Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS201386.roa
File: AS201386.roa (raw, json)
Hash identifier: h5QHqAADWVOMyaydPJeMMMpajA+3UWXVl34nCS18fwU=
Subject key identifier: 3F:50:80:37:78:01:6E:C3:DB:C1:74:D2:AC:2F:85:AD:00:07:E7:8D
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7125BE98CA3B28351973F03B1072E5AD98D34C71
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS201386.roa
Signing time: Thu 16 Jul 2026 11:29:42 +0000
ROA not before: Thu 16 Jul 2026 11:24:42 +0000
ROA not after: Thu 15 Jul 2027 11:29:42 +0000
asID: 201386
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:25:be:98:ca:3b:28:35:19:73:f0:3b:10:72:e5:ad:98:d3:4c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 11:24:42 2026 GMT
Not After : Jul 15 11:29:42 2027 GMT
Subject: CN=3F50803778016EC3DBC174D2AC2F85AD0007E78D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:4f:3f:a4:32:f2:b2:76:f8:a1:5c:d2:c1:
2f:16:5e:3b:52:f3:5c:a5:95:3d:6b:3b:54:9a:99:
6c:23:d9:d9:32:ce:f3:28:f8:0d:2a:99:4a:96:26:
c1:a3:b0:7f:5a:e2:5f:a4:7b:c8:15:89:ea:50:c3:
0a:be:a9:e1:d4:25:8d:8b:80:12:b3:26:36:d7:e5:
0e:5d:4e:cc:eb:bb:64:d5:2d:0d:88:1c:84:e6:bb:
54:06:a5:59:88:43:82:f2:2f:3d:b2:03:e9:99:38:
10:10:bd:5f:fa:b1:67:f1:0a:92:80:c3:55:96:2f:
c4:e6:7f:71:5e:ac:66:b7:f8:16:4a:24:80:31:b4:
27:1f:ec:c4:11:8c:5c:2b:32:85:0c:75:dd:a2:7a:
6e:d7:07:5f:ae:02:eb:0a:9a:23:04:ee:bf:0d:af:
fa:2b:fa:39:bc:9a:b4:8c:6f:c6:4c:39:41:89:69:
61:c6:65:20:fc:17:6a:e3:93:3d:98:89:fc:1b:bf:
14:2d:3f:2f:18:d7:ec:6d:1e:4a:95:0b:67:40:ff:
ea:31:16:99:01:af:99:68:b3:75:d4:44:cf:f5:d7:
e0:bd:13:e5:74:05:c7:7e:ac:f0:c9:50:27:09:cf:
bf:8e:d6:16:e6:8f:34:6c:6c:ec:93:02:a0:cc:0d:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:50:80:37:78:01:6E:C3:DB:C1:74:D2:AC:2F:85:AD:00:07:E7:8D
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS201386.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
1c:fa:1d:ed:43:1f:65:ce:2a:68:bc:c7:46:e3:aa:9b:eb:65:
ab:5a:d9:46:10:1a:38:36:6c:26:2f:bc:f1:dc:8e:11:c6:4f:
11:2b:b2:8a:9d:84:57:42:61:1e:a8:1b:1d:59:c6:4e:26:92:
13:51:97:3e:9f:90:e9:47:e8:7d:8c:31:05:a8:83:c8:a3:51:
1c:86:38:86:e2:aa:d6:b5:15:ba:83:4f:77:d6:6d:45:47:73:
44:0b:48:a3:17:18:ba:73:55:71:d4:48:2a:da:19:0f:88:e7:
b8:1f:c2:0f:b4:36:30:ad:8b:e7:98:6b:9a:8b:4d:4f:3a:b9:
f6:a2:61:f8:5f:60:fb:99:cf:88:61:f5:ff:1e:69:dc:5a:53:
39:b3:bb:59:c3:04:c2:47:57:32:ea:24:02:52:57:b8:2c:4b:
65:5b:d4:91:ec:af:b0:de:25:bc:46:08:a0:92:0f:9b:77:3a:
ac:8f:56:e6:aa:57:c4:79:57:61:dd:33:8c:0e:79:05:73:0e:
3e:9a:f9:fa:86:b0:79:ec:52:a6:55:7f:17:ee:19:48:2e:c4:
66:53:c4:7e:85:05:ab:f5:1b:4b:8f:1a:31:85:f9:f7:6a:1f:
62:ec:e8:c1:0e:03:d3:fc:e4:94:ef:24:ef:12:bb:e3:bf:cc:
e0:96:d8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:18:22 2026 by rpki-client