Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215224.roa
File: AS215224.roa (raw, json)
Hash identifier: dgG9FQODDlOtudhVkROXtQEKXc1XOaBN39qZERGxIMI=
Subject key identifier: 94:5D:1F:6D:BD:3A:9F:72:A1:CA:53:C7:18:E2:15:18:56:5A:D2:5C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 78E0D34A6CFAE690923C14B71A2E8B31755D2380
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215224.roa
Signing time: Mon 23 Feb 2026 10:55:03 +0000
ROA not before: Mon 23 Feb 2026 10:50:03 +0000
ROA not after: Mon 22 Feb 2027 10:55:03 +0000
asID: 215224
IP address blocks: 2a0f:9400:6800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e0:d3:4a:6c:fa:e6:90:92:3c:14:b7:1a:2e:8b:31:75:5d:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 23 10:50:03 2026 GMT
Not After : Feb 22 10:55:03 2027 GMT
Subject: CN=945D1F6DBD3A9F72A1CA53C718E21518565AD25C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:1d:be:a9:4e:fc:a7:63:51:55:85:a3:9b:
11:fc:f5:fb:90:f1:a6:13:78:52:bb:8b:30:eb:18:
7c:8a:64:ce:26:ea:0f:1c:44:76:83:f3:5e:af:70:
70:dd:d1:27:60:fd:8c:bb:ab:74:9e:23:42:59:8c:
14:1c:f5:fd:d5:92:38:f6:2c:4f:40:52:fe:77:cf:
47:c4:08:34:cc:b7:02:8c:6e:62:4f:a1:cd:8b:7f:
5c:bb:57:5f:91:ed:51:e1:b6:3f:27:63:fa:40:74:
36:da:48:ff:09:99:ea:ca:86:04:34:74:74:f0:ee:
00:b7:8a:9e:ff:18:81:f0:2a:e0:01:58:b1:a4:f6:
06:84:11:1c:d0:3a:9e:06:6c:ea:05:c5:97:f4:f7:
db:ae:28:5e:d4:73:00:e8:f8:1c:1f:62:28:23:8c:
3b:01:a7:6d:61:6d:5c:e9:ef:c0:1c:a5:b9:60:c9:
5b:5a:d2:b2:75:fc:71:af:9f:20:e2:97:37:10:3b:
b7:72:d7:ff:60:33:d7:af:36:51:d9:19:5e:3c:0a:
24:49:b5:0d:ee:51:fa:92:8f:6b:4b:26:7d:d0:8f:
31:19:08:2c:01:51:8d:6e:13:ec:56:30:db:ef:85:
3f:f5:a8:e0:a5:e4:14:a0:3d:eb:28:f7:69:35:e7:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5D:1F:6D:BD:3A:9F:72:A1:CA:53:C7:18:E2:15:18:56:5A:D2:5C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6800::/40
Signature Algorithm: sha256WithRSAEncryption
a5:15:df:80:41:3c:2c:00:f5:3f:e3:18:02:f9:f8:2c:e9:43:
69:c8:99:99:17:c0:47:87:3c:f8:89:40:80:06:7d:0d:9e:a0:
f6:cf:28:94:c7:69:11:d5:6d:22:fc:7f:74:22:69:05:f0:75:
75:ae:68:2e:f9:ed:a6:c9:fc:55:53:fb:d2:2b:4f:20:59:e3:
13:c4:bc:82:e6:93:a2:11:ac:5f:ab:2e:6d:9b:2c:c3:91:ed:
bd:d5:f5:16:0b:b1:d3:05:90:1a:1f:a0:f6:3b:ef:e2:1b:dc:
9a:51:14:e8:53:ca:54:67:1c:49:a3:92:53:26:86:ec:f6:3c:
30:41:e4:03:04:e1:05:d5:7b:7a:de:f6:fd:e7:80:0b:d6:a7:
d1:df:ac:98:17:0d:9e:cd:c0:ad:3d:7a:6a:34:f0:8a:9e:0b:
77:3a:0e:fa:3f:0d:da:29:8f:75:28:97:e8:57:a3:41:64:b9:
28:b7:63:90:33:f0:88:ae:e6:eb:a3:79:4f:cc:b1:05:71:84:
e2:5a:e2:0f:d4:ac:de:63:8e:53:a7:29:31:3e:f7:f0:d1:04:
ed:c2:05:78:12:0e:a2:6c:a4:7c:fc:5a:da:19:07:70:d3:37:
46:7e:b0:07:59:54:29:3e:ba:94:76:f0:e3:ef:64:63:54:e1:
81:60:ae:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:35:54 2026 by rpki-client