Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210254.roa
File: AS210254.roa (raw, json)
Hash identifier: HwgqWmq98bDVRfc2O+m20RW9aRaVcuoXQTYI7tQwY7M=
Subject key identifier: 7E:0E:23:8B:6D:01:96:CA:33:ED:48:89:DC:13:85:6F:14:7A:0E:57
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 35D17239A68B4187F5AF9F7DC10D6AB1603FCE67
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210254.roa
Signing time: Tue 19 May 2026 04:03:25 +0000
ROA not before: Tue 19 May 2026 03:58:25 +0000
ROA not after: Tue 18 May 2027 04:03:25 +0000
asID: 210254
IP address blocks: 2a0f:9400:7360::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d1:72:39:a6:8b:41:87:f5:af:9f:7d:c1:0d:6a:b1:60:3f:ce:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 03:58:25 2026 GMT
Not After : May 18 04:03:25 2027 GMT
Subject: CN=7E0E238B6D0196CA33ED4889DC13856F147A0E57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:23:59:fd:2f:a3:5d:ce:94:b1:ec:a9:b0:
59:f4:84:c8:3c:3c:4f:64:2b:91:fc:81:8a:aa:06:
8c:ae:c8:6f:0a:ce:e3:c9:48:a9:75:30:dc:70:0e:
f2:bc:63:d2:06:51:5c:ce:d9:93:d3:13:3d:57:9f:
81:e7:30:43:8f:f8:76:8c:af:00:94:b6:03:f5:d4:
40:e2:b3:d5:e6:50:ef:2a:82:0a:dd:80:12:60:68:
86:40:3e:c8:f1:e4:95:b9:82:45:a9:ff:6b:d0:1a:
49:37:33:05:db:5e:63:0e:b1:0c:1e:a5:6d:dd:18:
f8:ec:3b:05:88:09:5c:50:91:ab:39:28:da:21:d7:
9d:a0:7f:b3:41:04:32:cf:03:26:25:3e:9a:1f:1c:
a5:a7:e1:dd:4b:cd:5f:e6:23:40:8a:64:80:9f:b7:
30:9c:67:24:23:91:ab:94:8d:77:f1:e5:b9:36:8f:
af:3a:46:89:38:1d:67:a4:03:7b:bf:8e:15:48:2c:
7c:46:5b:ba:d0:23:2c:cc:cd:51:b3:b1:3f:b2:00:
ac:ab:88:2a:a1:52:44:21:eb:1a:c6:99:89:79:b6:
86:69:3b:0d:bf:15:8d:c1:c6:78:13:39:23:17:dd:
43:4f:b2:58:3c:bf:bd:ee:53:c5:ce:50:d6:d5:68:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0E:23:8B:6D:01:96:CA:33:ED:48:89:DC:13:85:6F:14:7A:0E:57
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210254.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7360::/48
Signature Algorithm: sha256WithRSAEncryption
d3:0b:91:9c:07:4a:25:93:41:29:0c:f0:bd:8e:2f:db:a5:4c:
e2:68:3f:3e:69:ad:51:5a:d7:59:11:fa:9b:e1:00:ef:99:5b:
67:1b:be:74:1e:d6:44:97:24:ed:d3:8a:dd:a4:56:b7:63:ee:
11:7a:32:56:be:10:52:93:da:d8:f5:7e:a4:95:0e:74:49:8d:
e1:43:fa:77:23:5e:62:aa:77:ad:2e:62:dd:46:53:ce:64:c4:
d3:e5:16:af:8c:fc:37:1f:aa:e5:38:ab:e7:21:41:ff:51:29:
c4:ea:8a:66:72:08:9d:54:f6:80:46:4d:f4:3d:89:bb:23:ab:
4c:38:7d:ae:5b:d0:4f:da:dc:12:df:4d:e3:8f:bd:40:75:4a:
83:14:6a:78:bb:b6:93:22:7a:c5:e9:47:bd:1e:48:17:65:ca:
7d:d8:fc:83:3b:26:b0:6b:b2:f6:92:2b:0c:5d:6b:be:75:49:
3d:72:71:c1:ad:fa:c2:3d:e2:1b:60:d2:34:2f:71:f2:0b:99:
75:a7:b3:40:54:a0:df:3a:f1:ee:2b:9c:20:42:71:5d:84:f4:
48:4d:c1:bc:6b:56:45:15:87:3c:7e:6a:b5:ed:ac:9e:ce:62:
b5:23:8b:ab:1a:61:c5:45:09:50:1d:5d:ba:32:7a:11:a0:2d:
70:1f:82:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:04:41 2026 by rpki-client