Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205794.roa
File: AS205794.roa (raw, json)
Hash identifier: wV2x7QNcN4FaXyYYcZSqZIj4kWnBZY/kpeUwjXPvlFM=
Subject key identifier: 23:A7:1E:58:77:A2:38:72:8B:38:D0:DD:70:58:7C:58:3B:6C:48:41
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 53F8A9D48518DE94A19C5E1B81CCAE9CC945A879
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205794.roa
Signing time: Tue 03 Mar 2026 02:28:56 +0000
ROA not before: Tue 03 Mar 2026 02:23:56 +0000
ROA not after: Tue 02 Mar 2027 02:28:56 +0000
asID: 205794
IP address blocks: 2a0f:9400:7700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f8:a9:d4:85:18:de:94:a1:9c:5e:1b:81:cc:ae:9c:c9:45:a8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 3 02:23:56 2026 GMT
Not After : Mar 2 02:28:56 2027 GMT
Subject: CN=23A71E5877A238728B38D0DD70587C583B6C4841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d6:9f:04:e3:69:b0:c1:3e:18:b9:b6:f9:a1:
2e:56:2e:c2:12:8b:fc:43:08:92:c3:07:99:39:71:
c0:4b:84:29:e9:4a:f5:fd:11:62:3d:0f:e7:ef:5c:
f4:0a:c0:66:64:bd:c6:b9:34:2c:9f:65:56:f2:0d:
f4:6e:94:69:91:c5:c5:5a:ea:6e:06:b6:2f:b9:73:
4f:bc:15:a2:7a:cd:66:03:8c:c8:3f:f7:a8:33:f7:
36:f5:d7:c7:fa:c5:79:f8:13:f2:61:0f:15:29:20:
50:ec:e6:f2:f9:61:74:e3:65:cb:e6:17:a7:f9:a9:
33:66:05:28:8b:f3:4d:62:f7:a4:05:04:2c:81:b4:
9c:02:8a:f9:18:99:3f:2b:24:4c:3d:39:8a:35:f1:
71:13:7e:9a:fc:3a:58:ba:6d:a2:01:90:1b:ca:45:
24:f3:f4:51:a4:3f:d4:7b:49:77:a2:7e:76:dd:7c:
89:8c:ef:a2:6e:64:af:29:c6:a9:b9:fb:56:2c:30:
9c:bf:3c:17:6f:a4:ae:51:61:67:8a:3e:40:76:6d:
b7:b1:b3:ab:1f:99:2c:d4:e4:72:92:46:ef:4f:be:
dc:55:72:54:6a:4d:14:07:2a:8f:74:19:4a:1a:79:
bc:75:97:3c:38:90:7a:5f:53:42:ba:2a:6a:36:e9:
26:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A7:1E:58:77:A2:38:72:8B:38:D0:DD:70:58:7C:58:3B:6C:48:41
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205794.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7700::/48
Signature Algorithm: sha256WithRSAEncryption
20:78:bd:a2:cf:2e:02:b1:8f:40:3a:8a:95:77:74:a3:6f:d8:
df:26:6c:34:4e:61:26:1f:d5:af:3e:8b:b7:da:e8:a1:44:8b:
1f:60:b9:c2:62:82:3a:24:12:84:00:f7:d1:ee:d5:67:33:e0:
c7:28:1e:ca:4f:d4:06:ff:89:94:f7:b9:b9:f4:76:21:c7:90:
99:dd:62:b2:ed:6d:3e:84:ed:0e:c6:ff:3a:3b:19:bc:04:bf:
77:94:93:35:53:2b:e7:52:af:0d:1d:48:91:b5:9f:f4:ce:ee:
6c:19:ad:cd:3f:e0:45:69:96:cf:e7:6b:dc:b2:7c:d5:b6:9c:
ef:65:76:33:e8:c6:c0:4d:85:9d:c6:ca:a7:ed:f8:ee:a9:44:
87:d7:14:cc:6d:81:bb:08:c0:d9:84:fd:01:97:79:10:39:5a:
7c:49:fd:94:8c:76:1a:63:b8:cf:e8:99:8a:51:73:cc:6c:24:
22:49:ad:eb:6d:19:bf:8e:5a:b3:80:93:34:eb:a6:21:a6:1c:
f0:ec:ff:c0:dc:fd:5f:87:1e:b4:4a:59:6a:93:7f:0c:44:e2:
fb:a6:10:a2:67:a1:8f:72:d3:5f:4d:16:eb:dc:b5:75:db:b4:
c8:7f:f1:04:76:2e:40:ec:6a:80:ad:53:bf:66:8e:0a:a2:a8:
57:50:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:32:32 2026 by rpki-client