Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205692.roa
File: AS205692.roa (raw, json)
Hash identifier: dfJsPr54S+CJdD0VNf88brUg+6B5Ez3RYxJb0lTAT1c=
Subject key identifier: 83:97:72:CC:67:DE:6C:75:3A:A3:EE:AD:18:60:89:96:F4:83:89:B9
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 063084B9F7AD6AB7D15BB38D162EAD8093AAB0EB
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205692.roa
Signing time: Thu 23 Apr 2026 11:30:58 +0000
ROA not before: Thu 23 Apr 2026 11:25:58 +0000
ROA not after: Thu 22 Apr 2027 11:30:58 +0000
asID: 205692
IP address blocks: 2a0f:9400:6170::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:30:84:b9:f7:ad:6a:b7:d1:5b:b3:8d:16:2e:ad:80:93:aa:b0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 23 11:25:58 2026 GMT
Not After : Apr 22 11:30:58 2027 GMT
Subject: CN=839772CC67DE6C753AA3EEAD18608996F48389B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:99:fc:5a:bd:18:0a:d3:7c:ed:be:59:5f:
26:87:7a:19:96:eb:1b:7b:de:29:a4:5a:0c:d6:00:
38:ac:f8:f8:06:bc:a7:59:33:8c:dd:09:28:9d:d6:
0d:96:48:01:70:9d:f6:7b:99:db:c9:55:21:d8:88:
e1:9d:75:8a:96:8e:96:1b:6d:40:f8:82:b9:31:bf:
1d:2a:a6:a5:83:a6:b5:7b:46:99:9e:65:ac:47:2d:
f1:31:a3:3a:82:63:4b:a7:3a:fd:a3:58:1c:f9:92:
6f:f4:9f:cb:14:62:51:42:fc:7d:84:c4:40:51:53:
b2:83:dd:ba:92:aa:62:ad:8e:3a:21:2b:13:a8:66:
a6:22:ef:81:cc:c9:4e:fc:4b:17:f0:bf:41:ca:c1:
5f:e4:fe:9a:b7:83:c9:87:ad:d8:08:99:40:9f:3d:
3c:37:d5:d2:68:67:f9:a2:f2:a5:40:df:b7:2e:d0:
71:b8:48:75:09:e3:f5:f6:08:9b:8a:39:9d:d5:2f:
60:93:b3:9a:79:61:44:31:5b:19:fc:85:8f:c5:e6:
6c:c6:55:64:5e:f4:af:96:29:1f:ce:de:76:18:1e:
18:ec:43:e3:62:e9:ee:5a:5f:64:c7:2f:49:66:86:
78:11:af:ff:37:cd:0f:ce:6a:79:7b:5e:fc:d4:1a:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:97:72:CC:67:DE:6C:75:3A:A3:EE:AD:18:60:89:96:F4:83:89:B9
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205692.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6170::/44
Signature Algorithm: sha256WithRSAEncryption
09:1f:f7:e6:c8:23:22:9c:e6:91:96:ba:67:76:8f:57:54:60:
79:ff:d8:f6:0e:61:57:c1:e2:f7:3a:3f:51:f3:2d:bf:b9:30:
9d:4b:ba:af:25:75:fd:8a:0c:de:f4:b8:dc:1b:4a:eb:ac:e3:
8a:df:3a:59:d7:07:f8:b3:1e:a9:f4:1b:78:b0:6a:3b:80:51:
c6:b6:c4:7e:7f:87:0e:26:36:53:31:f0:01:85:2d:a0:f2:db:
65:5d:10:18:d4:11:a0:00:e8:0e:73:60:08:76:8b:34:2d:79:
2e:7d:d3:4e:f3:17:ff:0b:e1:e6:21:80:3b:dc:36:a2:0a:c0:
ab:05:38:7c:e6:77:4e:88:aa:a8:07:eb:c9:89:21:ab:58:d6:
88:1a:68:f5:1b:b9:d8:2d:4c:0f:17:08:0b:ea:c1:e8:b9:08:
59:86:f4:2c:d0:3a:99:d7:cb:f8:60:9f:42:da:8b:a3:38:c4:
2a:dd:b2:25:47:b5:f6:ce:ea:89:1c:70:29:8d:da:d4:65:2c:
d1:88:d5:91:ab:97:04:ca:34:8d:92:ac:94:f1:c3:c8:48:4e:
f4:c8:6d:77:41:0d:b2:82:e6:f0:34:df:32:26:c8:ca:3a:cd:
1c:13:fc:e3:96:f5:d1:9c:58:15:41:55:b6:3b:12:38:8d:15:
77:9e:4b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:30:14 2026 by rpki-client