Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214669.roa
File: AS214669.roa (raw, json)
Hash identifier: SpHiKsz/18zifDF8yPfqMhL8frb3SS5nv8Cmh3w/AVc=
Subject key identifier: B9:8F:B5:50:C1:F6:5B:2F:98:0E:06:7F:06:78:77:C2:89:73:95:93
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6894F54DC2A5D4F42BAB3452E3CA1CFC80044D4A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214669.roa
Signing time: Wed 09 Sep 2026 07:31:26 +0000
ROA not before: Wed 09 Sep 2026 07:26:26 +0000
ROA not after: Wed 08 Sep 2027 07:31:26 +0000
asID: 214669
IP address blocks: 2a0f:9400:6150::/44 maxlen: 48
2a0f:9403::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:94:f5:4d:c2:a5:d4:f4:2b:ab:34:52:e3:ca:1c:fc:80:04:4d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 9 07:26:26 2026 GMT
Not After : Sep 8 07:31:26 2027 GMT
Subject: CN=B98FB550C1F65B2F980E067F067877C289739593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6a:63:9a:e4:03:b6:fd:f5:b2:cc:f8:bf:ad:
93:64:43:db:49:6e:e0:21:4b:5c:2d:26:b9:67:ce:
58:bd:cb:6f:ab:92:e3:0c:b6:59:f7:63:2b:82:9e:
4f:e5:5f:8b:a7:56:b3:8a:c1:29:ac:b9:ac:7a:fe:
0e:82:68:6d:00:31:de:ff:ca:83:5c:bb:db:08:51:
6a:a3:f2:76:45:e7:da:1f:1d:94:c3:05:db:b2:76:
8f:ab:0f:63:9f:db:04:e9:33:a2:5b:95:82:63:99:
12:b4:b8:49:a3:76:0d:66:86:ab:5c:3b:1e:0f:ed:
be:90:36:4c:a0:9d:34:a5:2e:61:b3:33:92:c1:8b:
5e:1a:84:b4:a7:dc:f8:89:8c:a9:76:72:fe:7b:c9:
ed:f9:59:da:94:5d:bb:1d:21:cb:00:79:d5:db:e2:
7b:b1:3c:68:1c:f8:f6:6e:6b:7e:aa:22:30:30:36:
46:ac:30:70:f0:fd:8d:f6:5c:b6:d2:c1:58:d4:ca:
e2:3c:7b:6b:65:ad:ac:77:72:97:8d:5b:dd:f6:6f:
e9:d3:b4:e9:8e:6b:64:80:47:1a:b4:ee:46:c0:37:
06:7f:08:13:55:fc:62:c3:cd:2f:42:5c:6a:cb:00:
09:f0:58:13:85:2a:96:66:76:bd:d5:cc:45:94:fa:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8F:B5:50:C1:F6:5B:2F:98:0E:06:7F:06:78:77:C2:89:73:95:93
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214669.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6150::/44
2a0f:9403::/36
Signature Algorithm: sha256WithRSAEncryption
9f:db:62:36:c0:43:3a:43:13:a4:99:91:be:d1:24:ce:74:f5:
7c:2f:ae:d0:65:6b:fb:50:7f:9b:81:77:f4:6a:d3:9d:86:9d:
db:26:78:60:5b:3e:4d:28:08:3e:c5:93:3b:32:53:32:05:cb:
5a:4b:d1:b2:50:1d:a9:f5:7d:73:57:55:a3:90:b0:1e:b7:72:
aa:a2:eb:02:f3:6c:b3:35:8d:18:b5:4d:19:27:e0:1c:a9:10:
f6:c7:2a:3c:5c:6e:47:37:8b:4a:45:b1:c0:ce:f2:87:fd:65:
6b:b9:ca:45:4f:ea:6a:ae:39:0d:ff:0f:9d:a0:be:f0:b7:24:
0b:cf:2d:06:10:4e:8b:73:de:6d:80:e4:4b:35:ac:53:9d:0d:
bf:27:f3:58:8e:28:91:84:69:73:3d:c2:4e:e0:7f:0f:2e:a9:
45:08:b9:53:aa:c0:b8:cc:b3:9a:9d:3f:d0:64:e1:e4:19:75:
8c:8e:d2:29:5b:71:bc:2a:33:0b:08:45:98:50:bf:a4:1d:5a:
9a:9c:c6:2e:3a:c7:b6:cc:70:0b:ca:c5:a3:26:bc:0e:e6:35:
9d:96:99:4e:10:3c:32:13:1d:ab:20:0a:d4:d8:91:6e:c6:3f:
ce:d9:7e:48:c3:af:e0:5f:e8:e3:1c:5a:bf:32:df:f3:8e:da:
06:4e:6b:26
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUaJT1TcKl1PQrqzRS48oc/IAETUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjA5MDkwNzI2MjZaFw0yNzA5MDgwNzMxMjZaMDMxMTAvBgNV
BAMTKEI5OEZCNTUwQzFGNjVCMkY5ODBFMDY3RjA2Nzg3N0MyODk3Mzk1OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhamOa5AO2/fWyzPi/rZNkQ9tJ
buAhS1wtJrlnzli9y2+rkuMMtln3YyuCnk/lX4unVrOKwSmsuax6/g6CaG0AMd7/
yoNcu9sIUWqj8nZF59ofHZTDBduydo+rD2Of2wTpM6JblYJjmRK0uEmjdg1mhqtc
Ox4P7b6QNkygnTSlLmGzM5LBi14ahLSn3PiJjKl2cv57ye35WdqUXbsdIcsAedXb
4nuxPGgc+PZua36qIjAwNkasMHDw/Y32XLbSwVjUyuI8e2tlrax3cpeNW932b+nT
tOmOa2SARxq07kbANwZ/CBNV/GLDzS9CXGrLAAnwWBOFKpZmdr3VzEWU+uupAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUuY+1UMH2Wy+YDgZ/Bnh3wolzlZMwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxNDY2OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAqBggr
BgEFBQcBBwEB/wQbMBkwFwQCAAIwEQMHBCoPlABhUAMGBCoPlAMAMA0GCSqGSIb3
DQEBCwUAA4IBAQCf22I2wEM6QxOkmZG+0STOdPV8L67QZWv7UH+bgXf0atOdhp3b
JnhgWz5NKAg+xZM7MlMyBctaS9GyUB2p9X1zV1WjkLAet3KqousC82yzNY0YtU0Z
J+AcqRD2xyo8XG5HN4tKRbHAzvKH/WVrucpFT+pqrjkN/w+doL7wtyQLzy0GEE6L
c95tgORLNaxTnQ2/J/NYjiiRhGlzPcJO4H8PLqlFCLlTqsC4zLOanT/QZOHkGXWM
jtIpW3G8KjMLCEWYUL+kHVqanMYuOse2zHALysWjJrwO5jWdlplOEDwyEx2rIArU
2JFuxj/O2X5Iw6/gX+jjHFq/Mt/zjtoGTmsm
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:27:46 2026 by rpki-client