Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209242.roa
File: AS209242.roa (raw, json)
Hash identifier: hOzao4lQ6DLnEoq+6h4D/g1druQMFGGzOFRAtiYoXDI=
Subject key identifier: 96:8E:2B:D1:C0:B2:DC:33:C6:2A:36:1F:5D:C6:38:33:75:78:CB:FB
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 18F422C2A9716C29323C6FFE5E19770F62CE4FED
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209242.roa
Signing time: Mon 22 Sep 2025 03:59:57 +0000
ROA not before: Mon 22 Sep 2025 03:54:57 +0000
ROA not after: Mon 21 Sep 2026 03:59:57 +0000
asID: 209242
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f4:22:c2:a9:71:6c:29:32:3c:6f:fe:5e:19:77:0f:62:ce:4f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 22 03:54:57 2025 GMT
Not After : Sep 21 03:59:57 2026 GMT
Subject: CN=968E2BD1C0B2DC33C62A361F5DC638337578CBFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:32:4d:b0:c4:e0:bb:82:f9:b7:da:51:30:
42:74:9b:2a:e3:c3:97:76:ec:07:b3:12:4a:d0:57:
eb:71:41:36:20:12:fb:e4:97:28:19:08:d2:6d:36:
8c:4d:16:e1:be:ac:be:76:db:97:1a:7c:10:db:ee:
6b:eb:7d:2f:15:00:66:df:2b:ae:ea:7d:6b:fb:73:
03:9c:1e:53:cb:e1:bb:e0:a5:cd:e7:c1:fa:4d:61:
be:fa:66:3f:ae:c3:4b:d9:4a:55:76:1b:23:46:5a:
27:ac:fe:a2:f9:ad:77:88:36:88:14:24:86:fa:31:
4c:07:6f:89:dd:ed:89:76:9f:b2:6d:61:3e:71:52:
5e:a8:14:4a:7b:bf:bb:e4:13:5e:a5:f0:84:ad:af:
3a:20:f1:11:e0:25:6f:62:45:72:6e:29:37:b9:0e:
0f:c8:36:33:f4:bb:de:cc:c5:73:99:90:4b:90:7b:
71:9d:4b:3b:ea:01:79:e3:01:4e:15:85:6b:9e:40:
02:50:53:8a:7f:a2:37:37:06:b2:36:8d:24:81:ae:
b5:ba:b7:20:9c:b4:31:c4:0f:d9:2a:f8:9c:57:bc:
f1:20:3f:5c:ce:f0:b9:a9:86:48:7c:1a:8b:92:48:
c5:ae:b8:7a:60:8d:e1:46:d5:b7:25:9a:9d:09:82:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8E:2B:D1:C0:B2:DC:33:C6:2A:36:1F:5D:C6:38:33:75:78:CB:FB
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
57:75:d7:07:1a:71:32:ea:c3:7c:aa:de:c1:d2:53:6b:28:75:
94:84:71:c2:78:57:9f:f9:3f:a8:a0:96:ca:19:40:1b:e4:d9:
34:4f:75:3d:b2:d2:3f:a9:f7:cb:57:a2:67:c8:ad:a2:5b:5c:
4f:1b:d5:51:0c:c6:e2:8e:a0:47:7a:84:4c:6a:ee:8c:fa:7c:
0c:a6:f6:e1:60:c7:d5:d2:b0:23:86:10:26:73:15:e3:f2:35:
b7:d8:d4:bd:cd:73:15:fe:65:7f:14:13:5d:23:85:84:6a:9a:
27:89:7f:3b:03:e9:c6:4e:a1:8e:c9:f9:e6:fa:c8:b0:3b:0f:
ec:03:38:9e:02:02:c3:40:de:f2:65:b1:25:a0:95:58:7f:1b:
44:b9:17:68:5b:ca:6d:aa:f9:e0:6a:05:3c:ae:67:15:3e:bd:
77:ed:23:6b:ad:0d:37:20:99:7e:9b:b3:69:87:5d:61:29:05:
06:bf:8f:af:ea:3f:8e:f6:17:c6:64:d1:28:70:f8:e1:9a:36:
6a:14:35:4c:99:4e:53:ce:e1:e8:d1:55:9b:e5:02:4c:cf:49:
4c:51:b8:8e:5e:c3:5d:ed:39:f5:7f:90:08:14:2c:e9:35:52:
2b:45:c0:6b:db:0d:78:e3:e6:f9:a9:81:2b:21:2a:de:0d:16:
1f:2d:68:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:19 2025 by rpki-client