Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214933.roa
File: AS214933.roa (raw, json)
Hash identifier: yaM78v4WKFB96eDDiQTIjutg6Ny+11nHlobO8kNO+Fc=
Subject key identifier: 76:5A:42:3A:CF:3B:F6:64:B8:B7:89:73:40:86:88:C1:9B:1E:0E:22
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1C06BB95119695AAECDBBA19A47123AD0F43F0E3
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214933.roa
Signing time: Tue 03 Nov 2026 14:32:40 +0000
ROA not before: Tue 03 Nov 2026 14:27:40 +0000
ROA not after: Tue 02 Nov 2027 14:32:40 +0000
asID: 214933
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:06:bb:95:11:96:95:aa:ec:db:ba:19:a4:71:23:ad:0f:43:f0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 3 14:27:40 2026 GMT
Not After : Nov 2 14:32:40 2027 GMT
Subject: CN=765A423ACF3BF664B8B78973408688C19B1E0E22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:bd:f8:a8:f9:08:6a:d6:dd:2a:31:64:c5:
f8:c9:d5:e5:df:e9:40:38:fe:5d:79:41:ba:e7:d8:
94:3a:05:99:b8:8e:b2:5c:81:b2:1c:be:1e:3e:1b:
96:d2:b7:d8:ad:9b:ec:1d:99:2f:4a:50:89:2f:a7:
a8:10:70:e9:12:d8:a8:2f:4c:79:0b:d6:15:af:08:
4d:55:59:1d:90:c1:30:81:eb:ee:0d:41:af:c9:81:
6d:d2:d7:4c:93:b5:7c:78:47:98:ba:3e:6a:91:36:
d4:86:84:41:29:db:99:e1:50:71:a1:35:ea:2b:4c:
a7:92:95:bc:90:ed:ad:e2:f9:a8:66:4d:bc:6f:aa:
0c:a2:89:ee:bd:ae:97:fc:b1:f7:18:a1:f2:d8:43:
09:1d:d5:9f:a5:e7:52:be:42:48:cb:8d:51:cc:32:
01:2c:37:86:87:f2:d0:4d:54:77:75:18:e8:dc:fc:
b0:44:1e:48:e3:ba:89:e4:40:5a:89:81:de:3c:4b:
0e:e2:01:06:db:27:8a:ef:22:b5:48:48:54:ca:0a:
6b:cd:d4:53:a9:a4:86:63:44:6e:df:51:4d:dc:2f:
bb:f4:cf:01:72:c0:48:2b:7f:c5:d0:b3:6e:a6:0c:
3c:f0:02:bb:1c:b5:21:e5:31:30:a2:ea:3f:78:7c:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5A:42:3A:CF:3B:F6:64:B8:B7:89:73:40:86:88:C1:9B:1E:0E:22
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
c7:36:8f:58:67:a1:e3:13:97:fd:45:75:43:97:ca:c9:69:2e:
92:d8:2e:6c:24:9f:78:51:26:c3:94:24:b5:2c:2d:81:0a:0b:
00:29:f0:5c:9e:d8:a4:53:8a:0b:8d:8c:0f:64:e5:93:ef:9d:
a8:5e:79:4a:82:d0:51:b6:66:b6:24:7f:43:68:0d:ba:eb:fe:
43:cf:fa:78:5f:0f:f5:d1:e1:fc:b4:21:cb:0a:6e:a5:73:36:
fd:51:cf:ba:82:ab:80:38:3b:45:4a:bd:39:72:ea:18:78:7d:
40:77:6e:51:73:ea:de:28:03:92:ad:aa:f6:9c:63:99:03:42:
00:37:32:cc:3f:90:c8:39:27:10:42:f3:af:bf:df:83:e9:dd:
fe:51:2a:7d:81:d2:9b:bc:9b:1e:23:a0:77:87:1b:c2:bc:05:
4a:05:57:ef:c7:85:f9:ad:25:59:73:0f:af:37:b3:f4:3d:2d:
ee:9f:6f:d2:e2:aa:69:fa:42:8e:f0:5f:64:5a:51:3d:59:02:
57:23:4e:25:fb:32:d1:35:b6:6d:9a:e2:33:d6:05:87:c2:e0:
91:fb:0b:d9:c3:11:c7:95:aa:99:57:a5:b0:d1:78:a3:b6:64:
c8:ec:ee:50:a3:8b:b9:b5:09:f0:e6:8e:98:37:af:bc:93:21:
46:7b:94:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:55:49 2026 by rpki-client