Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203283.roa
File: AS203283.roa (raw, json)
Hash identifier: Kd20HQPW8R5iLqddm33YTmqaciQGVInIsqJl6UgSX6Q=
Subject key identifier: 40:88:93:D1:6E:CD:7A:39:F6:20:7D:B7:D4:F5:94:0D:59:25:B0:84
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2C1EF1A4F7F664BD57634FA6AFED090A17B2A906
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203283.roa
Signing time: Tue 30 Sep 2025 23:07:12 +0000
ROA not before: Tue 30 Sep 2025 23:02:12 +0000
ROA not after: Tue 29 Sep 2026 23:07:12 +0000
asID: 203283
IP address blocks: 2a0f:9400:6518::/45 maxlen: 48
2a0f:9400:6540::/44 maxlen: 48
2a0f:9400:6560::/44 maxlen: 48
2a0f:9400:6570::/45 maxlen: 48
2a0f:9400:6578::/45 maxlen: 48
2a0f:9400:6580::/45 maxlen: 48
2a0f:9400:6588::/45 maxlen: 45
2a0f:9400:65f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:1e:f1:a4:f7:f6:64:bd:57:63:4f:a6:af:ed:09:0a:17:b2:a9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 30 23:02:12 2025 GMT
Not After : Sep 29 23:07:12 2026 GMT
Subject: CN=408893D16ECD7A39F6207DB7D4F5940D5925B084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:27:78:61:79:94:ac:7d:8d:61:85:dd:62:3f:
19:e6:3c:55:72:c0:92:1b:72:2f:0c:9d:8a:f5:2b:
d4:c7:42:71:bf:0e:35:1b:19:d2:38:e3:b6:db:98:
eb:33:cd:b4:91:8c:f1:13:2f:63:11:71:d6:08:c0:
e3:ba:a3:24:e7:c8:b1:a3:21:ec:79:a3:f9:d6:88:
02:28:ec:4c:b2:2a:9e:e2:68:cf:5b:a8:2c:72:fa:
36:a0:d3:2a:f9:bf:e6:9d:6c:c9:3c:36:d6:91:5f:
5f:12:d0:1a:6c:59:f0:ee:5b:3b:4c:ea:5c:77:b8:
99:82:4a:e4:a8:95:c7:5a:5a:ac:88:2b:0c:4a:c4:
99:36:51:5a:d0:09:a5:f0:d2:6c:bc:5c:93:30:7e:
96:a7:5a:0d:59:85:34:bf:a2:0e:b1:e8:99:b2:c5:
1b:87:c2:39:9a:35:9d:48:4c:c5:35:3b:7a:b3:a5:
42:c9:1c:d6:ff:a1:59:6e:93:70:2e:b9:e2:6f:54:
f7:c4:dd:16:dd:cd:c6:ac:a6:6f:16:cc:6a:d5:59:
7d:ef:31:a2:e6:53:a5:9c:4e:e7:a5:14:4e:8a:3b:
fb:99:58:e8:48:26:d1:3f:ea:c5:8c:85:51:95:62:
33:76:90:ab:62:6b:21:39:8e:ba:86:07:fc:f6:4e:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:88:93:D1:6E:CD:7A:39:F6:20:7D:B7:D4:F5:94:0D:59:25:B0:84
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203283.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6518::/45
2a0f:9400:6540::/44
2a0f:9400:6560::-2a0f:9400:658f:ffff:ffff:ffff:ffff:ffff
2a0f:9400:65f0::/44
Signature Algorithm: sha256WithRSAEncryption
93:74:af:03:70:f8:1a:57:da:dd:7d:d6:5e:c9:5d:8c:74:b8:
6e:2e:60:02:42:7a:ec:59:07:a0:24:ed:58:a0:60:63:96:5e:
0e:f4:97:d3:dc:58:bb:8f:02:0c:d6:38:59:de:65:37:9a:e4:
a0:df:80:c1:0c:c5:3b:94:bf:28:d2:74:f1:ab:5e:91:36:88:
b8:5b:dc:25:f0:ea:44:4e:4e:03:a0:32:34:e1:7f:08:38:0a:
12:8a:c2:2d:cb:75:5b:47:56:29:44:54:77:ba:56:7a:12:9b:
8a:1c:30:1f:87:85:30:c7:bd:e6:fa:1d:82:73:46:47:ed:dc:
bd:0c:05:6c:75:63:75:80:17:b5:19:94:11:9f:51:47:94:ca:
88:8d:98:9f:fc:6b:13:04:26:c2:4d:f7:cb:96:80:94:93:fe:
28:ac:4f:47:c4:71:07:92:a0:f1:58:f9:66:5a:27:2d:7c:66:
f0:74:d6:d8:69:36:c4:29:51:15:3f:62:d3:5a:b9:f5:3a:0e:
60:67:3e:9f:0b:7f:c5:37:6e:d1:af:0d:ea:5c:56:80:bf:3b:
30:9a:6c:af:00:03:9c:2b:d4:30:0f:08:71:f6:7c:ba:30:da:
fa:fa:85:a2:c5:c8:4b:d6:06:e5:99:3e:95:f6:0c:36:5b:9a:
41:ef:c0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:20 2025 by rpki-client