Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215672.roa
File: AS215672.roa (raw, json)
Hash identifier: YQj/1CcLhlOlJFlEsAT6rHUIV7pRItKpBvYd3XC6/ts=
Subject key identifier: 2B:14:90:20:48:B1:D9:B4:24:03:75:3B:2B:BE:AD:CD:B7:EF:CA:E2
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 14979C2AFFF1869815E8ABD25B72C833ECBACB5E
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215672.roa
Signing time: Fri 31 Oct 2025 17:28:45 +0000
ROA not before: Fri 31 Oct 2025 17:23:45 +0000
ROA not after: Fri 30 Oct 2026 17:28:45 +0000
asID: 215672
IP address blocks: 2a0f:9400:6950::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:97:9c:2a:ff:f1:86:98:15:e8:ab:d2:5b:72:c8:33:ec:ba:cb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 31 17:23:45 2025 GMT
Not After : Oct 30 17:28:45 2026 GMT
Subject: CN=2B14902048B1D9B42403753B2BBEADCDB7EFCAE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:8a:f6:f8:59:32:51:ec:be:fe:9e:4e:42:
f6:61:a1:5b:58:b1:f4:db:f3:44:bd:6d:fd:4a:64:
8b:a8:f3:71:e2:3a:14:ec:1a:1e:53:73:14:78:ec:
5b:65:c3:ff:fe:23:27:00:d8:54:0c:09:32:55:f2:
66:44:8e:7b:f8:75:11:8d:b6:84:05:fb:a4:2e:97:
99:47:2f:03:a4:0e:01:af:14:3a:a4:9b:ae:d8:6b:
d4:11:3d:6a:42:c5:95:50:63:6e:43:e8:0f:bf:56:
eb:85:46:bc:36:d3:67:55:0a:bc:eb:f6:be:22:36:
57:42:1c:61:8e:6b:31:1c:bc:63:ba:b8:db:93:e2:
26:37:48:f0:6e:20:80:a7:97:80:49:ab:d1:7d:c5:
a0:64:f1:6e:00:dd:89:a8:6c:ef:1f:fe:4a:38:93:
09:18:f6:fd:89:7e:1f:05:e7:78:a8:16:48:38:29:
bd:1a:83:e7:a8:92:ba:90:eb:7e:08:47:ac:55:a1:
2d:76:68:11:34:70:ff:93:c7:f3:16:20:61:f2:bf:
a2:9b:26:ea:3a:e5:ce:60:f4:b9:af:5c:cc:2a:4f:
8c:c8:8f:3a:ec:c2:23:16:7c:30:51:b5:45:0d:b1:
63:d4:63:9e:71:76:27:16:19:32:95:18:c5:3e:4a:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:14:90:20:48:B1:D9:B4:24:03:75:3B:2B:BE:AD:CD:B7:EF:CA:E2
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6950::/48
Signature Algorithm: sha256WithRSAEncryption
af:0f:74:5e:4e:f8:8f:fc:79:7e:94:aa:b4:36:7b:0e:31:c0:
0e:4c:c6:d2:4e:1f:97:86:09:5f:9e:3b:8f:69:e6:15:af:b2:
f7:c0:8c:ad:eb:f3:30:55:9e:02:7c:30:03:8f:64:d2:80:5d:
43:14:c3:be:94:40:79:83:74:da:da:13:45:bb:fa:c4:fd:f6:
4d:a6:95:a4:01:53:e2:a6:5a:6e:50:76:bb:1c:51:d7:68:b5:
1e:18:df:d6:f6:b9:f7:e3:f3:58:11:ec:a7:54:2b:a8:29:44:
c8:a4:0e:8d:eb:29:8d:a5:7a:3f:eb:aa:1b:4b:91:51:b6:80:
a2:3c:eb:8f:eb:73:6f:57:e9:8a:75:53:33:2c:c7:ac:a6:9d:
b4:74:fb:29:e2:32:26:cd:3d:2f:ce:aa:78:63:39:8f:9f:3f:
6a:07:d6:97:9f:8d:99:d0:aa:2e:71:d6:3a:76:b8:0e:e5:49:
8f:9e:66:8a:81:21:5c:90:7c:f6:0c:d5:0a:a6:2e:55:c2:91:
f0:d4:4f:60:a2:73:10:57:fe:18:1a:e4:2e:c0:8e:30:36:6d:
7f:ba:ca:3d:76:76:d2:f8:b4:7a:2d:3a:31:1a:91:65:9d:2d:
1f:18:1f:d6:2a:95:1c:26:1e:69:5b:98:2a:94:23:e3:97:ee:
6a:5e:19:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:15:14 2025 by rpki-client