Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207529.roa
File: AS207529.roa (raw, json)
Hash identifier: yWh/a60ET9B9Cp8KswWedVCeh/mtgytKprGW9wZQpuE=
Subject key identifier: 51:94:1C:EA:87:23:C0:C6:88:8F:CB:98:0F:F0:06:D4:AA:A8:1E:26
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 546DE696A1F06B047423402C8EBF23741B40F1EB
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207529.roa
Signing time: Wed 15 Jul 2026 14:29:39 +0000
ROA not before: Wed 15 Jul 2026 14:24:39 +0000
ROA not after: Wed 14 Jul 2027 14:29:39 +0000
asID: 207529
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:6d:e6:96:a1:f0:6b:04:74:23:40:2c:8e:bf:23:74:1b:40:f1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 15 14:24:39 2026 GMT
Not After : Jul 14 14:29:39 2027 GMT
Subject: CN=51941CEA8723C0C6888FCB980FF006D4AAA81E26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:af:1b:fc:e6:c2:f4:c2:95:72:d8:19:a8:
be:fa:7a:e3:66:00:5a:61:0f:d0:32:a7:59:6f:7c:
b6:52:87:2d:6d:dc:7b:e5:d0:2f:13:8e:43:d6:2f:
da:88:c0:7f:58:06:f9:0d:c3:06:30:ca:1f:07:8a:
c7:2b:94:91:ec:5d:fc:95:a8:d6:17:42:4f:b8:d0:
18:2c:07:cf:9f:39:67:66:6d:b3:5a:2c:20:7b:85:
73:bb:77:3a:e9:ef:be:65:02:a9:fc:6b:fd:09:52:
1b:53:51:eb:0b:45:6c:83:cc:d2:f8:08:c7:79:45:
a3:8b:54:16:bc:09:42:07:0b:ff:9d:52:f0:31:ae:
3e:62:50:f4:e4:b3:31:0b:97:4d:a2:fd:44:df:52:
78:bf:d0:7a:e1:b9:06:08:c8:ee:cc:fa:92:90:dd:
4c:86:2d:ab:d1:60:94:62:81:59:e9:f1:c2:e0:df:
1a:e9:76:ce:b0:9a:fd:8e:b9:2d:77:73:dd:af:1d:
33:f2:15:58:04:f4:fe:33:38:f7:a5:1a:a8:bb:14:
9f:4f:ff:19:a6:f4:52:4f:d1:b4:e3:e1:2e:d6:ac:
bf:7e:57:b0:c1:9f:9f:e6:c1:ce:83:c0:09:c5:e2:
89:b8:b5:03:7b:1a:61:6a:9a:c2:30:65:59:c4:5d:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:94:1C:EA:87:23:C0:C6:88:8F:CB:98:0F:F0:06:D4:AA:A8:1E:26
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
5c:b6:54:21:f1:f2:67:d4:02:95:fb:5f:10:e3:59:0a:27:dc:
cb:8b:59:01:31:d5:2a:8d:f0:75:1f:f0:43:c7:4a:68:3a:aa:
f3:92:83:93:b5:c5:7a:1f:f4:46:50:22:8b:c2:14:57:e8:9a:
29:4b:90:db:c1:17:50:91:95:8f:fd:5d:3d:49:40:e1:4e:bf:
c2:68:5b:1b:68:e0:f2:e4:90:be:42:44:36:31:c6:3a:d2:74:
dc:79:b5:38:58:db:d9:66:57:51:fb:d3:83:c3:35:15:07:55:
2b:98:5e:5a:32:25:fa:9f:9b:35:ee:7f:68:b8:17:95:5c:f6:
5f:5d:d1:ea:c8:0f:4d:6c:7d:da:11:e2:66:f0:9a:7c:ab:21:
f8:12:cf:e8:58:80:13:b0:08:72:5c:61:61:82:1e:b0:a4:80:
fd:92:73:0b:b4:7f:56:6b:58:59:ea:ff:f8:b1:93:05:66:0b:
cf:22:b5:f3:50:44:b9:b2:dd:3c:fd:fc:c9:b8:c0:8f:0c:2c:
03:e5:a7:25:df:1a:e3:2a:44:d4:59:69:90:3e:b2:a6:89:a1:
04:84:69:aa:43:cf:58:6f:da:25:77:9a:d6:ce:f0:52:20:4c:
0a:7e:6c:3f:be:33:c8:93:e4:63:94:74:d0:9c:bd:ac:f7:48:
bc:52:d0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:18:22 2026 by rpki-client