Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213262.roa
File:                     AS213262.roa (raw, json)
Hash identifier:          +w4di3VBPqWbP00JOQxYF1kk16HRyzosTrNiMsTY8TA=
Subject key identifier:   C5:2A:DC:D0:DC:9B:9B:51:B3:B3:C3:D5:6A:02:88:0B:DB:D7:91:0E
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       1F73B6AD2D7C9C9FABDC9C1643DAB4C4EAEE4288
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213262.roa
Signing time:             Tue 19 May 2026 04:03:22 +0000
ROA not before:           Tue 19 May 2026 03:58:22 +0000
ROA not after:            Tue 18 May 2027 04:03:22 +0000
asID:                     213262
IP address blocks:        2a0f:9400:8019::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:73:b6:ad:2d:7c:9c:9f:ab:dc:9c:16:43:da:b4:c4:ea:ee:42:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: May 19 03:58:22 2026 GMT
            Not After : May 18 04:03:22 2027 GMT
        Subject: CN=C52ADCD0DC9B9B51B3B3C3D56A02880BDBD7910E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:93:83:1d:ab:3e:7e:60:7c:99:65:6d:bc:c0:
                    37:e6:5a:2a:bf:40:e8:bc:5e:a3:e6:82:50:88:9b:
                    1c:90:83:95:08:b5:c8:f2:2e:d8:29:c5:e1:43:a1:
                    f5:f5:13:1b:8a:96:fc:83:a7:aa:06:74:7a:ae:2c:
                    91:7d:e6:03:c3:78:c0:63:ab:04:59:f2:43:81:7f:
                    bc:54:f2:8e:00:2d:dd:f9:6a:7c:20:6a:a9:10:bb:
                    8d:39:55:e4:c5:70:2a:fa:ae:e6:fa:67:3c:9e:ac:
                    02:de:46:d6:15:60:05:fc:24:31:84:10:3a:45:1b:
                    7f:3d:43:76:bf:38:9b:81:de:27:db:12:63:7c:5f:
                    fa:5f:33:db:02:63:35:f0:e8:f7:e1:5d:22:f7:60:
                    d2:e7:f6:a7:c2:7a:f6:f7:78:c3:4e:3d:ca:98:c2:
                    29:38:b5:4c:18:96:bd:d9:ad:15:6e:47:88:67:f8:
                    55:22:47:62:fe:ac:d4:af:29:73:5d:20:7c:e1:9b:
                    9a:43:7d:0c:07:df:ae:aa:e0:dd:51:2f:c9:05:b4:
                    6b:0d:33:8c:17:b8:ca:4c:e5:64:2a:c8:a8:dd:26:
                    73:95:59:ab:53:b8:2e:f9:82:35:6a:59:a3:d8:07:
                    ce:16:fd:a0:c8:65:e1:8d:f2:7d:e8:e6:97:ed:37:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2A:DC:D0:DC:9B:9B:51:B3:B3:C3:D5:6A:02:88:0B:DB:D7:91:0E
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213262.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:8019::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:c2:1b:85:4a:98:33:1c:92:e4:f9:85:dc:66:8a:28:33:1c:
         cf:ed:d4:1c:9f:f7:a3:ed:62:59:6a:3f:79:7d:36:1e:97:5e:
         5b:fd:f0:a5:14:87:1b:69:51:54:97:de:16:73:7b:5b:db:d3:
         9e:17:99:3c:04:c5:30:6c:b7:30:fc:22:d5:8d:08:48:a7:ea:
         7c:32:b9:ee:b1:20:4a:f2:96:12:49:21:c2:7f:11:e4:10:ce:
         c9:e7:b9:69:f8:c5:0f:7d:93:50:a4:0a:14:bf:08:92:7e:ff:
         1f:2d:3d:01:ba:e0:08:c6:1e:ae:dd:33:23:dc:ec:8e:7d:b1:
         5b:92:7f:71:0f:7f:02:ee:1d:c9:38:df:d9:e8:05:ec:37:cc:
         90:d5:2f:6b:3f:0a:fc:88:5c:53:2c:9f:5f:e0:fd:74:10:2f:
         47:13:65:9e:fb:a7:8e:f1:82:5b:20:f9:f1:39:26:98:ee:aa:
         1d:d0:38:b6:48:e4:b7:d2:5a:b4:4f:99:ac:e9:69:d2:f8:ee:
         3a:b6:4f:98:c4:41:74:ae:ae:c0:7d:ab:6c:0b:b5:28:bc:48:
         37:e8:73:bd:b0:59:6a:ab:c6:83:a0:18:8d:64:99:84:90:14:
         50:65:58:d9:42:81:a5:52:ab:52:3b:72:a8:43:19:36:8d:b9:
         86:7b:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:22:59 2026 by rpki-client