Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205965.roa
File: AS205965.roa (raw, json)
Hash identifier: rt7+CJ13ETrtsLKZdoRe0UYj6ff+fRj5iRs7YDvkVgg=
Subject key identifier: 03:EF:67:F1:D3:C6:04:52:95:7E:67:0E:97:D6:F6:C8:DD:80:EE:E6
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6FD2BF18769374C02077CA57395BF3F0F1722739
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205965.roa
Signing time: Sat 09 May 2026 16:59:23 +0000
ROA not before: Sat 09 May 2026 16:54:23 +0000
ROA not after: Sat 08 May 2027 16:59:23 +0000
asID: 205965
IP address blocks: 2a0f:9400:6169::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d2:bf:18:76:93:74:c0:20:77:ca:57:39:5b:f3:f0:f1:72:27:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 9 16:54:23 2026 GMT
Not After : May 8 16:59:23 2027 GMT
Subject: CN=03EF67F1D3C60452957E670E97D6F6C8DD80EEE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:06:22:59:e6:ed:5e:7f:e9:68:04:2f:dc:
f3:b2:f1:44:26:56:64:ed:0a:e0:47:3e:39:64:7d:
52:c6:4f:57:04:1b:65:eb:66:18:53:58:07:ea:3b:
2c:16:31:bd:73:45:7d:3f:43:bc:e6:d3:8c:76:10:
79:a4:59:51:d6:9a:ce:fa:71:7a:fb:94:65:79:eb:
7b:28:19:84:d1:0c:e7:b5:4c:9e:c5:cd:d7:31:cc:
58:0b:9a:8d:bf:23:e1:7e:3a:b2:1e:b4:f5:18:80:
19:8c:5a:28:b9:ad:9c:33:b7:ee:5b:8f:fb:8a:f5:
37:31:ed:55:8b:12:88:76:63:cb:cf:54:91:d2:5a:
77:4f:f9:0d:5d:5a:34:e7:35:a0:84:7e:03:16:9f:
39:cb:5f:8e:e8:67:0f:47:35:85:69:1c:95:85:ac:
18:c8:9c:fb:0d:53:eb:d7:42:6d:b8:be:bc:41:93:
bb:e0:4d:48:66:37:f1:c4:33:b6:76:4e:78:b7:c1:
04:43:ab:8a:ac:19:fb:27:1e:51:9e:44:ee:e4:84:
71:79:9c:da:dc:0e:40:53:16:e8:f6:b0:aa:13:e8:
b1:b9:fd:7b:79:d3:3c:93:f8:05:3c:c1:bd:5d:31:
b4:9f:89:82:6b:cf:e1:df:e9:e4:95:5f:9c:b3:d8:
5e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EF:67:F1:D3:C6:04:52:95:7E:67:0E:97:D6:F6:C8:DD:80:EE:E6
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6169::/48
Signature Algorithm: sha256WithRSAEncryption
88:1b:c6:45:17:66:25:0a:67:e0:ec:d9:ed:b8:45:ae:49:ea:
82:fa:f9:95:f8:65:0c:45:62:bb:d0:77:ad:86:d2:31:de:de:
1d:64:a6:59:dc:4a:77:78:b0:8d:71:7a:f4:5e:b7:aa:3e:6f:
4f:7d:f3:81:b5:06:c0:14:2e:75:13:58:a2:c9:0f:fb:7d:c9:
7b:e0:6c:64:3b:22:0c:8a:f6:3e:0b:b8:da:7b:7a:d4:52:a4:
e2:cc:04:c2:c1:86:c6:20:c9:7f:ed:d0:4f:5b:57:b1:78:9e:
5b:69:c2:14:8c:9a:e9:67:a7:f9:31:de:ef:46:c9:a9:a4:d9:
c7:e0:53:8f:e7:2e:88:1b:f6:b0:32:0a:6e:3c:f9:00:db:02:
10:90:e9:4a:96:59:47:79:f3:6a:9e:ec:82:9b:e6:d9:8e:b3:
e1:df:42:0a:e7:3b:5d:5c:2e:01:d1:42:2d:fc:20:83:38:95:
46:6b:db:3d:7b:96:52:7c:06:2e:c8:0b:37:25:da:4f:a3:e7:
8c:f5:c7:0f:18:01:39:5b:df:61:6f:5a:33:78:fc:a9:a7:15:
3f:c6:68:e8:d2:e0:5e:49:a6:8e:62:93:d3:65:f7:4e:ca:eb:
b5:59:9f:d5:3f:dc:7f:c8:e5:7c:29:d0:87:d1:37:90:5f:bb:
06:bf:ac:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:30:18 2026 by rpki-client