Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214085.roa
File: AS214085.roa (raw, json)
Hash identifier: /mRRbxLTAurm1bBuzrMyiqL81a+lcm/kx0SvHpTdpsM=
Subject key identifier: F8:61:00:D3:DC:3B:44:E7:BD:CB:3C:2A:57:A5:44:0B:73:C2:F7:0F
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2538A806997F15CD3941084B012A26760C1791B5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214085.roa
Signing time: Mon 17 Aug 2026 18:30:58 +0000
ROA not before: Mon 17 Aug 2026 18:25:58 +0000
ROA not after: Mon 16 Aug 2027 18:30:58 +0000
asID: 214085
IP address blocks: 2a0f:9400:614a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:38:a8:06:99:7f:15:cd:39:41:08:4b:01:2a:26:76:0c:17:91:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 17 18:25:58 2026 GMT
Not After : Aug 16 18:30:58 2027 GMT
Subject: CN=F86100D3DC3B44E7BDCB3C2A57A5440B73C2F70F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:c8:91:9c:e0:e3:2d:d4:bf:94:d1:b2:b1:
02:db:ca:8f:90:14:21:be:75:3b:44:7b:86:e5:f8:
91:7b:c2:55:5f:21:86:21:36:4c:35:c4:7a:ff:1c:
67:c6:bd:6f:84:c9:ef:06:3f:42:e0:e5:a5:a8:3a:
3f:34:63:40:61:1d:35:37:78:dc:82:1f:34:d5:73:
77:54:de:b3:43:8b:02:77:06:32:0e:22:ce:f8:63:
26:86:ef:17:22:91:ce:cf:b5:4e:30:92:52:d9:47:
79:de:5c:97:b7:45:ed:d0:30:58:0a:1a:dd:a2:20:
fc:fe:76:31:f8:3c:b1:61:36:0d:ac:c9:1f:33:35:
82:d6:18:58:0d:4f:2b:70:22:3a:94:90:84:5f:81:
9e:9d:7e:d8:c6:b5:a8:74:03:00:c6:51:75:fb:15:
62:6d:d7:c4:65:3e:61:b5:f6:f2:27:22:95:0a:d3:
b7:dd:7e:f4:bb:7e:84:f6:24:cb:96:8e:8b:1c:cd:
8f:4e:13:96:68:35:2f:46:fe:1e:4c:b9:60:04:28:
48:28:07:ad:12:5f:ed:9e:4c:31:3a:95:af:2f:1a:
19:d4:e1:90:23:d2:bb:72:b0:15:59:fd:a8:6d:7b:
11:1d:25:61:23:87:79:6c:e4:cf:65:de:0b:8c:6e:
73:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:61:00:D3:DC:3B:44:E7:BD:CB:3C:2A:57:A5:44:0B:73:C2:F7:0F
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:614a::/48
Signature Algorithm: sha256WithRSAEncryption
38:5d:20:03:d0:22:5e:44:e3:f4:a5:87:7b:7d:d4:8b:e6:1c:
c9:f1:20:02:10:20:15:4f:9c:51:00:61:a4:e3:f2:f0:e9:37:
22:a0:1c:75:e8:5f:6c:6f:b1:37:62:13:4b:44:43:5e:05:48:
4f:46:f1:d5:df:d8:4b:0c:25:22:1b:dc:21:db:a3:bf:ae:3a:
57:58:23:0a:f4:23:25:46:ea:5d:94:42:ec:ff:6e:29:b4:a3:
9e:e4:be:98:e5:8e:e0:5a:3c:88:2c:d7:e1:3b:6d:74:ce:ca:
9d:5d:2a:ea:e9:39:a8:12:09:c3:cb:e6:fc:19:71:fb:29:ac:
ae:9f:9b:ff:06:0f:e2:95:d3:f9:d1:de:65:bc:d5:87:bc:c6:
8c:74:80:6b:f3:19:4f:22:e8:78:76:20:e8:57:8b:88:07:77:
9b:00:01:5a:3c:77:68:db:a1:e7:87:87:fb:6d:5e:fd:fc:6f:
3d:00:14:9c:b5:9d:6e:08:a1:42:82:ff:43:a9:d5:57:bc:ac:
d5:91:5b:a6:a6:a1:56:20:15:ee:be:c2:d5:1f:26:79:8a:01:
05:37:3a:30:de:dc:fd:b8:df:02:0f:58:d6:58:1e:1a:51:71:
e6:71:cb:27:20:59:f0:a9:eb:2d:a6:12:0e:a5:b9:1f:dc:72:
70:1d:1c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:35:10 2026 by rpki-client