Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213347.roa
File: AS213347.roa (raw, json)
Hash identifier: AvF4covhFrh+P1f8UKZGUAh0NGUKkXYsbGAD5+z336c=
Subject key identifier: 2F:16:78:20:55:24:E8:77:AE:23:54:E4:43:93:E2:29:D9:EE:EA:F0
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 43AA6059329146A81E21F204FCDD6A63FB528151
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213347.roa
Signing time: Sun 11 Oct 2026 04:53:31 +0000
ROA not before: Sun 11 Oct 2026 04:48:31 +0000
ROA not after: Sun 10 Oct 2027 04:53:31 +0000
asID: 213347
IP address blocks: 2a0f:9400:6950::/48 maxlen: 48
2a0f:9400:6951::/48 maxlen: 48
2a0f:9400:6952::/48 maxlen: 48
2a0f:9400:8014::/48 maxlen: 48
2a0f:9400:8015::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:aa:60:59:32:91:46:a8:1e:21:f2:04:fc:dd:6a:63:fb:52:81:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 11 04:48:31 2026 GMT
Not After : Oct 10 04:53:31 2027 GMT
Subject: CN=2F1678205524E877AE2354E44393E229D9EEEAF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:6b:72:12:61:34:41:07:cf:8e:2b:ef:22:
5a:00:ac:2f:8b:13:88:35:f1:6c:a3:5d:62:dd:f9:
0a:f9:cb:56:a4:c1:e7:eb:8c:98:b2:d5:00:fc:38:
a4:82:98:9c:5b:b7:55:7b:b0:17:d3:f3:a9:42:64:
b1:27:84:3a:d0:40:bd:3a:80:78:4d:cb:c3:70:5d:
ef:7f:35:1d:42:32:1d:dc:54:30:b7:0d:cf:91:86:
af:bd:a5:e8:ee:ac:c3:ea:b3:9e:e1:c3:19:f1:62:
83:04:84:3c:c0:85:6c:f0:ae:45:f1:af:90:1b:1a:
73:2e:c4:21:d9:17:50:a2:19:aa:5a:01:6e:c4:99:
bb:78:73:7b:91:62:80:53:cb:75:ca:37:f8:06:ab:
08:5f:b4:d4:ca:d8:19:e8:9f:ef:e2:39:3d:2a:b8:
41:a2:9c:cd:cf:29:d5:b9:cb:e2:92:a8:41:e2:3c:
16:e5:f4:cb:7a:f2:06:e1:68:b8:03:f0:3c:b8:80:
e7:85:89:db:3c:65:32:94:ff:cc:0a:09:1c:12:91:
7e:47:65:5c:93:5b:e7:e5:37:d3:f2:4c:5d:b9:38:
21:96:9b:3d:75:be:ec:86:7c:7f:1b:d4:db:25:07:
12:43:56:d6:9a:e4:51:a0:dd:91:b6:71:a6:d2:af:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:16:78:20:55:24:E8:77:AE:23:54:E4:43:93:E2:29:D9:EE:EA:F0
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213347.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6950::-2a0f:9400:6952:ffff:ffff:ffff:ffff:ffff
2a0f:9400:8014::/47
Signature Algorithm: sha256WithRSAEncryption
3f:db:50:fc:6a:43:6c:52:bd:f2:bb:80:44:4c:88:c5:5c:d8:
fb:7c:d5:31:f8:07:57:14:33:69:6e:ba:4b:1f:e6:c4:08:f5:
fd:fe:14:c8:ae:2f:f8:4c:fe:0d:4c:8b:12:99:03:ed:ba:34:
4d:be:f3:2b:a7:72:c5:a6:95:13:2b:b4:92:22:b4:21:03:7c:
58:02:0d:ef:5f:33:29:f5:33:40:2b:11:05:02:37:e5:06:a4:
ed:01:b7:de:73:82:0a:76:f0:5d:e4:0d:6f:01:be:d2:16:3a:
20:ad:b9:9d:d1:41:e8:f0:f4:c5:5f:bc:ab:d7:8c:4c:c9:0a:
b1:86:11:ec:67:b6:b4:04:a2:60:8a:5a:3c:9c:26:be:f6:df:
39:fd:15:cf:f5:48:9b:2e:fb:4c:a1:c6:18:e1:03:dc:b5:a9:
d9:e4:b0:6a:73:15:b9:a5:7f:c0:2d:ea:ce:54:fe:ad:a0:5e:
d9:60:a2:67:10:da:67:c3:be:d9:6e:82:36:43:36:06:54:e1:
2b:a9:1a:94:a6:90:0b:e0:17:8f:51:77:85:98:bb:aa:2f:57:
54:3f:a2:ca:64:6a:9f:8d:f5:e4:5d:94:1e:48:35:fa:dd:0d:
71:9c:88:f0:2e:9c:d0:04:51:fe:93:92:c8:58:30:a4:31:64:
5b:0e:41:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:26:36 2026 by rpki-client