Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213234.roa
File: AS213234.roa (raw, json)
Hash identifier: e6cXFzWRwk+EEiyjwPXLxqKhdSaNQ34PUpGdtzG/1vI=
Subject key identifier: 8C:C9:80:68:61:10:12:90:0D:7B:4D:13:B1:BA:DC:3E:C1:87:74:59
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6963FB214FC1AAEE3960D0459339AB143FEF41ED
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213234.roa
Signing time: Tue 19 May 2026 04:03:25 +0000
ROA not before: Tue 19 May 2026 03:58:25 +0000
ROA not after: Tue 18 May 2027 04:03:25 +0000
asID: 213234
IP address blocks: 2a0f:9400:802c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:63:fb:21:4f:c1:aa:ee:39:60:d0:45:93:39:ab:14:3f:ef:41:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 03:58:25 2026 GMT
Not After : May 18 04:03:25 2027 GMT
Subject: CN=8CC98068611012900D7B4D13B1BADC3EC1877459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:f8:3d:d5:e3:bf:b5:fc:ad:43:5e:08:14:
98:56:8a:01:db:8c:f0:89:91:5d:86:6d:fe:a7:f7:
9c:b6:ef:2e:9e:ee:41:a6:d7:89:9d:8c:87:1c:02:
ec:ee:4b:85:d6:da:45:f0:e4:57:c5:6e:4e:a9:84:
36:e4:79:22:39:f9:67:d7:d5:f0:0f:9d:97:03:98:
14:b8:9b:5c:ec:cf:d1:a8:6c:38:5c:66:cf:54:0f:
3c:dd:4a:2d:67:05:fa:51:60:8b:37:c4:88:86:63:
6a:cb:34:e5:22:96:dd:e2:e6:92:67:db:47:24:46:
f9:cf:17:1b:a4:8f:b5:88:e6:d3:72:41:af:74:fc:
4a:c9:d9:b2:a8:40:48:01:e4:e7:f6:6b:69:8a:5a:
7c:e3:ce:28:da:11:cb:c8:4b:ff:96:51:0f:73:dc:
a9:ee:12:c9:1f:f3:98:fe:ae:b7:89:53:8c:31:ca:
d2:f7:65:53:01:8e:b9:d3:3e:ac:61:ff:47:82:57:
eb:38:d0:49:6e:13:65:9c:2a:66:5b:c5:76:14:0e:
4d:14:6f:58:7e:ad:40:da:10:5f:cf:7d:a0:67:78:
97:e2:5b:b9:5d:ae:e6:83:e2:16:69:0f:74:16:d0:
07:78:9a:e9:4e:62:d7:58:b0:3f:5d:d4:03:c6:cd:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C9:80:68:61:10:12:90:0D:7B:4D:13:B1:BA:DC:3E:C1:87:74:59
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:802c::/48
Signature Algorithm: sha256WithRSAEncryption
2f:6a:af:cd:b6:aa:58:4f:96:84:ac:ed:a4:5e:d1:d2:74:3e:
7f:ea:c9:62:fd:3a:c4:01:b5:2e:0c:b8:64:4e:d9:62:7b:47:
a7:b2:1b:99:11:b2:61:a3:5d:b2:96:f5:0d:d9:12:49:e7:82:
59:56:35:11:b0:49:34:21:49:e0:3e:9e:5f:08:34:0f:be:a8:
b6:1b:74:d9:ce:b0:32:63:ee:00:67:ea:9a:4a:54:6d:97:e9:
3e:38:1f:1d:f9:a0:6c:1c:39:06:62:16:ff:ed:ae:70:40:43:
76:c4:df:09:12:f9:41:bd:e8:80:e9:a2:7a:1b:08:55:cb:12:
e6:c8:d1:16:45:d7:4f:62:50:54:30:03:ee:86:e8:80:2d:08:
8e:84:8b:b3:8f:fd:ee:51:9c:60:e8:70:c3:b2:8e:7d:df:7f:
2b:56:8d:1a:aa:b1:6b:ff:07:4a:c7:96:f4:00:69:51:2f:1b:
cf:eb:0c:50:cb:ea:e7:65:c2:7f:0e:c3:5a:e4:a1:fa:82:77:
6d:c0:c4:60:0c:ba:66:34:2e:45:2f:e0:2e:15:6f:ec:bb:47:
a3:56:34:81:41:ee:32:8c:1c:97:66:ff:a2:77:dc:79:d9:a0:
23:28:6f:a0:ac:2c:af:10:c3:82:93:14:0d:a1:7a:cf:f7:c4:
62:17:22:7d
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUaWP7IU/Bqu45YNBFkzmrFD/vQe0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjA1MTkwMzU4MjVaFw0yNzA1MTgwNDAzMjVaMDMxMTAvBgNV
BAMTKDhDQzk4MDY4NjExMDEyOTAwRDdCNEQxM0IxQkFEQzNFQzE4Nzc0NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkvg91eO/tfytQ14IFJhWigHb
jPCJkV2Gbf6n95y27y6e7kGm14mdjIccAuzuS4XW2kXw5FfFbk6phDbkeSI5+WfX
1fAPnZcDmBS4m1zsz9GobDhcZs9UDzzdSi1nBfpRYIs3xIiGY2rLNOUilt3i5pJn
20ckRvnPFxukj7WI5tNyQa90/ErJ2bKoQEgB5Of2a2mKWnzjzijaEcvIS/+WUQ9z
3KnuEskf85j+rreJU4wxytL3ZVMBjrnTPqxh/0eCV+s40EluE2WcKmZbxXYUDk0U
b1h+rUDaEF/PfaBneJfiW7ldruaD4hZpD3QW0Ad4mulOYtdYsD9d1APGzVwPAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUjMmAaGEQEpANe00TsbrcPsGHdFkwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlACALDANBgkqhkiG9w0BAQsFAAOC
AQEAL2qvzbaqWE+WhKztpF7R0nQ+f+rJYv06xAG1Lgy4ZE7ZYntHp7IbmRGyYaNd
spb1DdkSSeeCWVY1EbBJNCFJ4D6eXwg0D76otht02c6wMmPuAGfqmkpUbZfpPjgf
HfmgbBw5BmIW/+2ucEBDdsTfCRL5Qb3ogOmiehsIVcsS5sjRFkXXT2JQVDAD7obo
gC0IjoSLs4/97lGcYOhww7KOfd9/K1aNGqqxa/8HSseW9ABpUS8bz+sMUMvq52XC
fw7DWuSh+oJ3bcDEYAy6ZjQuRS/gLhVv7LtHo1Y0gUHuMowcl2b/onfcedmgIyhv
oKwsrxDDgpMUDaF6z/fEYhcifQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:22:51 2026 by rpki-client