Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213312.roa
File: AS213312.roa (raw, json)
Hash identifier: 4fRPwJWzDwiAVfOWj5sGOHt3/v0KMORFTAirN1cAfMA=
Subject key identifier: F9:4C:AB:DF:BB:10:D4:FB:46:FF:C9:20:46:F1:0A:40:4B:AD:AC:15
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3928112B54FA80E6FC1372D74722A06CBC14DB5C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213312.roa
Signing time: Tue 19 May 2026 04:03:22 +0000
ROA not before: Tue 19 May 2026 03:58:22 +0000
ROA not after: Tue 18 May 2027 04:03:22 +0000
asID: 213312
IP address blocks: 2a0f:9400:7709::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:28:11:2b:54:fa:80:e6:fc:13:72:d7:47:22:a0:6c:bc:14:db:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 03:58:22 2026 GMT
Not After : May 18 04:03:22 2027 GMT
Subject: CN=F94CABDFBB10D4FB46FFC92046F10A404BADAC15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:3b:09:db:8c:73:e7:a4:8d:a2:67:0b:1e:
2f:f6:63:84:01:65:7b:30:43:94:88:c9:04:b7:c2:
cc:10:f5:f1:40:d3:0d:fc:40:a9:17:d3:7a:e1:08:
f5:32:4d:b0:6b:62:ab:29:0d:9c:d2:04:cd:20:4b:
62:58:d8:02:b8:e6:42:4e:46:21:03:8d:2f:2e:ad:
3c:58:67:78:c1:6a:a1:e9:7b:27:9b:ed:de:4a:fa:
b6:7c:be:e2:ee:0f:eb:3c:2c:04:b7:00:51:c3:43:
84:87:41:59:ab:c0:47:35:79:30:da:15:e6:7f:24:
eb:11:41:78:bb:ed:38:c0:25:f0:26:87:44:91:97:
fb:a5:b3:86:ad:18:11:20:27:1f:a1:96:a9:ae:8f:
67:94:d8:c8:b8:f1:9e:00:1f:84:17:58:93:b5:bc:
24:ec:c8:62:3a:c3:d3:23:f3:e7:1c:74:d1:ed:f1:
1f:31:b2:b0:09:67:9c:8d:53:9b:59:25:0d:bc:b9:
05:59:ee:87:89:35:21:03:85:c1:b8:b0:9d:4a:f8:
c2:22:94:e0:60:dd:be:35:6a:b0:0f:04:c5:42:6b:
42:e2:26:7a:83:3d:9e:83:94:43:33:a2:15:3d:89:
be:3b:48:47:48:5a:eb:2d:52:41:b6:c7:78:61:dc:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4C:AB:DF:BB:10:D4:FB:46:FF:C9:20:46:F1:0A:40:4B:AD:AC:15
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7709::/48
Signature Algorithm: sha256WithRSAEncryption
8a:08:c0:4c:e1:47:d5:24:ff:40:31:39:30:a1:82:4f:f8:71:
58:71:09:96:13:6d:e4:e0:a9:7a:d4:a1:d2:eb:15:74:ab:b3:
ed:55:fe:85:f6:d1:30:a2:27:e6:bc:31:54:52:2f:b0:5d:3d:
82:44:63:4d:78:6b:52:f0:a2:1b:d4:b9:e8:e5:93:a2:e2:2a:
37:4e:c2:f9:e5:f2:ea:cc:27:23:76:0e:b4:40:cf:43:6e:9f:
d3:0c:d7:fb:7a:6c:45:a6:0c:5d:38:f6:30:77:ac:7e:5a:9f:
44:e2:24:c2:c3:99:83:32:60:67:22:f7:06:63:6c:6c:2e:f9:
d8:84:c0:bd:3a:fd:09:9c:63:56:0b:83:99:00:67:89:a7:47:
75:5c:08:04:36:47:6c:ac:b8:fb:19:4f:0d:f5:9a:12:3e:67:
f3:20:37:d2:37:98:b0:c4:e8:9a:84:0f:8d:97:6c:5e:9f:bd:
43:0a:f1:4a:c3:a4:e4:ae:a1:b1:90:bb:f7:a0:64:9b:16:f3:
4f:bc:41:bb:d6:c0:2e:c7:23:42:94:4d:6d:ec:fd:ad:07:cc:
62:31:21:f1:69:a0:e9:75:fb:ca:0b:6e:d1:77:d3:90:69:37:
c6:21:81:e9:54:4a:46:4e:01:4b:f2:65:2e:7c:fb:99:c8:c6:
5c:1f:30:13
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUOSgRK1T6gOb8E3LXRyKgbLwU21wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjA1MTkwMzU4MjJaFw0yNzA1MTgwNDAzMjJaMDMxMTAvBgNV
BAMTKEY5NENBQkRGQkIxMEQ0RkI0NkZGQzkyMDQ2RjEwQTQwNEJBREFDMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNcTsJ24xz56SNomcLHi/2Y4QB
ZXswQ5SIyQS3wswQ9fFA0w38QKkX03rhCPUyTbBrYqspDZzSBM0gS2JY2AK45kJO
RiEDjS8urTxYZ3jBaqHpeyeb7d5K+rZ8vuLuD+s8LAS3AFHDQ4SHQVmrwEc1eTDa
FeZ/JOsRQXi77TjAJfAmh0SRl/uls4atGBEgJx+hlqmuj2eU2Mi48Z4AH4QXWJO1
vCTsyGI6w9Mj8+ccdNHt8R8xsrAJZ5yNU5tZJQ28uQVZ7oeJNSEDhcG4sJ1K+MIi
lOBg3b41arAPBMVCa0LiJnqDPZ6DlEMzohU9ib47SEdIWustUkG2x3hh3NwdAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQU+Uyr37sQ1PtG/8kgRvEKQEutrBUwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMzMxMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlAB3CTANBgkqhkiG9w0BAQsFAAOC
AQEAigjATOFH1ST/QDE5MKGCT/hxWHEJlhNt5OCpetSh0usVdKuz7VX+hfbRMKIn
5rwxVFIvsF09gkRjTXhrUvCiG9S56OWTouIqN07C+eXy6swnI3YOtEDPQ26f0wzX
+3psRaYMXTj2MHesflqfROIkwsOZgzJgZyL3BmNsbC752ITAvTr9CZxjVguDmQBn
iadHdVwIBDZHbKy4+xlPDfWaEj5n8yA30jeYsMTomoQPjZdsXp+9QwrxSsOk5K6h
sZC796BkmxbzT7xBu9bALscjQpRNbez9rQfMYjEh8Wmg6XX7ygtu0XfTkGk3xiGB
6VRKRk4BS/JlLnz7mcjGXB8wEw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:04:21 2026 by rpki-client