Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208754.roa
File: AS208754.roa (raw, json)
Hash identifier: fdeRiXqe9JM6+d7/sqldUF+33Rn2XRGoWJ1hNcceW4Y=
Subject key identifier: C6:28:BB:C2:37:C6:5D:73:8F:A3:AE:76:1E:C1:17:9A:40:35:BE:0B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4CABFD5EBC4E300AE3C8781CB404A4D0B33F40ED
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208754.roa
Signing time: Thu 14 Aug 2025 16:41:30 +0000
ROA not before: Thu 14 Aug 2025 16:36:30 +0000
ROA not after: Thu 13 Aug 2026 16:41:30 +0000
asID: 208754
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ab:fd:5e:bc:4e:30:0a:e3:c8:78:1c:b4:04:a4:d0:b3:3f:40:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 14 16:36:30 2025 GMT
Not After : Aug 13 16:41:30 2026 GMT
Subject: CN=C628BBC237C65D738FA3AE761EC1179A4035BE0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:a5:36:56:02:fe:cd:cc:41:27:c3:b3:88:
1b:16:82:df:a0:87:f1:34:24:8b:7e:ce:ab:ac:93:
97:69:e9:65:09:38:a5:6e:bd:1c:89:6a:d7:db:a0:
fa:5e:15:8f:67:b8:40:7b:fe:3a:f5:fe:cd:4b:3c:
ff:e4:61:f1:05:2d:b1:19:41:5f:ff:a8:75:8f:ac:
80:86:74:13:a8:d2:1e:58:ce:86:30:1e:dc:72:45:
62:9a:e5:9d:18:ed:47:2e:ed:bc:a8:9c:49:74:ca:
47:69:89:d5:17:8d:04:38:2a:c4:87:7a:8b:35:a1:
6c:7e:58:46:cf:1c:e9:aa:23:51:dd:2a:29:c2:b0:
4a:08:d2:8d:aa:63:2a:3a:62:0b:12:87:93:e1:54:
f7:80:c8:b0:68:a8:07:41:91:00:9f:26:bf:ba:af:
49:d1:75:61:e7:0a:9b:f8:b8:39:bd:a8:81:77:2a:
6c:e5:27:db:0c:84:e4:23:a5:3f:76:db:8d:1a:5b:
b3:d6:7c:51:5d:14:14:b5:9e:7b:3e:c5:f3:46:d9:
1e:d2:47:7c:cd:d2:ef:b4:fa:26:2a:59:ba:93:41:
e8:92:ab:e6:d5:ad:e3:81:85:d7:0d:c3:a5:e1:d6:
c2:ed:b4:9e:a3:5d:a3:35:28:3a:3a:83:72:8c:cf:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:28:BB:C2:37:C6:5D:73:8F:A3:AE:76:1E:C1:17:9A:40:35:BE:0B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208754.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
1b:71:c1:33:19:9b:55:09:9f:9e:c0:d9:25:b9:9e:51:b4:8d:
54:7a:20:6b:f8:12:d5:4f:9b:8e:d5:34:fd:3f:40:cb:8a:05:
a3:8a:e9:23:1f:68:2c:db:de:ac:5c:6e:05:f6:22:ff:d6:04:
d2:e5:01:67:71:e4:12:64:86:6b:60:85:d4:b9:86:fd:36:4f:
29:cb:8b:a9:4d:35:c7:c1:85:f9:e6:66:00:17:03:d3:99:c0:
9b:a1:6c:fb:cb:1b:4c:ee:f9:40:3d:9a:fe:d8:15:86:a2:29:
a0:d4:bd:64:45:0b:61:68:09:af:05:d1:a6:06:a6:37:33:35:
89:a5:1e:bd:ab:eb:63:15:7f:40:3e:27:55:14:bb:43:85:b3:
16:b3:bb:eb:97:19:9b:21:ba:e9:63:83:0a:cf:84:d6:a9:06:
9f:ec:40:2f:cd:24:d9:62:8b:3f:e9:5f:ae:44:80:bb:6a:bc:
f1:d8:a5:ab:14:e9:1c:d8:84:36:c3:e8:ce:7f:42:c4:1a:45:
ac:e7:16:17:1d:06:27:63:3c:92:46:81:7a:bd:73:10:01:68:
6c:23:fd:27:0a:d7:4f:87:e4:4f:85:00:86:1c:9f:38:26:3e:
62:45:58:fe:de:ad:82:6c:b8:b5:66:54:1e:67:38:da:3b:ca:
fa:e1:7f:4c
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUTKv9XrxOMArjyHgctASk0LM/QO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA4MTQxNjM2MzBaFw0yNjA4MTMxNjQxMzBaMDMxMTAvBgNV
BAMTKEM2MjhCQkMyMzdDNjVENzM4RkEzQUU3NjFFQzExNzlBNDAzNUJFMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRqU2VgL+zcxBJ8OziBsWgt+g
h/E0JIt+zqusk5dp6WUJOKVuvRyJatfboPpeFY9nuEB7/jr1/s1LPP/kYfEFLbEZ
QV//qHWPrICGdBOo0h5YzoYwHtxyRWKa5Z0Y7Ucu7byonEl0ykdpidUXjQQ4KsSH
eos1oWx+WEbPHOmqI1HdKinCsEoI0o2qYyo6YgsSh5PhVPeAyLBoqAdBkQCfJr+6
r0nRdWHnCpv4uDm9qIF3KmzlJ9sMhOQjpT92240aW7PWfFFdFBS1nns+xfNG2R7S
R3zN0u+0+iYqWbqTQeiSq+bVreOBhdcNw6Xh1sLttJ6jXaM1KDo6g3KMz4PTAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUxii7wjfGXXOPo652HsEXmkA1vgswHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwODc1NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC
AQEAG3HBMxmbVQmfnsDZJbmeUbSNVHoga/gS1U+bjtU0/T9Ay4oFo4rpIx9oLNve
rFxuBfYi/9YE0uUBZ3HkEmSGa2CF1LmG/TZPKcuLqU01x8GF+eZmABcD05nAm6Fs
+8sbTO75QD2a/tgVhqIpoNS9ZEULYWgJrwXRpgamNzM1iaUevavrYxV/QD4nVRS7
Q4WzFrO765cZmyG66WODCs+E1qkGn+xAL80k2WKLP+lfrkSAu2q88dilqxTpHNiE
NsPozn9CxBpFrOcWFx0GJ2M8kkaBer1zEAFobCP9JwrXT4fkT4UAhhyfOCY+YkVY
/t6tgmy4tWZUHmc42jvK+uF/TA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:51:06 2025 by rpki-client