Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198304.roa
File: AS198304.roa (raw, json)
Hash identifier: kyDfIBj+r0EOPrd8MKwYpPXk5p0FTugJ0k81b3cKfbw=
Subject key identifier: DA:92:D9:93:36:24:32:6E:0B:B6:0E:45:64:6B:7B:39:5D:22:B0:FB
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 229A14FF2A5EE1459E26F00FA47C018231E8AA23
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198304.roa
Signing time: Thu 16 Jul 2026 11:29:42 +0000
ROA not before: Thu 16 Jul 2026 11:24:42 +0000
ROA not after: Thu 15 Jul 2027 11:29:42 +0000
asID: 198304
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:9a:14:ff:2a:5e:e1:45:9e:26:f0:0f:a4:7c:01:82:31:e8:aa:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 11:24:42 2026 GMT
Not After : Jul 15 11:29:42 2027 GMT
Subject: CN=DA92D9933624326E0BB60E45646B7B395D22B0FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:06:4a:36:ac:45:cf:21:ae:d7:a4:11:fa:77:
50:43:19:c1:00:33:69:a0:a1:55:7f:27:0c:74:72:
b0:5a:65:5b:25:33:d1:ae:c2:0b:f5:85:6b:d9:bf:
25:0a:04:f5:9d:e4:2f:58:39:52:d7:3b:f9:97:6a:
a0:e5:86:0a:3d:02:05:2e:2d:be:51:ca:eb:71:1f:
d0:c6:1a:03:c7:aa:a4:ac:80:36:5e:27:7e:a0:fd:
48:f6:00:80:a8:83:ef:9c:db:58:b8:fb:c3:ef:50:
b5:40:58:fc:c4:88:e2:44:3a:af:97:35:b9:1e:1a:
ec:bd:71:0f:46:9a:5c:1e:1f:32:59:33:6e:03:82:
6e:40:e0:74:a8:f3:9e:53:60:12:70:75:c3:14:e4:
48:8e:8b:20:cc:cc:37:9e:fd:70:65:66:89:2b:d6:
e0:0a:6c:73:01:bb:ff:65:db:0f:0a:b7:16:4c:4d:
9d:eb:2b:4c:c8:3a:69:c3:5a:50:2a:e7:f7:ec:f7:
d1:80:85:69:03:db:a6:6d:be:a7:4c:3d:57:b0:66:
c8:8b:cb:56:b1:0b:21:23:64:65:de:3d:32:38:17:
2d:08:35:6d:ff:2f:cb:7b:7c:39:e3:d8:de:1b:2b:
a4:2c:71:44:cf:ae:b0:3e:51:b6:b6:10:53:0b:76:
23:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:92:D9:93:36:24:32:6E:0B:B6:0E:45:64:6B:7B:39:5D:22:B0:FB
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
d4:69:59:f4:b1:83:fc:ba:ce:8e:30:33:e7:23:8a:aa:8c:2c:
3f:be:9b:b1:e0:9c:7e:93:0c:dd:4d:16:de:5e:ba:3c:30:9c:
b1:0b:d5:0e:4e:aa:82:74:2b:fc:21:c4:70:85:f4:c9:14:84:
d3:03:5a:ac:6b:92:8f:53:3f:29:03:b5:a5:4d:41:9f:ac:4c:
fe:a2:b4:d6:ec:95:ca:a9:99:2f:d1:db:ef:e0:d4:56:02:61:
8e:0d:3a:7c:c6:0e:80:8b:37:73:ba:78:6a:6e:5a:22:af:82:
9b:d9:7c:05:2e:54:5a:08:e5:33:70:b8:bd:99:ff:06:3a:1e:
7e:82:ba:a9:d1:01:2c:f8:2f:dd:55:87:69:30:a2:4e:ac:29:
47:bd:9a:b8:70:99:a1:a4:a4:f5:d4:27:4c:b1:48:5b:95:76:
44:82:9e:00:ed:a5:31:74:79:a3:0e:6e:90:1b:95:ad:32:ba:
86:29:cc:14:aa:c1:c0:5b:e1:8f:86:75:0b:54:23:bf:d0:cd:
75:f0:7a:3f:74:5c:fc:61:fa:d1:7b:af:e2:ef:09:19:2e:9f:
62:cb:76:cc:77:69:eb:d2:01:36:45:ab:91:4c:aa:30:85:34:
5c:76:d5:c8:63:92:80:1a:a3:ad:b9:6b:2c:cb:2e:5a:3c:af:
27:29:ae:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:18:35 2026 by rpki-client