Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS21641.roa
File: AS21641.roa (raw, json)
Hash identifier: JjU0h2k6k2EsR6G/t784CtfHGYX4QJVJTOGeLHO/9R0=
Subject key identifier: 6D:70:C0:4F:F9:54:10:D2:40:DE:AD:24:C7:10:7E:9D:EC:B2:9C:CA
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1638CA8950D32098F4E6EF296022CA7F6C81B49B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS21641.roa
Signing time: Fri 29 May 2026 00:49:15 +0000
ROA not before: Fri 29 May 2026 00:44:15 +0000
ROA not after: Fri 28 May 2027 00:49:15 +0000
asID: 21641
IP address blocks: 2a0f:9400:7389::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:38:ca:89:50:d3:20:98:f4:e6:ef:29:60:22:ca:7f:6c:81:b4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 29 00:44:15 2026 GMT
Not After : May 28 00:49:15 2027 GMT
Subject: CN=6D70C04FF95410D240DEAD24C7107E9DECB29CCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:91:f2:9a:b1:cb:86:09:d3:35:e6:6a:56:da:
06:38:c5:c4:ac:09:ba:6e:eb:0d:03:57:b9:b8:10:
0d:ff:78:79:cb:6a:de:f4:b8:6b:e8:5c:9f:d7:4b:
66:36:74:db:ac:7a:30:38:9e:76:f6:e4:b3:56:17:
77:db:79:db:6e:42:bd:77:e5:4f:6f:77:96:c8:1e:
b5:1b:bb:9f:b0:0e:d9:2d:0e:2b:28:6a:f3:db:bc:
5a:cf:17:7a:1e:b2:f9:7f:95:e3:bd:f0:33:ec:8f:
71:06:2b:da:06:a5:56:64:b9:da:a0:a0:00:ab:28:
85:64:c2:8c:9a:57:c9:4f:c4:42:20:66:7a:c8:98:
be:34:e2:81:a1:8b:69:f6:43:07:5f:37:b3:6d:e3:
03:4a:2c:b5:52:0d:60:5b:50:e2:52:07:35:12:66:
36:07:5d:ce:6d:07:56:9e:16:ce:af:ef:9e:10:0b:
08:20:91:bf:fb:1e:6a:5d:33:16:b1:d6:ec:75:50:
ab:71:a6:ea:41:97:14:9c:04:4f:99:2d:e2:1d:0e:
cb:d6:8d:10:8c:7f:2d:e1:e0:6d:77:37:1f:0e:f6:
a6:6e:d2:fb:49:e7:eb:10:42:10:fa:1d:9b:79:d3:
f7:f0:0d:db:29:1f:5e:26:72:7c:7a:dd:f5:82:24:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:70:C0:4F:F9:54:10:D2:40:DE:AD:24:C7:10:7E:9D:EC:B2:9C:CA
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS21641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7389::/48
Signature Algorithm: sha256WithRSAEncryption
29:fe:5a:a1:61:10:a3:ac:dc:0d:c1:6c:42:a5:00:76:3f:1e:
1f:bd:be:ad:7c:80:66:2e:a4:97:6c:5e:fe:df:17:8b:f1:f2:
29:e7:c8:1d:81:82:16:12:08:35:c6:ed:a0:58:9c:1e:82:e3:
93:bd:bb:3e:30:97:3f:24:8d:cf:a7:93:5b:2f:cc:a8:4c:34:
39:58:57:2f:b2:7d:4d:f3:67:69:48:5d:72:57:15:6a:a7:56:
c1:5a:7a:77:db:77:b2:a6:ed:74:54:0d:c6:4c:33:91:77:ab:
f1:9b:99:ca:3c:6d:98:20:9d:2b:b2:52:ff:b9:b9:c2:5e:d1:
e5:08:90:b5:cb:1b:e0:b1:f2:ee:8f:63:55:ed:99:22:5d:77:
37:ca:36:74:7a:69:6f:f3:d7:60:f9:3e:21:b6:cf:2f:b8:64:
d1:5e:e2:99:fa:12:8c:b3:ff:dd:ea:b0:b0:65:7b:8e:cb:e1:
53:1d:06:16:14:21:e9:f1:fa:e2:b1:d3:f8:a0:7f:5c:16:24:
71:b1:21:8b:47:9a:dc:d7:0f:ce:dc:b0:17:34:98:27:6b:d0:
2d:48:6a:15:f9:20:9a:54:6b:8c:ce:11:94:e1:c2:17:7c:21:
8b:ef:20:2d:8d:b8:72:63:fe:23:79:8f:54:4f:de:4a:20:7a:
0a:d7:c2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:50 2026 by rpki-client