Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207529.roa
File: AS207529.roa (raw, json)
Hash identifier: /2ZC7T/qpLbHnB3R6iHURjyp6iN4OALk68/r9zv1smo=
Subject key identifier: 9C:A2:AF:0C:11:BE:3E:AD:99:2E:A2:E7:EA:B6:FD:3C:36:56:FA:8E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6AE16DD638FF59701B5CB18D530541475FB4D0B4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207529.roa
Signing time: Wed 13 Aug 2025 13:48:34 +0000
ROA not before: Wed 13 Aug 2025 13:43:34 +0000
ROA not after: Wed 12 Aug 2026 13:48:34 +0000
asID: 207529
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e1:6d:d6:38:ff:59:70:1b:5c:b1:8d:53:05:41:47:5f:b4:d0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 13 13:43:34 2025 GMT
Not After : Aug 12 13:48:34 2026 GMT
Subject: CN=9CA2AF0C11BE3EAD992EA2E7EAB6FD3C3656FA8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:a0:01:41:36:c7:e3:26:24:55:49:76:9d:
24:2d:fe:20:ff:78:45:49:87:ba:07:49:9c:e1:40:
e2:9f:fd:6e:75:ec:15:39:98:9d:0c:96:87:3e:9c:
db:31:86:9f:ff:db:b2:42:b3:49:df:f9:2b:da:e3:
16:f2:48:1a:b5:3d:28:74:7b:73:be:4a:9a:bc:5d:
ba:58:5c:78:0e:44:11:8a:10:57:f0:8c:99:03:8f:
5a:51:0f:aa:5e:52:5b:be:73:a2:bc:82:45:01:12:
06:e2:36:43:4b:c7:6c:3b:3b:8e:fc:88:d9:ce:e1:
df:9f:10:ca:2c:04:4c:8d:20:a3:e3:24:f0:b4:f6:
71:00:55:4e:12:c5:a6:31:ab:3d:e7:a6:d6:fc:ea:
ac:3a:dc:fc:6d:92:d0:c3:0e:32:f1:cb:79:4d:31:
1b:65:f8:42:b1:b9:c1:56:ce:3c:fe:76:3e:d3:17:
bc:ce:0d:79:fc:7f:a9:c3:a9:ca:72:be:3d:cc:42:
45:a6:bb:3d:15:65:e8:7d:01:c4:4a:0e:2a:c0:92:
86:6f:bc:83:7e:77:a8:24:1a:45:d9:c0:11:47:90:
58:a6:45:e5:dd:fd:ab:a2:cb:9f:4a:52:16:01:ef:
6b:ba:90:7d:67:ad:68:8c:61:43:57:b7:ab:7b:bf:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A2:AF:0C:11:BE:3E:AD:99:2E:A2:E7:EA:B6:FD:3C:36:56:FA:8E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
b6:7a:1e:32:5b:45:bd:b6:a2:e0:28:f1:76:93:73:5b:36:79:
c2:1d:cf:55:43:5a:bd:a6:cd:ab:f5:68:1d:3c:88:95:82:ff:
b6:a3:d6:05:b7:55:5e:ee:42:fb:66:11:ee:78:da:50:37:3d:
34:7f:b8:38:7b:36:e3:79:38:9d:ce:0e:2a:e0:b0:af:23:7f:
6b:ec:1f:31:28:b8:8a:9e:8d:5b:23:f2:54:42:91:37:60:7b:
69:fc:55:2d:72:72:a2:f6:27:21:0b:92:39:c7:c8:c5:73:94:
16:18:a5:12:ae:c6:61:bb:95:76:01:a5:69:67:d3:a7:52:6a:
73:71:ce:43:74:8d:2b:47:6d:cf:d6:4c:e9:54:66:05:c8:a4:
7a:ef:df:6d:af:a0:4d:3e:17:70:21:ae:0b:e5:41:c1:b6:94:
ac:78:e0:44:9b:02:aa:2e:d2:c3:a1:0a:81:b8:9c:43:83:9a:
aa:f0:31:52:bd:d0:c4:d1:34:34:1a:a8:dc:98:73:d0:7a:3f:
22:11:3b:6e:a0:53:af:b5:72:5b:7c:48:66:8c:a1:7e:c5:d5:
e2:43:d8:2d:ca:5a:16:c1:25:c8:01:e3:82:a0:5a:05:49:df:
f6:26:58:91:8b:db:af:42:68:6e:73:75:82:9a:58:21:2b:45:
90:25:76:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:46:40 2025 by rpki-client