Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215780.roa
File: AS215780.roa (raw, json)
Hash identifier: d3xaXCrvWyozfSjEb40q78vi7x0NV2irzkrM0RXvvu8=
Subject key identifier: 3C:70:BE:59:82:93:1E:B6:D6:53:6E:AF:79:2F:C7:30:E3:DB:E7:42
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 37B97C6B45C8968DA2AFFC758CCB73AF529953F1
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215780.roa
Signing time: Sat 31 Jan 2026 17:07:41 +0000
ROA not before: Sat 31 Jan 2026 17:02:41 +0000
ROA not after: Sat 30 Jan 2027 17:07:41 +0000
asID: 215780
IP address blocks: 2a0f:9400:6777::/48 maxlen: 48
2a0f:9400:6780::/42 maxlen: 42
2a0f:9400:6788::/48 maxlen: 48
2a0f:9400:6799::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:b9:7c:6b:45:c8:96:8d:a2:af:fc:75:8c:cb:73:af:52:99:53:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jan 31 17:02:41 2026 GMT
Not After : Jan 30 17:07:41 2027 GMT
Subject: CN=3C70BE5982931EB6D6536EAF792FC730E3DBE742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:52:aa:07:33:3c:10:aa:a7:15:73:60:dd:
7e:4b:e4:6b:b9:9b:27:cf:68:49:d4:f5:01:76:03:
65:e4:16:3d:f9:33:db:08:7d:65:87:18:9f:e0:69:
91:a1:a2:d7:1d:f7:0d:b5:ff:4c:f1:27:39:de:d3:
b3:6d:67:53:21:bf:12:e9:55:b9:d7:a6:ac:f1:f5:
7a:85:32:e4:da:4b:9a:c8:9f:85:be:8b:41:30:ae:
8f:12:66:43:19:ab:be:2c:ca:03:63:9c:77:e8:2b:
95:ef:f2:f6:c4:d9:dc:24:f2:b6:43:0a:a1:b6:27:
5f:03:5c:c9:17:48:6b:5f:37:02:a4:4d:f5:82:a4:
ae:17:ba:ff:37:67:96:10:20:50:29:5e:31:80:ad:
ce:e8:97:af:0f:d0:00:d2:ef:0d:fc:bc:4f:95:b5:
3b:f6:56:c4:a1:73:59:2d:de:18:4a:84:d8:96:f9:
e8:21:5f:3c:24:a8:37:f8:4d:17:0c:e5:4c:d1:35:
a8:64:91:10:7d:ab:b6:c1:56:e5:b7:51:e0:c6:eb:
74:5c:fe:63:a0:07:f8:1a:56:bb:5b:c4:29:1f:69:
0a:54:56:33:2e:a8:7e:44:5a:75:13:31:9e:c1:34:
c6:d5:05:2d:1f:46:d8:cd:79:f6:1d:fe:10:67:4b:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:70:BE:59:82:93:1E:B6:D6:53:6E:AF:79:2F:C7:30:E3:DB:E7:42
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6777::/48
2a0f:9400:6780::/42
Signature Algorithm: sha256WithRSAEncryption
1f:e5:46:23:f4:f1:12:a9:64:d0:5b:70:a6:cf:b9:08:a9:57:
f9:02:45:72:66:5a:d2:ea:f7:54:5e:c9:72:e3:1f:1b:8e:92:
1f:ef:7d:ff:00:d8:4b:94:df:7e:23:0c:13:72:6b:11:3a:62:
88:bd:5a:82:ee:56:62:9d:32:28:47:56:f3:0c:a0:6d:a4:5c:
e9:f6:fc:c4:24:71:9f:8a:cf:71:88:66:cc:e6:54:1d:e6:58:
b4:05:dd:cd:13:7e:7a:78:dc:1f:f4:b0:f6:84:bc:54:5c:51:
f6:57:b9:da:77:03:5c:45:35:62:7b:0a:aa:16:aa:be:e1:73:
ab:ad:6f:b2:74:c7:46:80:c4:c1:d5:24:54:a2:20:97:72:e1:
71:e7:2d:9a:3b:b2:ce:87:4e:cd:e7:73:39:2a:52:a8:2b:64:
c0:5a:d9:f0:1d:a1:8c:a5:22:d2:ff:02:68:46:76:df:8c:a4:
de:c2:1e:9d:42:67:81:7c:74:5f:ac:44:d3:82:ba:82:0a:e6:
80:f5:52:f2:57:70:4e:e1:18:7f:bb:b3:64:fd:18:dc:1a:7a:
9e:97:f8:b1:2d:76:f5:63:e3:f6:83:fc:99:ce:6a:f5:72:85:
0c:c2:4a:9e:5d:c5:fc:c4:67:0a:cc:15:99:3b:62:62:aa:b4:
e7:a4:88:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:59:44 2026 by rpki-client