Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210542.roa
File: AS210542.roa (raw, json)
Hash identifier: S+HMBglZjWOzAU+v8ZplcoLetnVsNoQEfFAJ5PCh1L8=
Subject key identifier: 8E:F9:52:E3:10:B1:83:06:02:0E:D4:70:E0:F7:45:8A:70:FF:27:48
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 225FAA0753568F26D235F14AA05D589616773AAB
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210542.roa
Signing time: Sat 30 May 2026 07:11:01 +0000
ROA not before: Sat 30 May 2026 07:06:01 +0000
ROA not after: Sat 29 May 2027 07:11:01 +0000
asID: 210542
IP address blocks: 2a0f:9400:7722::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:5f:aa:07:53:56:8f:26:d2:35:f1:4a:a0:5d:58:96:16:77:3a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 30 07:06:01 2026 GMT
Not After : May 29 07:11:01 2027 GMT
Subject: CN=8EF952E310B18306020ED470E0F7458A70FF2748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:ca:bf:65:c5:6e:b3:71:00:2c:1e:de:01:
01:5d:37:f4:cb:d6:be:6d:22:bb:a6:0c:5c:1f:f1:
24:ad:5f:b0:9a:cc:6c:77:a3:59:14:02:66:17:fe:
88:e8:d0:80:7d:b4:a7:39:52:78:45:ba:79:9e:4d:
53:a8:ee:43:56:22:c2:5f:5e:ac:f8:5d:0e:2a:7c:
8c:f6:1e:50:99:ad:ab:eb:12:41:90:4b:22:f3:64:
97:b1:8b:8b:55:da:80:5a:b9:34:a0:ee:38:8e:43:
df:f3:76:48:52:0b:75:3b:f8:d4:df:dc:0c:17:84:
ec:a8:b2:29:06:e0:69:89:0b:d8:62:e1:f6:da:7a:
c2:68:26:a7:18:97:7e:fc:fc:b5:7f:7a:63:1d:62:
dd:da:e8:3f:26:81:cd:26:af:92:a0:80:37:98:af:
0f:02:79:7d:c4:3f:a1:7f:44:ce:a1:12:18:fd:d3:
e0:f4:d8:04:fa:5d:be:40:41:b0:3c:8b:b4:f3:5d:
31:0c:10:aa:76:88:ce:7b:b0:36:8c:f6:d1:13:34:
31:61:f6:e1:87:f8:b5:e5:11:51:57:72:6f:cc:4b:
ba:10:d2:8e:54:03:a5:b3:ad:20:9d:61:6d:05:c6:
93:3b:85:3a:6f:35:4a:e0:6d:68:d7:5e:e3:cf:87:
a1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:52:E3:10:B1:83:06:02:0E:D4:70:E0:F7:45:8A:70:FF:27:48
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7722::/48
Signature Algorithm: sha256WithRSAEncryption
c6:62:04:0f:e7:0b:c7:4a:cd:fa:15:45:97:d8:bb:b4:e2:c2:
7d:e0:c1:4f:b2:d2:9b:23:a6:10:a9:57:5d:e9:af:b5:59:fc:
7a:1e:ab:b2:9f:fc:78:76:10:cd:27:fe:d0:cf:85:e9:18:b4:
9d:c0:f4:a6:cb:11:f9:d1:b4:a8:64:92:95:f0:52:15:8b:13:
40:df:59:d4:3f:b8:b1:81:e8:54:2c:a6:72:01:b5:a0:91:1c:
8e:0a:7e:d4:ca:1d:3f:d3:8e:5b:75:56:79:21:4f:aa:ba:e4:
d7:c8:b7:04:07:00:62:7b:88:86:1f:86:c0:4c:4d:91:b7:ce:
3f:e0:f8:0d:3d:37:69:55:41:e9:8d:93:96:88:63:5f:50:05:
28:fe:8a:46:b2:60:3b:4c:27:74:40:86:c8:17:48:44:08:88:
f7:b5:8f:e8:9c:94:cb:01:16:23:f8:ab:67:b0:01:74:93:15:
b6:c8:c1:83:81:6f:9f:f2:b2:b4:de:b4:35:30:fc:4c:56:f1:
83:ec:f0:8c:fa:2d:e0:71:14:37:e3:bc:4c:a3:c1:88:e9:88:
4e:1a:43:1f:18:4e:91:1f:89:33:ad:a7:31:24:2b:48:6e:0d:
7c:8e:22:a6:50:d7:e9:4d:e4:2b:65:90:a3:54:3c:fa:6b:31:
11:be:94:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:22:49 2026 by rpki-client