Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213347.roa
File: AS213347.roa (raw, json)
Hash identifier: BjsTzhlGJ2qhZ/o4YVv5BNYjg/ffwwd2PTC7Mcjw6rw=
Subject key identifier: 94:18:61:C2:0B:44:AB:06:49:DE:71:FB:53:F9:06:07:05:3B:E9:FA
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 21A841E65B2D5040F6453F261AA84F8159C66B3B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213347.roa
Signing time: Mon 01 Jun 2026 08:39:08 +0000
ROA not before: Mon 01 Jun 2026 08:34:08 +0000
ROA not after: Mon 31 May 2027 08:39:08 +0000
asID: 213347
IP address blocks: 2a0f:9400:6951::/48 maxlen: 48
2a0f:9400:8014::/48 maxlen: 48
2a0f:9400:8015::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a8:41:e6:5b:2d:50:40:f6:45:3f:26:1a:a8:4f:81:59:c6:6b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 1 08:34:08 2026 GMT
Not After : May 31 08:39:08 2027 GMT
Subject: CN=941861C20B44AB0649DE71FB53F90607053BE9FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:d4:3b:59:87:ac:fd:f0:87:34:eb:4f:5a:
19:04:b5:59:c6:8f:2c:5e:47:93:aa:91:0c:2d:e9:
c5:f5:94:3a:c3:78:ec:e5:d0:56:0b:90:e3:8b:75:
3e:b4:eb:15:ae:68:ab:7d:64:55:bd:0f:2e:c8:a4:
da:cd:37:f5:33:c8:81:69:07:87:f8:73:70:4f:54:
78:01:4f:e5:c8:0b:a1:9f:9d:14:76:c7:56:84:d4:
99:99:48:6b:38:90:f6:26:94:dc:b9:27:79:57:04:
9e:ac:21:9f:b2:e0:ea:7c:8f:55:b9:57:37:00:e7:
32:6a:58:d0:57:34:41:df:3d:05:0d:c8:32:c9:bf:
b6:6d:78:7b:e7:62:14:23:fd:9b:4c:a4:4a:d0:87:
53:40:7a:14:cd:02:3a:e3:97:ef:4b:d1:00:a0:3f:
a3:0b:b7:2a:1b:56:c8:67:2b:8b:5f:22:c3:62:aa:
f8:48:5c:84:95:76:73:f6:a9:c6:69:06:94:01:ae:
e5:23:82:b3:a8:49:76:19:0a:f8:38:c4:df:23:64:
87:87:70:b5:21:4b:a3:ef:ce:8c:f4:1d:2d:90:10:
de:19:a1:57:1b:1d:46:59:62:80:38:dc:b8:2b:d8:
a1:83:79:2e:d8:85:b6:f8:2d:e7:72:f5:98:b9:f5:
bb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:18:61:C2:0B:44:AB:06:49:DE:71:FB:53:F9:06:07:05:3B:E9:FA
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213347.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6951::/48
2a0f:9400:8014::/47
Signature Algorithm: sha256WithRSAEncryption
92:76:61:77:63:73:1b:e6:21:e0:09:f6:c4:2b:75:67:c8:47:
92:c9:35:ab:d8:fd:74:13:e6:b9:0e:2e:1d:44:8f:5d:cd:b6:
29:43:fd:89:47:51:a8:60:c9:15:03:f4:d7:a3:83:12:f6:46:
b2:f2:1c:13:81:f2:99:37:fd:17:78:4a:e8:bf:5e:3a:bc:c7:
ec:36:af:4a:e8:b9:69:3a:31:09:c8:8b:be:b4:4d:3a:8c:65:
ce:85:e1:3e:5d:8d:ae:84:d7:de:82:4d:aa:5c:72:cc:9e:2c:
ed:1b:5c:3f:21:81:6f:39:a5:5a:47:5a:4e:c2:86:65:f9:24:
8e:50:9c:8b:d1:79:e1:66:d3:51:5f:62:9e:e0:6e:0b:cd:ee:
03:8c:98:db:88:e4:a1:c0:50:69:78:86:06:46:d1:8e:7a:f0:
70:4b:92:27:5f:f3:62:47:16:e2:30:77:bb:a5:9d:8a:54:6a:
80:98:55:54:f8:c3:30:28:95:c6:8d:fa:2d:3c:6f:97:64:9a:
14:ba:5e:3e:e6:3f:a4:3c:fd:c3:fb:6d:90:94:37:d3:1b:2c:
e1:f5:5b:5c:f5:97:6c:bf:e4:7f:00:9c:83:5c:4b:be:21:33:
1d:20:07:43:62:d5:a3:2f:22:cc:cf:9d:79:ba:c1:bd:82:88:
fb:30:21:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:04:23 2026 by rpki-client