Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214199.roa
File: AS214199.roa (raw, json)
Hash identifier: Z9Hl9XJIZs0SZL6RyBFE40MJbT8JUpzMBQFCuSnBlcg=
Subject key identifier: 31:71:1C:1C:72:EE:12:EC:27:34:E7:42:8E:A2:CF:50:35:6B:D5:96
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 677D04603830E62A12FF5BFE416A9AFA9D411738
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214199.roa
Signing time: Sun 19 Jul 2026 01:29:51 +0000
ROA not before: Sun 19 Jul 2026 01:24:51 +0000
ROA not after: Sun 18 Jul 2027 01:29:51 +0000
asID: 214199
IP address blocks: 2a0f:9400:7e16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:7d:04:60:38:30:e6:2a:12:ff:5b:fe:41:6a:9a:fa:9d:41:17:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 19 01:24:51 2026 GMT
Not After : Jul 18 01:29:51 2027 GMT
Subject: CN=31711C1C72EE12EC2734E7428EA2CF50356BD596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:8a:04:2c:93:c1:c0:5e:2b:9b:b4:08:2c:
b3:b8:24:e7:4d:8f:10:c3:cd:61:af:c1:03:c0:49:
db:71:ae:20:98:b6:c6:8f:17:c6:80:32:41:f7:a8:
75:29:96:69:8b:c1:e1:08:1f:47:ca:61:5d:46:93:
e7:09:9a:e7:94:6d:23:b9:11:0d:46:2e:29:67:8c:
b2:96:ec:7b:b6:56:88:74:26:c0:59:19:44:76:e4:
67:e2:b6:9c:1b:04:60:2a:16:37:00:b2:5e:35:65:
13:1b:20:83:3a:6f:6e:e8:24:7f:ad:10:9b:13:b2:
31:6c:12:32:8e:9d:95:c6:57:bc:e3:ed:60:eb:09:
4a:cf:7f:3b:a7:ee:4f:ce:c9:95:75:0f:e1:77:70:
8f:5b:de:fe:88:d8:d6:30:d5:aa:8e:aa:bb:79:82:
c8:89:2c:c0:1f:a2:b8:87:87:37:2f:02:4d:b8:68:
0f:29:02:3c:7a:8e:9a:37:8b:09:d9:ff:2d:ce:b7:
20:75:48:c2:85:12:0e:1f:db:26:62:4f:d7:d7:af:
cb:bb:e1:22:bf:60:75:a3:40:ac:88:67:9f:01:09:
7f:cf:94:db:8e:27:d8:f6:15:cf:d1:2a:5c:16:d5:
29:b8:47:be:a9:29:68:65:97:3a:40:5d:ba:53:0e:
1a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:71:1C:1C:72:EE:12:EC:27:34:E7:42:8E:A2:CF:50:35:6B:D5:96
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e16::/48
Signature Algorithm: sha256WithRSAEncryption
7e:55:8b:d1:84:c7:f0:fa:aa:15:eb:a9:b2:5e:3c:75:e6:b3:
94:33:15:e5:4d:76:da:03:ef:57:f4:6f:25:d2:51:48:0f:8f:
6d:0c:7b:d1:e3:13:e9:c0:80:f8:e0:9c:38:de:db:07:36:62:
3f:df:26:0e:0c:89:fd:aa:3a:62:44:db:01:a7:65:ab:d8:49:
eb:e7:cb:28:f6:57:fb:a3:47:c7:bc:f3:d1:84:ec:fd:74:1e:
8a:eb:fb:22:d8:67:09:49:34:c3:ef:c9:e6:af:b9:a5:84:50:
c1:7b:22:37:d5:0c:39:cc:e2:ab:bc:3d:ec:95:73:03:af:d2:
f8:f4:ad:0d:7a:02:10:a7:9c:fd:6a:48:3a:84:17:ff:0a:cb:
bc:a4:10:10:1e:c8:1d:b0:3f:70:ab:dc:1f:e0:d6:ce:61:2e:
4c:b8:35:56:0a:04:ad:77:14:52:a0:5c:53:38:01:a5:eb:bf:
48:a4:35:0a:19:1b:2b:1b:76:31:1c:9b:9e:32:3e:e3:e0:93:
29:f0:b3:92:2a:6a:f5:ae:89:d2:80:aa:0c:a1:51:18:5c:19:
26:51:c0:68:31:dc:d6:6c:90:a9:74:3f:a1:c7:46:9b:42:e8:
1c:32:93:0a:0f:c2:25:8e:42:47:44:94:aa:af:35:db:81:99:
45:a5:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:54 2026 by rpki-client