Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208754.roa
File: AS208754.roa (raw, json)
Hash identifier: WXBW5EpN4oxedEElF9IUvDzBv0sCpZtfdB16UpiILBY=
Subject key identifier: D7:79:D0:E1:C4:CE:A5:46:98:25:FD:45:FD:9E:DA:16:F0:6C:AC:25
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1F136C48A48AF13C5A5C6112EB015B65A2980499
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208754.roa
Signing time: Thu 16 Jul 2026 17:29:47 +0000
ROA not before: Thu 16 Jul 2026 17:24:47 +0000
ROA not after: Thu 15 Jul 2027 17:29:47 +0000
asID: 208754
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:13:6c:48:a4:8a:f1:3c:5a:5c:61:12:eb:01:5b:65:a2:98:04:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 17:24:47 2026 GMT
Not After : Jul 15 17:29:47 2027 GMT
Subject: CN=D779D0E1C4CEA5469825FD45FD9EDA16F06CAC25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:f2:a6:f1:6e:bf:cb:3a:8b:9b:2e:63:d4:
9c:a1:db:76:20:bb:06:53:59:a1:2a:24:3e:8b:eb:
e0:7c:72:75:90:98:6d:99:21:6e:28:ce:a4:14:4c:
5d:12:44:58:d5:0c:92:f4:8d:38:07:e9:cb:32:11:
eb:e8:89:24:ef:41:59:d9:74:aa:02:09:35:af:29:
b2:6c:ad:90:ce:21:fc:56:72:2f:db:ff:bf:f4:7a:
e4:f5:10:13:4f:9b:cd:da:9d:8f:05:aa:e8:ba:44:
93:cd:10:49:31:d5:eb:f6:e3:28:6a:4f:ae:d4:fc:
7e:8c:c4:c7:7f:40:11:73:8a:73:dd:d4:6f:58:af:
61:84:ee:db:b7:99:5e:85:80:ce:f4:8a:94:9c:97:
2b:7e:7d:97:89:1f:78:83:d5:18:cf:39:38:59:ae:
8c:00:36:d4:13:2e:93:7e:ab:d7:e7:a1:6d:d5:09:
e5:d8:12:2b:b7:a1:29:33:94:29:c3:f4:ff:bb:aa:
1a:86:76:d8:39:c4:86:dd:c5:0a:9c:66:cd:18:d0:
8f:88:44:8f:db:64:f6:3a:8f:5a:f9:c6:23:06:c7:
cc:a4:a4:7f:de:f3:c3:6b:47:f6:2e:d3:fd:eb:e6:
3d:7e:33:ef:a2:97:f5:0d:49:51:bb:6c:95:fd:fc:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:79:D0:E1:C4:CE:A5:46:98:25:FD:45:FD:9E:DA:16:F0:6C:AC:25
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208754.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
24:1c:06:ea:08:23:a6:45:68:6f:83:69:c7:19:22:bc:b7:c7:
b6:f1:62:a0:ac:7e:1b:40:db:ba:a9:a1:fe:a8:65:63:7a:64:
33:49:f8:05:9e:60:d4:2d:31:32:ea:fa:ac:6f:0c:0b:c6:1f:
ea:f6:7a:dd:e7:cd:e5:d4:83:ae:31:86:1c:4c:39:87:ad:21:
6e:6f:50:61:7a:81:b7:bb:3a:cd:89:4c:22:44:60:4a:ce:52:
05:d4:04:35:a4:e2:13:b9:9a:45:02:8f:36:db:de:bd:85:e6:
9a:79:b9:6d:f2:91:3b:1a:68:d7:db:58:b1:c9:40:08:36:d1:
b3:3d:d9:20:47:46:0b:1e:41:98:18:b0:bb:78:e5:9d:23:9d:
2c:f4:1a:0c:f1:a7:83:a8:5f:3d:95:cf:fa:28:e4:77:6a:81:
3a:fa:a1:da:aa:6c:9a:6c:24:6a:b0:9c:49:10:39:37:b4:c7:
4d:63:f8:6b:2c:10:68:f5:07:d9:a9:99:7e:6d:25:d2:67:42:
e7:45:61:3d:9d:6f:43:c5:4f:c2:a5:ca:be:e3:92:0f:bf:a0:
61:9f:4c:59:ef:af:37:1c:8e:61:74:3f:e1:50:df:5a:8f:01:
23:9c:72:63:c6:fe:44:90:c2:12:b2:de:04:07:d3:39:c1:5c:
43:a8:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:18:21 2026 by rpki-client