Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200241.roa
File: AS200241.roa (raw, json)
Hash identifier: H8Bv3KRtWBmXpzAVzChSqein4MN0XNmNCBv8SBNiyic=
Subject key identifier: 17:7A:A2:57:00:EF:B7:04:7A:CC:14:E4:9A:0B:E4:E1:78:7E:9A:6C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0B23F0B549899DDE967D6CE71511382C103A0BB8
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200241.roa
Signing time: Fri 22 Aug 2025 01:04:12 +0000
ROA not before: Fri 22 Aug 2025 00:59:12 +0000
ROA not after: Fri 21 Aug 2026 01:04:12 +0000
asID: 200241
IP address blocks: 2a0f:9400:6300::/44 maxlen: 48
2a0f:9400:6310::/44 maxlen: 48
2a0f:9400:6550::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:23:f0:b5:49:89:9d:de:96:7d:6c:e7:15:11:38:2c:10:3a:0b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 22 00:59:12 2025 GMT
Not After : Aug 21 01:04:12 2026 GMT
Subject: CN=177AA25700EFB7047ACC14E49A0BE4E1787E9A6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:f6:90:40:0f:16:c9:2d:ae:05:c5:5f:a7:
b9:13:6f:b0:80:0c:6a:78:ec:1e:12:d6:0e:bd:8a:
c9:b9:74:92:00:68:fd:76:64:c3:8a:1b:a8:21:aa:
be:9a:7e:23:69:e5:60:f8:52:8f:bf:78:e4:5a:37:
24:f9:8d:6e:a4:7c:c5:1b:bf:ad:9e:9b:01:16:ff:
34:a1:ad:05:b4:ef:1b:75:11:d8:98:18:99:4a:53:
da:bb:63:46:6c:8d:6f:ac:c6:17:a4:4a:be:a5:91:
52:f6:d6:09:ca:73:fa:1f:23:e7:4e:a6:4d:c8:12:
1f:10:ab:97:bd:1d:13:67:64:e7:a0:41:ec:d5:79:
78:bf:25:7c:a4:0f:0b:ab:f9:0c:36:e6:66:58:4e:
a5:ee:b2:56:1e:5c:37:22:b4:61:22:a2:bc:39:f4:
d0:aa:0d:0a:09:cb:bf:4c:37:93:a1:40:c1:42:3d:
cf:12:34:99:6a:f5:14:2b:d8:80:89:e8:e7:b9:ee:
77:e2:a8:c4:4e:b8:32:47:fa:be:61:ac:4d:72:a8:
0e:4e:3b:28:e6:1a:58:e4:89:e5:7d:e9:b1:81:d0:
38:04:4d:aa:91:7b:80:4f:36:17:4e:a7:c0:55:20:
a1:91:ac:90:d8:e3:50:4f:55:56:a7:9d:4f:51:38:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7A:A2:57:00:EF:B7:04:7A:CC:14:E4:9A:0B:E4:E1:78:7E:9A:6C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200241.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6300::/43
2a0f:9400:6550::/44
Signature Algorithm: sha256WithRSAEncryption
35:cb:7d:df:d2:6e:82:e9:17:f1:2e:85:31:d8:1c:be:2c:3d:
9c:3b:2a:e3:26:03:8c:14:03:44:e2:09:c6:7d:8d:7a:56:65:
ec:2f:0d:c8:cb:2f:34:29:0c:6d:b0:0a:1a:a8:8b:c7:63:45:
03:ca:b7:6a:23:7a:5d:58:44:5a:91:6b:dd:3d:61:09:cf:3e:
45:c2:e2:e2:fe:21:b2:c9:16:0a:23:67:5f:3b:55:9d:bc:59:
65:3f:41:16:e5:9e:d6:c2:29:f2:83:1e:22:61:2e:c4:b9:06:
cf:e7:34:17:f5:d9:3e:01:71:f4:9e:eb:91:e2:6a:1d:91:5d:
2c:32:71:11:54:88:4e:30:52:4c:b8:bb:cc:c9:c5:a8:99:83:
f8:27:8a:b3:0d:54:31:fa:8b:38:a8:a0:84:2d:84:4f:2a:93:
d9:44:73:9c:dd:ac:29:90:0a:04:3d:e3:f9:11:67:c7:58:00:
89:87:7f:15:a8:93:e9:73:14:b8:d4:95:5d:ad:dc:3f:f5:be:
9b:14:a9:bd:80:61:28:7b:ff:f9:c6:f4:10:a5:d4:01:1b:19:
e8:ee:d2:5a:a7:1b:f9:03:ee:4e:2a:ff:a1:79:9f:36:a0:5e:
9c:ac:b4:cf:02:79:5c:d1:43:68:b9:a5:8b:6a:ee:7c:2f:37:
e0:7b:7a:e3
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUCyPwtUmJnd6WfWznFRE4LBA6C7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA4MjIwMDU5MTJaFw0yNjA4MjEwMTA0MTJaMDMxMTAvBgNV
BAMTKDE3N0FBMjU3MDBFRkI3MDQ3QUNDMTRFNDlBMEJFNEUxNzg3RTlBNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ0PaQQA8WyS2uBcVfp7kTb7CA
DGp47B4S1g69ism5dJIAaP12ZMOKG6ghqr6afiNp5WD4Uo+/eORaNyT5jW6kfMUb
v62emwEW/zShrQW07xt1EdiYGJlKU9q7Y0ZsjW+sxhekSr6lkVL21gnKc/ofI+dO
pk3IEh8Qq5e9HRNnZOegQezVeXi/JXykDwur+Qw25mZYTqXuslYeXDcitGEiorw5
9NCqDQoJy79MN5OhQMFCPc8SNJlq9RQr2ICJ6Oe57nfiqMROuDJH+r5hrE1yqA5O
OyjmGljkieV96bGB0DgETaqRe4BPNhdOp8BVIKGRrJDY41BPVVannU9ROMG1AgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQUF3qiVwDvtwR6zBTkmgvk4Xh+mmwwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwMDI0MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggr
BgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBSoPlABjAAMHBCoPlABlUDANBgkqhkiG
9w0BAQsFAAOCAQEANct939JugukX8S6FMdgcviw9nDsq4yYDjBQDROIJxn2NelZl
7C8NyMsvNCkMbbAKGqiLx2NFA8q3aiN6XVhEWpFr3T1hCc8+RcLi4v4hsskWCiNn
XztVnbxZZT9BFuWe1sIp8oMeImEuxLkGz+c0F/XZPgFx9J7rkeJqHZFdLDJxEVSI
TjBSTLi7zMnFqJmD+CeKsw1UMfqLOKighC2ETyqT2URznN2sKZAKBD3j+RFnx1gA
iYd/FaiT6XMUuNSVXa3cP/W+mxSpvYBhKHv/+cb0EKXUARsZ6O7SWqcb+QPuTir/
oXmfNqBenKy0zwJ5XNFDaLmli2rufC834Ht64w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:11:48 2025 by rpki-client