Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216056.roa
File: AS216056.roa (raw, json)
Hash identifier: 3hXmuBeLT+/+0joVYJNjzr+Lq6y56VnNqfMNnfx7LKI=
Subject key identifier: C9:F8:37:77:2A:89:6D:15:F4:E6:AB:19:CD:8C:EC:93:0D:54:99:4C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 73063A22005381B05914147E9C692E6FC12913AA
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216056.roa
Signing time: Sun 09 Aug 2026 05:30:41 +0000
ROA not before: Sun 09 Aug 2026 05:25:41 +0000
ROA not after: Sun 08 Aug 2027 05:30:41 +0000
asID: 216056
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:06:3a:22:00:53:81:b0:59:14:14:7e:9c:69:2e:6f:c1:29:13:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 9 05:25:41 2026 GMT
Not After : Aug 8 05:30:41 2027 GMT
Subject: CN=C9F837772A896D15F4E6AB19CD8CEC930D54994C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:5a:9d:f5:20:58:f9:77:09:84:4a:bb:60:
34:d2:81:d3:1e:86:1c:36:2f:57:27:63:57:a2:60:
a8:4b:98:38:28:f0:37:48:ba:ed:d3:a4:ea:04:17:
9c:77:85:45:8c:f6:05:40:95:19:34:68:4e:06:8d:
ce:8f:0a:f4:2d:8e:23:59:e1:8d:67:1c:00:e9:21:
08:49:d6:08:07:76:75:e9:86:46:2d:cf:57:39:73:
80:8c:73:b7:eb:a8:06:f7:a4:2d:ce:78:af:67:68:
e5:53:9a:b1:2c:d0:a8:dc:5c:05:28:79:9c:ae:9d:
84:4e:91:3e:23:2e:28:09:e6:f6:0d:fc:11:5d:02:
3c:59:8f:37:8e:67:b1:fc:31:43:9e:be:78:e8:1d:
37:c3:65:b5:55:3d:21:4d:94:99:75:f9:55:ea:09:
a7:5c:b1:08:cc:96:b8:ae:cb:18:2b:d3:c5:0f:ed:
35:80:ae:49:38:92:9e:c2:96:2a:4c:a7:8d:e8:fc:
12:92:22:b7:1f:39:f0:21:9e:89:5c:c7:94:98:90:
77:73:6f:f2:b1:32:7f:93:27:97:e7:17:50:d8:26:
7c:ea:62:8b:a6:9b:c0:b9:65:6c:7a:a7:dc:96:16:
eb:44:c6:f9:33:8c:88:e9:ba:8a:c1:b3:a7:36:38:
54:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F8:37:77:2A:89:6D:15:F4:E6:AB:19:CD:8C:EC:93:0D:54:99:4C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216056.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
47:34:45:d9:34:7c:4f:1d:6d:65:85:ab:38:c2:81:ef:1c:a2:
4b:78:8c:3b:2f:64:d8:94:23:f0:15:9c:01:4f:67:e9:5f:97:
61:6d:1c:36:bd:be:22:d4:85:ad:1e:11:73:4c:c4:9a:71:83:
3b:a8:5d:71:8a:76:17:a2:8f:63:40:9d:49:39:24:c7:e8:5f:
90:6b:2c:d9:85:6e:4f:80:e8:9a:43:fc:18:c3:53:d9:6d:34:
f3:ef:be:95:82:44:fe:69:47:02:f1:eb:13:af:f3:d2:f8:5f:
9a:c9:82:65:1c:12:f4:71:0f:a2:1a:08:7c:ab:8f:98:98:86:
27:4a:4f:f2:5e:3c:b8:9d:68:f9:7f:f6:7a:c1:a5:8f:f4:ac:
6d:64:8d:ac:20:6b:e1:59:02:52:10:2f:a8:96:ba:10:57:e7:
30:bc:07:4b:17:8d:aa:35:50:59:12:8d:a8:2b:eb:71:b5:d5:
ef:4b:26:49:cd:13:af:10:29:d4:9e:ca:73:bb:fb:6f:37:f4:
61:8f:1d:5b:d5:be:5a:c5:65:a0:d9:a5:95:ce:4c:74:34:fb:
74:a6:ef:9c:6c:b3:02:c6:a7:62:eb:0d:ab:19:d9:43:8e:2d:
bd:da:ba:c9:d3:8d:03:6c:4f:8b:82:a1:f8:0a:2f:7a:30:46:
a8:45:44:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:05:48 2026 by rpki-client