Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214910.roa
File: AS214910.roa (raw, json)
Hash identifier: 06+0TOCpU3pLOrmkuxvEBxa0LJrm15Qt7/qLnNAlDjo=
Subject key identifier: E3:FF:A0:9F:E4:2E:52:65:CF:C9:CD:7B:B3:76:95:6C:B1:7D:64:D8
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 577FA19147B625C303200BE498A74CC7924335D5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214910.roa
Signing time: Thu 09 Apr 2026 03:22:35 +0000
ROA not before: Thu 09 Apr 2026 03:17:35 +0000
ROA not after: Thu 08 Apr 2027 03:22:35 +0000
asID: 214910
IP address blocks: 2a0f:9400:6115::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:7f:a1:91:47:b6:25:c3:03:20:0b:e4:98:a7:4c:c7:92:43:35:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 9 03:17:35 2026 GMT
Not After : Apr 8 03:22:35 2027 GMT
Subject: CN=E3FFA09FE42E5265CFC9CD7BB376956CB17D64D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:2e:17:28:5f:cc:54:3c:d4:92:e9:94:6a:
39:d3:8b:bd:e8:61:0a:03:b8:b5:06:09:e4:c7:1d:
03:ee:6d:8d:c0:d0:97:f8:9f:4b:5e:a6:c9:d2:b4:
c8:61:81:be:a2:a4:f5:d6:b2:32:53:99:86:9c:75:
30:a0:37:98:e8:7d:1f:7f:78:a1:4e:b8:f4:f0:ca:
96:be:3a:4c:1f:70:3f:b9:2b:9d:b4:cb:4f:44:ab:
c7:91:72:a6:e8:0c:0b:fd:0f:7a:8b:ad:3a:5f:8f:
7f:95:8b:f5:48:6b:5e:ff:89:a8:ec:88:03:1b:e3:
46:23:ce:54:64:c4:2f:a2:95:a5:50:49:5e:d5:c9:
2e:e3:9d:a5:b8:80:e7:a6:9d:3d:30:95:7b:41:49:
41:af:c4:94:a9:f6:26:35:fe:0b:99:c5:16:3d:ef:
02:9e:ed:13:fc:86:4c:80:82:13:51:c2:53:9b:2c:
c6:45:7b:6c:26:59:b9:8d:b4:52:10:5f:03:42:e7:
b0:3e:58:67:d1:ba:81:0a:6c:c6:94:05:23:80:59:
20:d3:3f:d3:63:c2:7d:3d:b5:09:23:01:3b:4c:34:
c3:63:9e:65:17:54:73:d0:4f:b1:3a:21:ca:96:d2:
1d:bb:47:ea:e3:50:f0:03:28:80:8e:7e:1b:47:6d:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FF:A0:9F:E4:2E:52:65:CF:C9:CD:7B:B3:76:95:6C:B1:7D:64:D8
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214910.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6115::/48
Signature Algorithm: sha256WithRSAEncryption
a8:42:8c:ee:f8:93:32:a5:46:d9:e2:ed:46:83:97:55:93:46:
80:86:39:62:57:82:fe:37:a0:df:13:8e:cd:20:80:e7:65:0f:
53:1d:e2:c0:ce:d6:90:fc:79:fb:48:ff:35:f3:e5:e7:6b:05:
75:ce:6a:1d:fe:78:99:4e:71:99:68:af:65:ee:1c:9a:fc:14:
76:50:95:16:ee:8a:9a:6c:9c:33:3e:ea:a1:9b:78:02:04:44:
02:1e:03:e3:3d:dc:0e:41:7f:ef:3b:90:ff:e8:14:df:d5:c7:
a7:b3:bf:c0:99:50:86:3a:7d:b6:53:9e:c3:13:cb:83:bc:f6:
31:c1:a2:a0:45:08:84:62:8f:4d:90:74:9e:07:16:d4:f0:d4:
02:f4:42:69:6f:3d:b7:e7:b5:bd:d3:1f:a3:6e:56:64:b7:5e:
d7:c5:b6:80:51:ba:52:32:4c:e7:2d:68:d3:02:96:0a:8c:1f:
2e:77:57:fa:8d:da:8b:a7:59:13:43:f9:78:5d:66:ba:27:38:
82:1c:16:04:8e:d4:9a:35:5d:d7:fd:15:e9:65:43:3e:74:59:
13:55:a3:31:1e:1c:0b:1a:2c:54:65:31:2b:a1:1c:bf:1e:51:
bf:44:0c:fb:1a:0d:a5:96:fb:83:82:38:23:67:c8:c8:19:71:
1c:d0:b9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:09:13 2026 by rpki-client