Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212793.roa
File: AS212793.roa (raw, json)
Hash identifier: aX5OmJiqNyzivG5Na7c+EGJWTVZOQgRfAxbZnoKYZCI=
Subject key identifier: E4:8B:5A:D0:6D:33:6F:2B:BF:9F:9B:AB:B7:2C:F2:9C:D0:54:D6:EC
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 68CA8B44E9C8A3154DAED3CFE068E805FE441D8B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212793.roa
Signing time: Tue 19 May 2026 04:03:21 +0000
ROA not before: Tue 19 May 2026 03:58:21 +0000
ROA not after: Tue 18 May 2027 04:03:21 +0000
asID: 212793
IP address blocks: 2a0f:9400:800b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ca:8b:44:e9:c8:a3:15:4d:ae:d3:cf:e0:68:e8:05:fe:44:1d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 03:58:21 2026 GMT
Not After : May 18 04:03:21 2027 GMT
Subject: CN=E48B5AD06D336F2BBF9F9BABB72CF29CD054D6EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:0e:05:46:2c:fd:a0:c8:96:06:eb:e0:1e:
b2:37:a1:69:f5:05:13:9a:61:32:4b:d1:d1:8a:a2:
58:d4:d7:8d:75:e3:4b:dd:0d:2b:87:19:ec:4a:b5:
e6:2d:b3:e5:f7:16:91:2b:c4:22:a3:c2:fa:29:dc:
47:78:b7:84:2a:f1:8c:e2:a4:49:3d:9c:d5:ed:03:
c0:d4:0d:df:4a:af:d6:dd:28:86:36:27:92:2f:ab:
3b:3e:1e:31:2f:9a:97:a8:8f:97:14:6e:be:a5:80:
e0:bc:9a:ad:7f:1e:c5:c8:46:99:c5:7f:32:db:d5:
28:9a:d5:57:46:65:b6:bb:56:5e:9b:28:79:37:13:
e8:df:1d:67:f5:fa:ab:89:7d:0f:c9:a0:e7:5e:b9:
22:b7:2d:97:8d:fc:9a:89:4a:83:8d:0d:c7:12:d5:
77:02:66:15:e3:23:fc:b1:3e:04:d8:a3:99:e3:0a:
c1:85:a5:f4:b7:f6:17:f6:65:a7:18:70:d6:7e:54:
39:a1:0a:20:d9:50:97:3a:8c:07:ee:43:42:d9:1e:
eb:ea:6d:d7:6a:b8:7a:3e:00:f0:cf:8a:2d:4e:c7:
7b:e2:b1:38:70:1e:23:e8:6e:23:62:c5:96:f3:23:
5a:aa:70:18:55:6c:bb:74:89:71:5f:7f:8d:c6:08:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8B:5A:D0:6D:33:6F:2B:BF:9F:9B:AB:B7:2C:F2:9C:D0:54:D6:EC
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:800b::/48
Signature Algorithm: sha256WithRSAEncryption
09:b4:79:6b:bb:58:79:78:bd:60:c6:a7:9c:ef:b9:f5:89:03:
e1:e4:81:97:7b:b6:77:88:98:aa:18:48:f8:76:84:5a:74:ea:
e3:0d:1d:cf:eb:47:95:25:51:60:cf:41:25:6a:a4:49:95:40:
8d:88:bb:89:b8:18:74:d1:c5:a9:17:fe:f0:24:d1:10:d8:48:
91:53:ed:c8:42:3f:d3:0f:8a:57:42:c5:e3:9f:16:4e:67:24:
fc:58:db:26:42:53:57:89:4c:6b:ac:07:f5:19:79:f5:08:ef:
aa:6c:e6:ca:e7:bb:5c:f0:d4:d2:d4:99:db:45:6d:3c:8b:5a:
6e:25:69:36:cf:b9:ef:cd:6d:28:ad:60:e9:8b:0d:74:88:97:
e0:2d:d4:07:bc:d7:f1:94:e6:c5:da:89:65:0e:79:5a:fb:d5:
24:3e:ac:8f:af:f0:27:72:59:1a:90:b8:77:2e:fb:55:2e:0c:
2b:c4:77:15:1f:d1:31:d4:91:dd:37:4d:22:aa:d5:48:a9:b9:
e6:e3:62:67:34:e6:30:e5:6f:a5:93:6f:e9:d3:cc:a3:b5:d6:
74:44:9a:0b:75:8a:5a:d3:71:e5:df:10:83:4b:b3:37:f2:12:
7c:23:9e:25:7c:7c:17:7e:74:77:39:ea:34:bc:b5:9d:59:48:
b0:b7:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:01:23 2026 by rpki-client