Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216183.roa
File: AS216183.roa (raw, json)
Hash identifier: 24gFXZ30dSBZtmi4T6Is6WtW6cTpaVd0wpw48RC7Mr8=
Subject key identifier: 4E:CD:BF:5F:22:31:19:B5:1B:6D:A0:E7:19:61:D6:86:84:2C:88:E0
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0F624B8826290A756B1B55F047F95345DCFF9B83
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216183.roa
Signing time: Sat 07 Jun 2025 18:35:42 +0000
ROA not before: Sat 07 Jun 2025 18:30:42 +0000
ROA not after: Sat 06 Jun 2026 18:35:42 +0000
asID: 216183
IP address blocks: 2a0f:9400:6140::/48 maxlen: 48
2a0f:9400:6141::/48 maxlen: 48
2a0f:9400:6142::/48 maxlen: 48
2a0f:9400:6143::/48 maxlen: 48
2a0f:9400:6168::/48 maxlen: 48
2a0f:9400:616a::/48 maxlen: 48
2a0f:9400:616b::/48 maxlen: 48
2a0f:9400:616c::/48 maxlen: 48
2a0f:9400:616d::/48 maxlen: 48
2a0f:9400:616e::/48 maxlen: 48
2a0f:9400:616f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:62:4b:88:26:29:0a:75:6b:1b:55:f0:47:f9:53:45:dc:ff:9b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 7 18:30:42 2025 GMT
Not After : Jun 6 18:35:42 2026 GMT
Subject: CN=4ECDBF5F223119B51B6DA0E71961D686842C88E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:13:c7:a6:cc:d5:17:26:70:c8:37:da:a4:
62:1f:4c:15:83:1f:4f:3f:17:9e:2b:51:ae:71:a5:
42:cb:8c:25:0b:5d:d8:3b:66:e1:c9:58:1d:02:2f:
89:aa:5b:bb:99:0b:a3:15:d8:b7:5e:32:48:85:7b:
b8:fd:58:8f:56:df:b3:b7:c9:1f:50:30:81:56:70:
a1:c5:71:78:83:a3:45:77:10:7d:20:5b:11:5f:b4:
d5:32:4d:92:4e:af:65:94:40:9b:c7:b1:a7:ef:aa:
8c:bb:25:b1:d5:fa:cf:22:c3:0f:32:5e:2e:fb:5a:
52:85:8a:fc:6f:db:06:4b:60:6e:00:c9:85:c7:e3:
fa:1b:b2:51:41:6b:86:97:0e:32:1d:3f:f4:17:67:
81:35:5c:1a:77:bc:46:38:b4:73:76:96:c3:86:96:
57:d0:be:8d:c7:18:f6:17:86:53:c8:16:65:8e:86:
c6:5d:cc:33:80:7a:c9:b0:a2:ab:f3:fe:5b:5c:3f:
7c:04:ad:60:76:b0:a7:47:f1:3e:e4:dc:d3:39:46:
09:43:9e:6f:6f:9a:df:68:80:e9:44:9c:ef:81:b2:
7c:4a:14:7b:9f:b1:c3:0e:aa:ce:1b:2e:32:24:01:
86:df:4f:ac:09:44:dd:0f:1f:8f:4d:e1:1f:39:a3:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CD:BF:5F:22:31:19:B5:1B:6D:A0:E7:19:61:D6:86:84:2C:88:E0
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6140::/46
2a0f:9400:6168::/48
2a0f:9400:616a::-2a0f:9400:616f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9a:9f:11:b1:b9:50:d8:4e:07:4b:33:da:28:d0:f8:83:4b:65:
72:6e:ff:22:9d:26:51:7d:57:54:fa:bc:83:6c:57:4a:d8:09:
07:c4:cf:24:47:93:af:36:38:91:97:90:20:28:21:16:e9:a0:
2b:ed:86:7c:9e:ca:52:d9:d9:2f:9c:22:65:8b:83:4d:3f:00:
5a:94:bb:49:e4:34:94:1f:e8:e9:12:1d:cc:8b:a1:bd:94:01:
23:3d:34:fe:b2:7d:a2:66:4b:c1:42:94:59:f5:43:ac:f1:eb:
0a:5c:e6:af:50:eb:6a:0e:ae:eb:02:99:d4:e7:27:0f:f3:76:
6c:6f:e8:18:71:e8:0a:73:b9:bb:c2:84:c9:ea:83:3f:57:98:
31:b3:28:bb:ab:4a:54:f5:22:f1:cf:8f:26:21:d2:b6:22:d2:
f3:be:ca:fd:aa:06:ac:90:38:9b:20:77:1f:9e:f8:ed:88:af:
0c:38:7c:55:7b:98:f7:bb:7f:a9:f0:fa:1f:0a:5c:ac:eb:83:
19:93:39:d3:82:f8:cf:a2:d3:94:64:24:d9:75:f1:6e:f7:b3:
84:bb:53:81:c5:e2:12:2c:2e:c5:1a:83:e1:59:a0:e7:59:90:
9b:9e:e8:ab:ff:d4:7b:85:99:31:4a:e5:ac:bc:77:01:3e:6d:
bf:3a:ff:1c
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIUD2JLiCYpCnVrG1XwR/lTRdz/m4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA2MDcxODMwNDJaFw0yNjA2MDYxODM1NDJaMDMxMTAvBgNV
BAMTKDRFQ0RCRjVGMjIzMTE5QjUxQjZEQTBFNzE5NjFENjg2ODQyQzg4RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBRPHpszVFyZwyDfapGIfTBWD
H08/F54rUa5xpULLjCULXdg7ZuHJWB0CL4mqW7uZC6MV2LdeMkiFe7j9WI9W37O3
yR9QMIFWcKHFcXiDo0V3EH0gWxFftNUyTZJOr2WUQJvHsafvqoy7JbHV+s8iww8y
Xi77WlKFivxv2wZLYG4AyYXH4/obslFBa4aXDjIdP/QXZ4E1XBp3vEY4tHN2lsOG
llfQvo3HGPYXhlPIFmWOhsZdzDOAesmwoqvz/ltcP3wErWB2sKdH8T7k3NM5RglD
nm9vmt9ogOlEnO+BsnxKFHufscMOqs4bLjIkAYbfT6wJRN0PH49N4R85o9oXAgMB
AAGjggHmMIIB4jAdBgNVHQ4EFgQUTs2/XyIxGbUbbaDnGWHWhoQsiOAwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxNjE4My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/Bggr
BgEFBQcBBwEB/wQwMC4wLAQCAAIwJgMHAioPlABhQAMHACoPlABhaDASAwcBKg+U
AGFqAwcEKg+UAGFgMA0GCSqGSIb3DQEBCwUAA4IBAQCanxGxuVDYTgdLM9oo0PiD
S2Vybv8inSZRfVdU+ryDbFdK2AkHxM8kR5OvNjiRl5AgKCEW6aAr7YZ8nspS2dkv
nCJli4NNPwBalLtJ5DSUH+jpEh3Mi6G9lAEjPTT+sn2iZkvBQpRZ9UOs8esKXOav
UOtqDq7rApnU5ycP83Zsb+gYcegKc7m7woTJ6oM/V5gxsyi7q0pU9SLxz48mIdK2
ItLzvsr9qgaskDibIHcfnvjtiK8MOHxVe5j3u3+p8PofClys64MZkznTgvjPotOU
ZCTZdfFu97OEu1OBxeISLC7FGoPhWaDnWZCbnuir/9R7hZkxSuWsvHcBPm2/Ov8c
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:09:23 2025 by rpki-client