Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214203.roa
File: AS214203.roa (raw, json)
Hash identifier: 2DjnZ+iRtJUEhxgkoe96KR+BuQNrUK7QboeQtS04HDc=
Subject key identifier: 17:0C:BC:A8:68:DA:1F:F2:75:5C:53:C7:53:41:C2:95:BB:7F:B0:B5
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1E7419416422168869637CB378D8BEF759B01806
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214203.roa
Signing time: Tue 29 Sep 2026 02:31:46 +0000
ROA not before: Tue 29 Sep 2026 02:26:46 +0000
ROA not after: Tue 28 Sep 2027 02:31:46 +0000
asID: 214203
IP address blocks: 2a0f:9400:6163::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:74:19:41:64:22:16:88:69:63:7c:b3:78:d8:be:f7:59:b0:18:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 29 02:26:46 2026 GMT
Not After : Sep 28 02:31:46 2027 GMT
Subject: CN=170CBCA868DA1FF2755C53C75341C295BB7FB0B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:5a:c8:79:e4:bb:94:71:23:fb:a7:e4:16:
c8:63:91:46:fe:c1:18:e4:4f:bf:c8:38:bd:d7:2a:
d7:c0:78:96:fe:a0:75:9d:5c:6f:d4:cf:31:13:e2:
aa:48:bf:7a:c1:3e:84:76:d8:5a:2b:e7:da:d2:00:
8a:77:6a:4f:78:c4:23:1f:2e:1b:64:50:5f:b9:0e:
d8:37:16:13:6a:60:36:46:05:20:1a:48:c9:2e:4a:
00:89:69:b5:af:33:c6:84:e5:85:d2:40:55:6d:a2:
74:a1:c8:aa:70:2e:be:cf:5f:26:fe:8b:ae:3f:2a:
85:e7:83:fe:99:6d:c5:a0:d5:78:b4:62:2e:3a:a0:
60:9e:07:f8:cd:b5:07:2c:e4:a4:56:af:d3:ba:ff:
25:67:ae:f2:2b:fd:73:43:44:03:10:91:c1:96:bd:
7b:65:f9:8e:a4:65:cc:fe:d4:c9:df:62:35:19:d1:
b8:58:4c:d7:7f:8f:93:d0:7d:7f:7a:51:18:f7:b4:
68:59:7b:e6:4d:28:26:9e:4d:ce:b5:be:96:ca:63:
a2:58:d7:7c:09:b7:ef:a7:31:1b:85:82:1c:39:ed:
0f:93:11:15:73:f9:a5:7a:da:68:85:f1:5c:bb:50:
1b:db:9c:46:d0:6e:d7:4a:97:e2:ab:17:6e:7a:5e:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0C:BC:A8:68:DA:1F:F2:75:5C:53:C7:53:41:C2:95:BB:7F:B0:B5
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6163::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ac:22:59:71:23:e9:76:99:3b:29:ef:5e:52:31:48:70:5e:
8c:13:e6:4a:5a:bd:a0:32:9b:4e:6a:4b:01:82:e1:e1:b3:79:
e8:66:3d:67:a1:06:27:4b:69:4e:ff:e4:87:fc:c2:5a:16:30:
b3:a5:70:88:5c:3c:be:f1:d9:f3:db:09:2f:b6:d6:ca:c7:cc:
f3:ff:62:cc:80:f9:95:8a:90:06:9f:bf:86:0e:b5:0c:6e:05:
18:cb:44:fc:3f:a1:4b:3f:e1:34:9a:51:a6:0f:7e:4b:ba:f7:
9b:8e:14:f4:95:41:a7:35:67:fb:2c:98:78:f1:e0:a3:ff:38:
e7:ba:03:e5:56:97:df:5a:23:d1:65:c7:24:ac:1b:1b:8f:c0:
79:6b:83:b7:92:4d:5c:91:a1:af:c2:a6:66:d3:70:df:92:d5:
10:fe:5b:5f:48:07:33:44:70:fe:4c:ec:9e:51:dc:4e:24:36:
93:2c:d9:f3:f4:75:1a:57:57:6d:d9:0a:81:5c:25:6f:cf:ac:
d6:64:d0:21:92:47:82:0b:05:08:b6:1d:f7:b7:0d:58:97:25:
30:0d:f3:48:38:89:af:0d:ce:ef:42:41:4a:e2:93:62:00:93:
0b:b9:8d:b1:76:dc:dd:5d:f9:2e:d8:36:61:ca:b2:c3:d5:05:
b3:bf:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 18:22:09 2026 by rpki-client