Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS402270.roa
File: AS402270.roa (raw, json)
Hash identifier: BU/UJgF1jWq024ZiVsAtG8pUfbUOwA47uQpUa7XftzQ=
Subject key identifier: 20:18:93:17:EA:68:7B:1C:DD:C6:53:B6:05:48:AD:C9:9C:96:C0:11
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2239B08192FC17327D41D411A14EDF2C7B04ED06
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS402270.roa
Signing time: Fri 27 Mar 2026 16:51:48 +0000
ROA not before: Fri 27 Mar 2026 16:46:48 +0000
ROA not after: Fri 26 Mar 2027 16:51:48 +0000
asID: 402270
IP address blocks: 2a0f:9400:6800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 21:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:39:b0:81:92:fc:17:32:7d:41:d4:11:a1:4e:df:2c:7b:04:ed:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 27 16:46:48 2026 GMT
Not After : Mar 26 16:51:48 2027 GMT
Subject: CN=20189317EA687B1CDDC653B60548ADC99C96C011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:3a:c7:83:79:8d:1f:90:89:0f:bf:6e:17:
48:ce:5f:17:5f:38:5b:0e:eb:18:18:57:29:26:84:
7d:4e:4e:d0:45:fa:e7:5b:00:eb:39:a9:c6:5e:89:
6d:24:1b:f2:c1:f1:5a:14:80:f3:0c:58:dc:ec:1d:
e0:57:be:29:bb:86:a7:19:d1:a1:89:03:5a:d9:d4:
8e:84:83:f8:92:1d:d4:cd:f4:48:f9:2b:6e:d7:00:
03:bf:bf:5a:77:8b:5f:ba:ae:61:9d:b4:09:7e:c7:
1c:9a:8a:fa:47:27:48:8d:be:ab:e7:03:c2:47:72:
28:92:23:39:7b:6e:59:84:bb:28:cf:be:49:0b:6e:
b9:4d:34:c0:58:f2:b9:48:71:7e:e6:f0:71:51:ad:
a2:5b:f0:6e:ec:73:ea:ed:e5:82:91:a9:76:2a:e4:
d9:67:8f:52:41:76:58:f7:96:c3:c3:20:c9:23:7b:
00:db:ce:4f:bd:4d:eb:aa:6b:13:67:29:f3:25:4c:
18:e8:09:5b:4f:33:d6:a1:9b:54:46:cd:71:f3:d4:
43:5f:82:d0:e8:72:39:d2:99:fc:6b:d9:b3:f4:b2:
0b:4c:07:2c:b2:d0:38:db:4e:dc:03:ea:b6:e5:13:
88:26:09:7c:da:94:b9:b1:da:fb:d7:54:2a:64:0f:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:18:93:17:EA:68:7B:1C:DD:C6:53:B6:05:48:AD:C9:9C:96:C0:11
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS402270.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6800::/40
Signature Algorithm: sha256WithRSAEncryption
d0:78:21:e0:22:47:1f:f5:21:1d:a6:5b:96:76:50:a9:52:f8:
e0:28:f0:e9:4f:bd:ee:81:56:c8:95:2f:2a:42:70:2c:94:90:
ec:af:ad:61:ba:65:b5:a9:63:3e:c2:b4:8d:9d:6c:b7:16:6d:
d8:76:27:30:88:12:fd:2d:94:bc:35:60:b0:68:58:7e:ca:51:
93:24:a3:e2:84:bd:07:1d:18:62:03:47:68:4f:b5:2e:be:67:
be:30:32:01:74:5c:5d:06:74:44:41:30:21:ae:b8:5f:b6:ec:
19:ee:6b:71:ff:05:28:9a:b7:3e:00:81:38:ba:72:db:15:55:
0c:27:0f:0e:68:fc:91:3f:d5:6a:0d:19:e4:12:f4:f3:a1:d9:
27:6a:fd:7c:b4:8b:9f:03:06:86:37:10:43:1c:8b:09:10:9c:
ff:d9:d4:05:4e:68:bb:27:b6:2f:f8:f7:bb:a0:f5:b0:0f:45:
26:3f:5d:b8:bd:5e:6a:fb:39:14:3b:2a:a8:95:20:0a:45:a6:
12:f9:af:bd:c5:11:13:cf:6e:08:3c:02:50:f2:5d:2e:90:83:
de:86:ad:03:cd:c7:85:d9:16:ad:57:3c:4c:6a:f4:e1:4d:06:
b1:10:29:3c:60:df:52:fa:e9:f6:dc:f4:4c:94:a7:53:f9:5c:
4e:cb:90:fe
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUIjmwgZL8FzJ9QdQRoU7fLHsE7QYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjAzMjcxNjQ2NDhaFw0yNzAzMjYxNjUxNDhaMDMxMTAvBgNV
BAMTKDIwMTg5MzE3RUE2ODdCMUNEREM2NTNCNjA1NDhBREM5OUM5NkMwMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTcDrHg3mNH5CJD79uF0jOXxdf
OFsO6xgYVykmhH1OTtBF+udbAOs5qcZeiW0kG/LB8VoUgPMMWNzsHeBXvim7hqcZ
0aGJA1rZ1I6Eg/iSHdTN9Ej5K27XAAO/v1p3i1+6rmGdtAl+xxyaivpHJ0iNvqvn
A8JHciiSIzl7blmEuyjPvkkLbrlNNMBY8rlIcX7m8HFRraJb8G7sc+rt5YKRqXYq
5Nlnj1JBdlj3lsPDIMkjewDbzk+9TeuqaxNnKfMlTBjoCVtPM9ahm1RGzXHz1ENf
gtDocjnSmfxr2bP0sgtMByyy0DjbTtwD6rblE4gmCXzalLmx2vvXVCpkD4kpAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUIBiTF+poexzdxlO2BUityZyWwBEwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzQwMjI3MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoPlABoMA0GCSqGSIb3DQEBCwUAA4IB
AQDQeCHgIkcf9SEdpluWdlCpUvjgKPDpT73ugVbIlS8qQnAslJDsr61humW1qWM+
wrSNnWy3Fm3YdicwiBL9LZS8NWCwaFh+ylGTJKPihL0HHRhiA0doT7Uuvme+MDIB
dFxdBnREQTAhrrhftuwZ7mtx/wUomrc+AIE4unLbFVUMJw8OaPyRP9VqDRnkEvTz
odknav18tIufAwaGNxBDHIsJEJz/2dQFTmi7J7Yv+Pe7oPWwD0UmP124vV5q+zkU
OyqolSAKRaYS+a+9xRETz24IPAJQ8l0ukIPehq0DzceF2RatVzxMavThTQaxECk8
YN9S+un23PRMlKdT+VxOy5D+
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:06:03 2026 by rpki-client