Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215026.roa
File: AS215026.roa (raw, json)
Hash identifier: M7QOBAvWm7EDoqhiwDVSyQ4t9YRos1XHsrNa3XfCGng=
Subject key identifier: 32:74:73:48:78:9C:BD:B9:1C:63:F2:E6:9B:2E:48:EC:B5:E1:E3:80
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4C992A81B97B28D4CD4AE4D3C82D19CACFEAE131
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215026.roa
Signing time: Sat 03 Oct 2026 19:48:12 +0000
ROA not before: Sat 03 Oct 2026 19:43:12 +0000
ROA not after: Sat 02 Oct 2027 19:48:12 +0000
asID: 215026
IP address blocks: 2a0f:9400:614f::/48 maxlen: 48
2a0f:9400:6905::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:99:2a:81:b9:7b:28:d4:cd:4a:e4:d3:c8:2d:19:ca:cf:ea:e1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 3 19:43:12 2026 GMT
Not After : Oct 2 19:48:12 2027 GMT
Subject: CN=32747348789CBDB91C63F2E69B2E48ECB5E1E380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:e8:ae:32:c9:fb:3b:3f:5d:b4:c8:7b:6f:
6b:94:1c:70:5a:75:58:a3:d5:2f:7d:a1:51:f5:92:
03:09:08:a1:9e:f6:80:4f:40:e3:ad:4c:42:76:dd:
22:26:9d:fb:21:40:c3:fa:8d:17:31:d0:ba:c4:62:
71:5a:dd:03:1d:9b:76:20:14:8d:81:8f:88:49:7b:
00:f6:95:f3:86:25:90:95:a1:4e:b8:67:13:2a:69:
89:fc:08:29:59:66:5e:ea:1c:52:e1:13:59:fa:5a:
81:96:10:30:e9:0f:ae:da:72:18:70:7c:fe:fd:89:
1f:45:e5:dd:67:76:7d:92:08:a3:db:62:a6:5a:7e:
31:c2:88:ee:9c:9e:5b:fa:24:69:47:21:cc:0a:b6:
35:fa:1f:65:13:55:f3:0d:e5:5a:be:d4:9f:41:1f:
23:5c:0d:0a:67:ec:1a:cc:28:c2:70:c5:2c:33:0a:
0e:97:4f:f9:af:6d:a3:62:96:e5:80:30:35:66:d7:
79:94:b3:89:38:af:58:bd:cb:bd:d1:ce:48:b3:05:
4e:9b:69:46:a2:be:dd:b9:e0:db:41:a8:bd:36:5c:
53:0b:90:23:fd:6f:e5:8c:21:86:2c:67:4a:47:c3:
e3:33:97:49:46:1b:55:56:1c:9e:13:58:47:be:f7:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:74:73:48:78:9C:BD:B9:1C:63:F2:E6:9B:2E:48:EC:B5:E1:E3:80
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215026.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:614f::/48
2a0f:9400:6905::/48
Signature Algorithm: sha256WithRSAEncryption
46:4a:fc:6a:4a:97:1e:57:66:4e:b7:35:f6:ec:9d:7d:35:21:
bc:0b:d0:b9:68:62:4b:e1:95:93:d5:22:5e:e0:02:e9:32:6d:
fe:51:7a:83:ab:8a:89:f0:bc:b8:22:fc:f2:85:41:ca:27:15:
b9:19:e0:9d:c9:e0:b1:d7:35:70:87:d9:a0:c2:6d:db:b5:61:
39:80:de:b5:0f:c7:aa:bb:1b:1a:96:12:b8:71:81:0c:d7:5e:
bd:48:8e:0f:3f:b9:f8:e8:68:fa:9f:66:7c:6d:3d:96:66:6b:
99:7d:3f:52:df:d3:04:5c:85:d7:b1:0e:bf:c1:9a:aa:91:bc:
06:da:ec:da:8b:2a:b4:79:35:85:10:35:cb:be:dc:0e:77:84:
2f:11:68:a6:9c:af:7c:6f:55:27:72:e6:3e:da:5d:2a:08:07:
4c:e6:18:3f:3b:9a:50:94:a1:b7:cd:01:6a:68:de:3d:d4:d4:
95:f0:f9:cf:54:68:8f:75:45:32:52:c4:a4:1c:25:62:89:58:
ff:0c:3e:f1:61:b4:01:d2:b1:86:a1:01:76:6e:47:fe:48:f8:
38:0d:43:36:bd:58:ff:8b:39:99:3a:d6:ad:0e:68:8c:e5:f8:
0b:1c:4c:f4:04:ac:20:a3:42:43:f7:aa:45:f0:57:00:61:84:
9e:d9:87:c8
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUTJkqgbl7KNTNSuTTyC0Zys/q4TEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjEwMDMxOTQzMTJaFw0yNzEwMDIxOTQ4MTJaMDMxMTAvBgNV
BAMTKDMyNzQ3MzQ4Nzg5Q0JEQjkxQzYzRjJFNjlCMkU0OEVDQjVFMUUzODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EuiuMsn7Oz9dtMh7b2uUHHBa
dVij1S99oVH1kgMJCKGe9oBPQOOtTEJ23SImnfshQMP6jRcx0LrEYnFa3QMdm3Yg
FI2Bj4hJewD2lfOGJZCVoU64ZxMqaYn8CClZZl7qHFLhE1n6WoGWEDDpD67achhw
fP79iR9F5d1ndn2SCKPbYqZafjHCiO6cnlv6JGlHIcwKtjX6H2UTVfMN5Vq+1J9B
HyNcDQpn7BrMKMJwxSwzCg6XT/mvbaNiluWAMDVm13mUs4k4r1i9y73RzkizBU6b
aUaivt254NtBqL02XFMLkCP9b+WMIYYsZ0pHw+Mzl0lGG1VWHJ4TWEe+97BhAgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQUMnRzSHicvbkcY/Lmmy5I7LXh44AwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxNTAyNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggr
BgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoPlABhTwMHACoPlABpBTANBgkqhkiG
9w0BAQsFAAOCAQEARkr8akqXHldmTrc19uydfTUhvAvQuWhiS+GVk9UiXuAC6TJt
/lF6g6uKifC8uCL88oVByicVuRngncngsdc1cIfZoMJt27VhOYDetQ/HqrsbGpYS
uHGBDNdevUiODz+5+Oho+p9mfG09lmZrmX0/Ut/TBFyF17EOv8GaqpG8Btrs2osq
tHk1hRA1y77cDneELxFoppyvfG9VJ3LmPtpdKggHTOYYPzuaUJSht80BamjePdTU
lfD5z1Roj3VFMlLEpBwlYolY/ww+8WG0AdKxhqEBdm5H/kj4OA1DNr1Y/4s5mTrW
rQ5ojOX4CxxM9ASsIKNCQ/eqRfBXAGGEntmHyA==
-----END CERTIFICATE-----
Generated at Thu Oct 22 12:05:12 2026 by rpki-client