Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215765.roa
File: AS215765.roa (raw, json)
Hash identifier: Qmf1xjjdzAJ9HL0sO0SBnYNenmYD9dS46XXqPQ+q31M=
Subject key identifier: 33:26:DB:6D:DF:75:ED:03:05:8A:F6:3D:3C:5D:9C:B6:87:36:A0:26
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6FE12F9CD62D9F8F9D14133211165066F71801FA
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215765.roa
Signing time: Sun 11 Oct 2026 21:32:03 +0000
ROA not before: Sun 11 Oct 2026 21:27:03 +0000
ROA not after: Sun 10 Oct 2027 21:32:03 +0000
asID: 215765
IP address blocks: 2a0f:9400:6116::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e1:2f:9c:d6:2d:9f:8f:9d:14:13:32:11:16:50:66:f7:18:01:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 11 21:27:03 2026 GMT
Not After : Oct 10 21:32:03 2027 GMT
Subject: CN=3326DB6DDF75ED03058AF63D3C5D9CB68736A026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:2a:be:be:d6:c6:d8:d7:bc:a6:a8:0a:70:
22:f1:f8:f5:7b:d3:d1:f2:c2:5d:16:69:4b:b1:80:
e8:ba:33:2d:18:a2:fe:a3:a4:b3:76:0c:3d:7a:4b:
dc:68:79:57:54:51:e6:c1:42:29:52:23:98:d8:63:
ea:8b:f9:fa:94:45:e1:31:6e:1a:a8:32:5f:02:98:
c6:df:8e:87:60:73:84:cb:94:3e:3e:6c:58:b4:ab:
da:50:e2:f5:26:85:0e:98:31:ac:9c:95:14:79:3e:
67:0a:59:ad:df:50:f2:f5:09:88:d1:d6:bb:09:dc:
99:5a:07:d0:23:b1:10:5e:ae:09:ff:fa:22:39:77:
e0:f6:75:e3:b6:b3:cc:92:26:a0:25:25:00:09:69:
94:51:f4:f1:78:9b:54:44:23:05:4d:b3:84:0b:24:
cd:98:7b:d0:d5:6c:ef:77:b5:bd:79:92:58:81:77:
18:8a:17:14:b6:fe:0d:73:aa:14:4a:df:7b:c5:13:
cd:49:8c:7d:c8:d1:11:a6:c7:b0:a3:53:24:2c:25:
30:be:36:4a:6d:bc:53:5d:be:1a:51:c0:7a:f8:be:
d0:0d:54:4a:11:86:a8:32:bf:7e:67:cf:cc:f2:6b:
cc:ec:92:c6:99:05:27:98:f2:fc:ce:0a:77:42:71:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:26:DB:6D:DF:75:ED:03:05:8A:F6:3D:3C:5D:9C:B6:87:36:A0:26
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6116::/48
Signature Algorithm: sha256WithRSAEncryption
38:b8:d4:7a:53:54:93:4f:bc:50:08:d5:07:c9:27:f3:f4:65:
7b:d7:b9:c8:d6:af:11:0b:3a:59:ce:48:2e:63:b9:cd:da:6e:
c1:b9:59:dd:2e:1d:c4:6e:8f:4b:59:72:48:2b:54:00:46:7a:
71:39:e1:c3:6a:cb:09:be:93:3c:4d:ec:24:29:62:27:fb:b7:
5e:f6:33:00:a4:05:8c:27:60:1e:ef:83:89:3e:66:98:11:ae:
7a:9e:c9:3d:56:28:d0:30:16:7c:4e:b9:d5:c8:fa:70:79:5e:
ef:90:f9:c4:41:23:0d:4a:15:ad:f3:51:22:b4:85:fe:6e:0e:
5a:88:95:40:53:39:93:01:96:a0:6e:65:2a:a4:be:4c:6e:63:
35:a3:52:90:74:e4:e6:aa:b2:83:69:c7:8f:83:ab:ba:11:d0:
f4:db:b1:ae:87:fa:5f:6f:d7:20:71:b8:dd:ec:ec:50:be:c0:
ca:ec:16:68:2b:31:c5:e5:68:6f:9f:07:b0:26:f0:d4:23:ff:
76:7b:78:65:83:55:9d:4b:ee:0e:ec:1d:b5:54:10:83:f0:06:
24:db:60:6c:0d:42:31:70:84:38:a3:b5:d1:81:e7:bd:39:de:
71:9e:b5:9e:36:00:34:9f:4a:bb:5b:70:88:61:ab:76:35:43:
92:fd:03:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:26:29 2026 by rpki-client