Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213323.roa
File: AS213323.roa (raw, json)
Hash identifier: 2yLW8bnTBPmNMGidYUHzmDdLZ59Ei1GcGMj6FXGy1es=
Subject key identifier: 02:DD:9E:59:28:50:01:D6:BB:65:B6:6E:FE:47:86:16:E7:DC:E7:DF
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 598C7CCB2950A15B90583EB33CF19DDB41BF7EC7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213323.roa
Signing time: Mon 20 Jul 2026 20:39:39 +0000
ROA not before: Mon 20 Jul 2026 20:34:39 +0000
ROA not after: Mon 19 Jul 2027 20:39:39 +0000
asID: 213323
IP address blocks: 2a0f:9400:610b::/48 maxlen: 48
2a0f:9400:610f::/48 maxlen: 48
2a0f:9400:7320::/44 maxlen: 44
2a0f:9400:7730::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:8c:7c:cb:29:50:a1:5b:90:58:3e:b3:3c:f1:9d:db:41:bf:7e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 20 20:34:39 2026 GMT
Not After : Jul 19 20:39:39 2027 GMT
Subject: CN=02DD9E59285001D6BB65B66EFE478616E7DCE7DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d6:da:b7:31:5c:c8:32:95:f4:10:37:4c:6b:
2f:2b:60:89:6f:6d:2b:29:e9:ad:1a:5a:3f:3b:16:
0c:f3:7f:5a:fa:d0:b2:c0:60:09:7c:d6:47:00:ba:
59:9c:61:d5:ab:e4:ab:e1:c7:fa:92:16:9e:be:70:
94:56:b1:9d:ca:1c:a2:ea:40:9e:33:1d:6c:91:a6:
e7:e8:1c:bb:30:98:76:22:fc:d7:c5:67:fa:0d:3d:
7f:3a:52:ef:0a:c0:a1:11:6b:82:40:ce:a4:b9:bf:
4d:e4:d5:b6:b0:79:58:aa:2d:54:0c:ed:87:7c:17:
b3:19:ca:e8:a0:c5:24:79:a0:57:f4:d8:8e:22:35:
2f:d8:6a:cb:0b:f3:67:7e:9a:74:b2:34:d0:7d:70:
2f:ae:70:1f:e6:3d:70:ab:5a:b7:b1:e1:dd:ad:a5:
76:f6:3c:ce:ec:14:36:c5:9b:99:ae:2a:27:86:24:
4b:4e:82:42:e9:be:28:5e:b7:49:75:57:ce:57:f1:
4c:b1:17:6d:ce:a2:56:45:94:e0:0d:c7:8d:44:73:
04:5f:37:7b:27:11:08:bb:d9:fa:d1:b8:10:e6:55:
0e:b3:b2:ad:e6:aa:44:82:00:53:7e:cc:88:a1:00:
3f:0a:fb:1f:ff:5e:60:34:33:dc:8c:31:db:79:96:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DD:9E:59:28:50:01:D6:BB:65:B6:6E:FE:47:86:16:E7:DC:E7:DF
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610b::/48
2a0f:9400:610f::/48
2a0f:9400:7320::/44
2a0f:9400:7730::/44
Signature Algorithm: sha256WithRSAEncryption
50:73:4f:13:4d:fa:12:19:1f:e9:0b:1d:de:a8:c7:2f:c2:c7:
41:5b:74:ab:b6:e6:0a:ba:be:d0:c8:28:03:76:2f:05:03:e3:
71:50:58:54:cd:ab:55:2f:2a:b7:5f:96:a4:93:65:cb:0c:c2:
71:dc:3f:c0:cc:86:f1:00:c6:6f:91:79:52:cd:cb:5a:f7:d8:
93:bd:d6:8b:a9:17:08:22:c5:b7:9e:b6:cf:f4:85:2a:a6:79:
38:8e:9d:ad:1a:e3:de:df:b3:88:ac:81:ee:09:c4:2f:66:a2:
a6:38:29:4d:ac:2f:5a:d7:56:96:e7:55:23:8e:01:9b:f2:85:
6a:17:a3:92:fe:12:7e:84:39:ae:1f:b6:25:d1:16:9b:0e:8d:
e7:37:73:2c:e3:05:61:dd:1d:2d:9d:cc:07:85:a6:5f:2e:a3:
bc:95:aa:f4:18:53:a0:57:b2:56:98:c2:97:ec:34:7d:3f:9d:
8d:b1:f2:9e:7f:d6:a4:a1:c7:19:99:3b:f7:7f:6e:5d:2d:51:
1e:56:2e:c0:85:36:9e:d7:b5:02:33:4a:53:70:cb:ef:6a:4f:
71:63:46:44:88:ff:3f:12:12:cd:cd:4e:6c:9d:95:f2:88:d7:
b4:11:8d:d1:c3:27:71:85:89:ce:fa:7d:3f:08:ea:53:6b:d7:
82:05:ac:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:56 2026 by rpki-client