Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa
File: AS210576.roa (raw, json)
Hash identifier: QzuSAbnSti9fGG/RFWFQgzNxqOesl8C1SRqMTWXiVlA=
Subject key identifier: 3F:0D:F4:3B:A6:3E:E6:C2:56:D5:12:2E:26:BD:4B:6F:F6:CD:E0:38
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 785BCF138C7AB6C68E4E364DEF1F9297D8C8D61B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa
Signing time: Fri 17 Jul 2026 15:56:21 +0000
ROA not before: Fri 17 Jul 2026 15:51:21 +0000
ROA not after: Fri 16 Jul 2027 15:56:21 +0000
asID: 210576
IP address blocks: 2a0f:9400:770b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:5b:cf:13:8c:7a:b6:c6:8e:4e:36:4d:ef:1f:92:97:d8:c8:d6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 17 15:51:21 2026 GMT
Not After : Jul 16 15:56:21 2027 GMT
Subject: CN=3F0DF43BA63EE6C256D5122E26BD4B6FF6CDE038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:92:fc:6b:10:e9:6b:60:e9:89:1b:00:1f:89:
3a:69:5f:5d:b4:23:c7:97:cc:ad:b4:37:c2:61:ba:
9f:de:d3:81:97:e1:d5:dd:66:13:c0:9d:66:3b:31:
74:54:d1:6b:49:b0:7f:5f:3a:da:fd:70:ab:93:5b:
ea:1a:8d:ee:6c:9b:ed:bd:ac:1a:3e:ad:46:ab:cc:
8e:d8:1a:9f:29:f6:37:84:e5:d2:91:1e:26:fe:e3:
1c:30:79:4d:25:f2:f7:36:db:9c:80:63:a8:b1:0f:
a9:c0:8f:7b:4e:2d:f6:7f:97:a8:d1:5d:48:00:dc:
29:f8:e2:f5:3e:c0:a7:fa:d0:35:d2:27:48:fc:df:
80:cd:39:c5:3f:b2:eb:3d:06:55:c1:92:52:5c:2a:
97:82:f6:0d:bf:ed:30:55:a2:78:6f:2d:32:5f:1f:
66:70:95:d6:6f:4c:d9:ba:15:b4:49:80:9a:c4:43:
3d:f4:0c:bb:9c:e0:1a:73:67:b6:d0:b4:1e:57:60:
8b:e1:52:c0:4a:34:d3:be:15:cc:b6:73:3f:37:a9:
40:29:cf:3c:16:60:b1:23:c5:e7:be:47:e0:b8:fc:
ac:28:f0:cb:fb:e6:65:16:fc:e3:d3:38:2f:26:c6:
27:63:b0:9d:54:bb:5b:e9:1e:4a:54:87:0c:98:29:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0D:F4:3B:A6:3E:E6:C2:56:D5:12:2E:26:BD:4B:6F:F6:CD:E0:38
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:770b::/48
Signature Algorithm: sha256WithRSAEncryption
ac:92:55:1e:8e:4e:74:a4:fc:9b:40:88:7d:a9:c7:21:9e:d4:
ed:4a:fc:78:c6:8c:12:5f:d6:a7:c1:da:c0:92:5e:a5:56:9b:
fb:b3:e3:13:e4:4f:6e:51:5c:5c:b1:f7:c7:1e:25:c2:aa:95:
15:b9:3f:f0:9b:ab:3c:37:f4:0b:6b:0d:c7:7e:27:60:7c:e8:
30:3d:03:44:7a:4d:d2:82:8d:44:d0:a2:59:c8:4b:9e:da:81:
07:99:7c:7f:16:d8:e2:8f:c8:c9:31:72:38:37:9e:60:94:84:
be:e4:4f:29:a2:6c:08:2d:75:6b:ae:a3:10:1e:3f:02:c6:23:
3b:75:72:6a:76:3f:98:66:e9:19:b5:71:1b:97:c4:70:fe:1b:
e6:1d:67:7a:c2:47:fd:50:04:c4:96:75:af:67:51:00:26:00:
a0:b7:bd:c0:9b:35:d3:8e:63:24:67:bb:37:7a:41:82:05:40:
7f:8a:7a:92:ad:50:4e:43:65:c1:bb:46:f1:0b:4b:af:50:e8:
ea:2b:b6:51:15:9f:77:6c:c2:74:4e:51:83:81:24:75:15:32:
18:e7:5e:9e:43:24:8b:dd:67:5d:a1:18:1f:45:47:86:f0:69:
a0:f4:7c:b2:23:0c:9c:6e:c6:b9:71:44:ca:ce:4d:23:0b:06:
f0:8c:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:55 2026 by rpki-client