Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197691.roa
File: AS197691.roa (raw, json)
Hash identifier: 12O0ugUKrxwYaiWrF7AbElOFlJMtpNdTXPtxhPx0is0=
Subject key identifier: 84:5C:3A:B7:07:7E:41:EF:30:0E:DC:CC:C0:8A:9F:BE:EE:D3:E8:1C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6867B0008BB2BCA31B40531C39290E70977327DA
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197691.roa
Signing time: Sat 25 Apr 2026 09:31:47 +0000
ROA not before: Sat 25 Apr 2026 09:26:47 +0000
ROA not after: Sat 24 Apr 2027 09:31:47 +0000
asID: 197691
IP address blocks: 2a0f:9400:700f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:67:b0:00:8b:b2:bc:a3:1b:40:53:1c:39:29:0e:70:97:73:27:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 25 09:26:47 2026 GMT
Not After : Apr 24 09:31:47 2027 GMT
Subject: CN=845C3AB7077E41EF300EDCCCC08A9FBEEED3E81C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:02:f1:57:60:98:d7:c3:a5:55:3d:fb:55:1d:
89:c6:ba:25:8e:01:57:58:31:e0:08:44:cd:03:7a:
61:c2:b5:9c:1d:3c:e8:74:03:b6:c2:27:f4:39:af:
9a:5d:09:fd:e2:89:4d:27:e8:87:56:af:e8:90:e7:
73:bb:f1:3c:5a:67:f3:97:ee:db:73:60:14:34:85:
32:f1:e8:98:e0:cd:88:5f:9b:ba:e8:bb:22:63:b1:
d3:d3:9f:5d:48:b2:0f:aa:a1:3c:8a:e6:9c:2c:05:
8e:d9:fd:1c:e8:1d:af:3f:70:b3:60:f2:fe:ab:53:
f4:6f:d3:e6:cc:ef:eb:e1:c3:e7:02:33:a3:f5:e4:
5a:52:2b:dd:d0:fa:96:c3:11:ee:48:22:b8:32:37:
22:12:a5:43:53:6c:11:1c:38:52:1b:f0:f5:e4:75:
c4:aa:45:9c:3a:01:40:9a:3c:4a:1f:b2:f8:6e:2c:
02:27:a0:27:c6:ba:01:c3:02:27:95:04:95:c9:3a:
8c:24:c1:cb:14:07:f3:ab:c0:b8:19:d4:41:39:17:
c8:88:4d:19:c0:8f:9c:63:1b:a2:5e:04:60:2d:42:
3c:51:e7:cc:9a:f7:4a:ea:79:bc:7a:81:43:d6:e5:
b4:e0:ba:47:ac:07:10:76:d0:a8:0c:c5:c4:10:39:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5C:3A:B7:07:7E:41:EF:30:0E:DC:CC:C0:8A:9F:BE:EE:D3:E8:1C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197691.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:700f::/48
Signature Algorithm: sha256WithRSAEncryption
c6:7f:5b:97:a0:bd:bf:a8:fc:9f:85:20:0c:44:3e:a5:d7:be:
31:ac:cc:ee:2b:5b:7a:cd:88:8c:99:3c:7c:2d:fc:39:e1:93:
2a:f4:53:b8:58:25:34:20:20:dc:c4:8d:31:5a:91:34:fe:ad:
3b:5c:4a:f5:c9:c6:79:07:d6:2e:c5:02:6b:70:1b:6d:fe:32:
93:e4:d0:37:40:56:0e:ef:d8:20:86:d0:e9:f5:64:8e:74:3e:
6f:5a:a1:c6:a7:b2:76:95:65:16:70:ee:64:47:f7:16:3c:3c:
91:6a:67:26:2f:e2:7d:00:4b:10:32:1f:05:96:46:b6:42:99:
00:02:b1:a9:7d:11:92:7a:51:2c:e4:56:cf:1a:f5:30:68:52:
f4:3d:9b:01:a5:57:24:6f:50:8c:8c:a9:ad:23:12:b4:b3:d6:
7a:c8:65:6c:0d:93:13:8a:75:e6:c3:85:e4:f0:fe:32:1b:e2:
cc:eb:d4:39:58:38:ed:d4:1e:dc:98:b3:c7:a2:10:e7:31:96:
5b:da:2c:88:b0:37:f5:8d:06:c3:67:c0:d3:58:b6:7d:dc:c3:
a5:a5:dd:81:f5:a1:85:1b:0b:5a:97:20:11:ad:7a:8d:6d:6f:
85:2a:32:71:e0:7c:7f:af:97:25:e1:c7:78:ad:ea:15:62:40:
f4:24:b8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:30:15 2026 by rpki-client