b:9f:dc:5e:f3:
4b:c2:db:d6:92:40:35:b4:66:7c:c4:ad:67:86:4a:
45:06:9c:1e:02:5c:07:a1:e7:d3:53:00:cd:85:77:
73:33:5e:7e:21:db:4c:c1:8e:f9:22:6e:66:fc:7e:
76:40:56:97:ff:79:cc:1c:40:bd:ee:09:e3:59:fe:
15:02:45:ac:6d:da:83:78:49:6b:82:11:9c:e3:5c:
ed:b9:1d:20:7b:5b:5c:6a:28:35:fa:a5:b8:2d:a7:
37:78:fa:7e:6c:5f:9b:0f:26:57:f5:b1:fd:d3:e9:
e2:00:11:1a:34:05:1f:9d:f4:fa:33:15:c1:be:94:
9b:d4:90:3f:bd:08:0a:65:54:40:3d:d7:b7:ca:41:
0e:31:85:55:aa:0a:b6:82:1d:5d:78:06:81:38:9d:
b5:49:87:40:3d:7f:f0:ef:19:12:07:bd:03:37:3a:
1c:61:95:31:e4:c4:45:0e:36:ae:6d:25:5c:76:b7:
76:68:3d:de:7a:27:b2:2e:fd:c2:a8:1b:fe:dc:61:
83:35:72:97:81:cb:1b:48:3f:6e:7f:0e:cb:3f:92:
45:44:6c:8a:c8:31:21:02:89:b5:78:52:93:f2:8e:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:15:3D:76:88:E1:A6:C6:4D:AA:F6:12:97:78:C1:7B:48:87:29:9E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214344.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:611b::/48
2a0f:9400:6144::/48
Signature Algorithm: sha256WithRSAEncryption
0b:a8:d0:9e:e3:5b:81:85:70:2d:2d:55:02:23:02:50:b5:ac:
b9:f8:bc:35:28:39:de:d1:01:63:d6:36:2a:3d:4c:fe:c0:ca:
33:66:85:28:ef:a9:1a:23:22:e8:17:c5:31:78:75:11:73:0d:
cb:d9:c7:d7:d4:96:76:c2:ee:f4:e0:d2:f7:89:9f:0e:fc:80:
ee:7b:09:21:2a:f3:2f:7c:ba:88:2c:cf:6d:17:fa:a8:30:17:
60:f6:cb:6d:a6:9e:8f:90:e9:81:f5:cd:1b:f4:25:2a:40:4c:
65:09:0d:df:7e:e4:dd:e6:e9:2f:28:a2:bb:ad:bb:d4:9b:47:
a4:ea:9d:56:f1:b4:e7:6a:07:e2:42:87:ab:64:c1:bd:07:14:
8c:76:61:e0:d6:e3:54:58:ea:e0:fa:c7:f7:0e:bb:71:56:9c:
de:70:47:8e:47:9f:9e:3d:25:eb:35:ef:db:60:ae:d9:0d:42:
05:f2:13:38:81:89:07:5a:1e:31:97:0a:7b:d8:24:0c:ec:aa:
17:1e:f4:2c:51:6a:66:75:0a:52:61:db:8d:d1:41:9a:45:17:
a0:3a:6c:76:38:58:51:82:74:52:ad:2b:eb:53:ed:f7:58:a2:
b6:a6:34:51:a9:6b:79:14:bd:cb:ee:c2:20:54:01:6b:e2:d6:
79:ac:4b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:59:42 2026 by rpki-client