Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210714.roa
File: AS210714.roa (raw, json)
Hash identifier: BLd4IfxWEqrav6OYxm7Qh92TVjSpa9fXM/wsNoEVfhw=
Subject key identifier: BE:3E:33:BB:F7:87:E8:CC:EF:2D:BC:3E:BE:71:D9:AE:78:6D:14:75
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6E18233AE233C0D132F8FE8B1B62E53D0C7A477D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210714.roa
Signing time: Tue 19 May 2026 04:03:21 +0000
ROA not before: Tue 19 May 2026 03:58:21 +0000
ROA not after: Tue 18 May 2027 04:03:21 +0000
asID: 210714
IP address blocks: 2a0f:9400:7862::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:18:23:3a:e2:33:c0:d1:32:f8:fe:8b:1b:62:e5:3d:0c:7a:47:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 03:58:21 2026 GMT
Not After : May 18 04:03:21 2027 GMT
Subject: CN=BE3E33BBF787E8CCEF2DBC3EBE71D9AE786D1475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:26:1a:7c:a1:c2:db:98:ee:77:ea:46:ac:
0d:cd:ec:35:da:9e:ee:37:9a:d1:54:15:50:8f:45:
15:23:49:64:f1:67:c2:ce:7c:b9:37:4e:d1:27:5b:
42:75:08:61:75:f1:af:5e:cc:50:c8:96:cd:35:1f:
c7:74:53:98:cf:b2:d0:d7:21:39:3a:92:9b:ba:57:
99:53:77:7d:bb:65:b0:0e:e3:39:87:8f:3c:fb:fb:
4d:f1:4b:bc:91:ae:14:7a:8b:bb:10:19:d5:bc:82:
c2:41:2a:36:15:ee:bc:5c:56:a2:25:37:62:d1:ad:
e2:f7:11:e6:ff:1d:e3:91:7e:79:6a:f4:ca:4a:53:
3c:97:d8:d5:4f:70:f2:28:e3:36:45:79:0a:8c:e6:
04:f6:15:ee:41:d4:5d:31:ff:28:0a:b1:c9:a9:e0:
32:e3:1e:e1:be:2c:ec:2d:d2:dc:2a:e6:af:84:79:
85:ca:f9:94:ab:ab:1c:6a:e8:2a:69:7a:f7:f6:70:
20:e1:94:95:94:43:6a:38:b6:ad:1c:70:75:07:c2:
68:42:b4:6c:f3:21:a2:bc:bb:a0:2d:a4:a1:5f:0f:
4a:06:5a:3b:d2:2d:11:a7:96:e5:6e:4d:01:f4:2c:
97:3c:d0:a3:f1:7f:df:36:0a:11:f0:c5:06:d7:e4:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3E:33:BB:F7:87:E8:CC:EF:2D:BC:3E:BE:71:D9:AE:78:6D:14:75
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210714.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7862::/48
Signature Algorithm: sha256WithRSAEncryption
83:ec:53:36:6f:81:7a:44:76:ac:c2:27:75:55:fe:85:1f:a3:
9d:5d:49:0d:0f:ff:03:ba:db:ff:7d:56:da:39:eb:81:e1:55:
f5:5c:a2:22:f6:00:e3:26:8c:24:cc:b7:30:e1:b6:a2:ce:c6:
7f:00:a4:09:26:57:7f:22:b2:2a:57:24:82:c0:ec:8b:dd:ce:
a0:92:f2:2e:e2:45:d9:66:84:f0:68:8c:3e:e5:3e:ca:89:52:
22:5e:8a:6d:ba:e0:f1:33:90:08:e4:9c:a3:a0:5f:f6:10:6b:
67:72:b1:1b:51:3c:f6:13:8d:3c:43:82:52:4b:c2:b9:71:ba:
d8:98:e1:45:0b:19:a9:85:b2:0c:2d:4d:98:e5:4c:84:4e:66:
cb:91:09:c9:2a:e9:e2:23:60:d8:c9:81:66:51:a3:0d:47:26:
22:6c:b8:cb:dd:34:48:1a:b1:fc:6e:c0:cb:fe:71:e9:60:52:
82:5a:3a:4c:a6:01:47:41:98:70:58:8e:c7:13:b8:e0:60:c3:
13:35:c0:fa:d3:8a:41:fe:3b:91:46:b7:24:c4:24:95:e4:f8:
f6:26:a5:9a:96:a2:87:c7:17:16:8d:c9:13:85:b1:11:25:43:
9e:07:91:46:7c:7b:72:5d:90:f7:21:3d:a6:d0:10:e1:6a:cd:
f1:35:06:8e
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUbhgjOuIzwNEy+P6LG2LlPQx6R30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjA1MTkwMzU4MjFaFw0yNzA1MTgwNDAzMjFaMDMxMTAvBgNV
BAMTKEJFM0UzM0JCRjc4N0U4Q0NFRjJEQkMzRUJFNzFEOUFFNzg2RDE0NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1SYafKHC25jud+pGrA3N7DXa
nu43mtFUFVCPRRUjSWTxZ8LOfLk3TtEnW0J1CGF18a9ezFDIls01H8d0U5jPstDX
ITk6kpu6V5lTd327ZbAO4zmHjzz7+03xS7yRrhR6i7sQGdW8gsJBKjYV7rxcVqIl
N2LRreL3Eeb/HeORfnlq9MpKUzyX2NVPcPIo4zZFeQqM5gT2Fe5B1F0x/ygKscmp
4DLjHuG+LOwt0twq5q+EeYXK+ZSrqxxq6Cppevf2cCDhlJWUQ2o4tq0ccHUHwmhC
tGzzIaK8u6AtpKFfD0oGWjvSLRGnluVuTQH0LJc80KPxf982ChHwxQbX5G/lAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUvj4zu/eH6MzvLbw+vnHZrnhtFHUwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMDcxNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlAB4YjANBgkqhkiG9w0BAQsFAAOC
AQEAg+xTNm+BekR2rMIndVX+hR+jnV1JDQ//A7rb/31W2jnrgeFV9VyiIvYA4yaM
JMy3MOG2os7GfwCkCSZXfyKyKlckgsDsi93OoJLyLuJF2WaE8GiMPuU+yolSIl6K
bbrg8TOQCOSco6Bf9hBrZ3KxG1E89hONPEOCUkvCuXG62JjhRQsZqYWyDC1NmOVM
hE5my5EJySrp4iNg2MmBZlGjDUcmImy4y900SBqx/G7Ay/5x6WBSglo6TKYBR0GY
cFiOxxO44GDDEzXA+tOKQf47kUa3JMQkleT49ialmpaih8cXFo3JE4WxESVDngeR
Rnx7cl2Q9yE9ptAQ4WrN8TUGjg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 09:24:24 2026 by rpki-client