
Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200241.roa
File: AS200241.roa (raw, json)
Hash identifier: cuLw1MLL+yZW36BBEoKmr806l1uV0wkHqbFXMKl2T6U=
Subject key identifier: B9:96:80:F0:AB:44:68:5B:AD:C8:6D:29:EC:3C:2C:E7:F3:C1:6C:95
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7EBFC7352441D0B6B2740039CC038E1EB97AC3DA
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200241.roa
Signing time: Thu 18 Sep 2025 08:37:33 +0000
ROA not before: Thu 18 Sep 2025 08:32:33 +0000
ROA not after: Thu 17 Sep 2026 08:37:33 +0000
asID: 200241
IP address blocks: 2a0f:9400:6550::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:bf:c7:35:24:41:d0:b6:b2:74:00:39:cc:03:8e:1e:b9:7a:c3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 18 08:32:33 2025 GMT
Not After : Sep 17 08:37:33 2026 GMT
Subject: CN=B99680F0AB44685BADC86D29EC3C2CE7F3C16C95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:5c:39:7a:a8:99:a1:e7:49:12:f8:47:c2:
f2:58:44:84:a7:26:64:d3:54:b2:e0:e6:8c:55:87:
b7:9e:7f:9c:1b:91:de:f5:7e:15:a0:19:23:9a:bf:
03:f2:31:3b:a9:f2:79:28:c4:42:5a:ad:39:c1:66:
ac:41:03:b5:88:4e:47:54:4b:79:d2:a4:fc:c6:e7:
9f:7a:e2:5e:ff:fb:25:7a:63:96:1d:31:00:89:a5:
c9:ae:15:65:62:f4:58:01:9a:5f:9d:a6:b3:06:65:
ea:11:24:e7:fd:77:5d:09:b5:d2:e4:21:76:72:5e:
06:c3:6c:06:49:8e:7b:40:9c:bd:fb:1e:0e:60:86:
38:9f:55:8a:27:22:db:d6:ee:7a:76:a3:81:63:20:
f2:b2:a0:10:96:df:11:88:c9:6c:fb:4e:cc:c6:83:
59:93:40:70:8f:30:8b:b6:18:82:78:b6:b8:26:ff:
d8:a7:f0:54:e0:36:73:d5:da:3b:94:17:1d:6a:99:
87:40:14:5a:ba:7b:d9:3b:32:f3:20:97:b0:f8:b1:
54:ec:33:18:a6:17:fe:ce:d2:51:5f:a7:0c:43:43:
f6:e5:d5:79:6d:de:7f:1c:9a:fc:f5:cd:d3:e8:48:
dd:ba:ce:53:95:1d:1a:10:e1:45:6c:a7:76:90:08:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:96:80:F0:AB:44:68:5B:AD:C8:6D:29:EC:3C:2C:E7:F3:C1:6C:95
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200241.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6550::/44
Signature Algorithm: sha256WithRSAEncryption
01:1e:09:ee:23:fb:94:31:ce:4f:1e:9a:0c:7a:a0:1f:2f:57:
59:a9:74:c7:13:9a:ed:5d:fb:dc:75:ff:16:87:6c:9b:70:2b:
e5:46:42:d6:4b:1e:ac:db:7c:b6:f8:a7:00:8f:36:d2:db:f3:
ba:51:20:1d:d4:56:85:a0:97:a5:33:8f:3c:40:51:6a:58:14:
aa:23:a2:24:5b:a3:b7:3d:1d:28:c6:02:3d:ca:38:72:54:c7:
c8:01:14:e8:f8:ae:ae:fc:02:19:ab:d6:7c:6c:56:87:13:13:
94:c6:ed:1d:a8:fc:8f:b8:71:70:76:2b:d3:9c:17:4e:6d:f4:
86:d8:9a:90:08:83:56:f1:20:b4:39:6c:b5:5a:fc:c0:c9:13:
b9:9c:d1:e9:0e:e2:20:f8:ca:e3:a9:4e:5c:93:a6:55:21:e5:
c9:6d:e3:dc:6c:f2:78:89:5a:c3:93:5a:ce:e5:d5:29:ad:fb:
96:76:7e:09:3f:b3:fc:87:75:1f:4c:a4:89:2b:25:a3:e0:22:
d3:de:97:46:0f:8a:57:e6:f4:1a:73:91:19:a6:7f:26:0c:59:
fa:07:7a:07:95:fc:36:61:ca:62:fe:6a:44:a7:4b:47:e7:36:
74:da:5d:de:64:a5:1a:29:bf:7c:b0:f3:c7:9b:4e:35:a9:4f:
43:d6:72:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:33:44 2025 by rpki-client