Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS8772.roa
File: AS8772.roa (raw, json)
Hash identifier: uOTSklr4Osi2yI8yS0uRKtVx2vJjzbSsFTuZcm3IQRY=
Subject key identifier: 96:80:2C:50:D2:49:57:F6:85:4B:78:26:5D:17:FB:12:A2:1D:20:54
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2CD39EE26C4D598A2A8B32A082E811084CAB7096
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS8772.roa
Signing time: Mon 22 Sep 2025 03:58:35 +0000
ROA not before: Mon 22 Sep 2025 03:53:35 +0000
ROA not after: Mon 21 Sep 2026 03:58:35 +0000
asID: 8772
IP address blocks: 2a0f:9400:6170::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d3:9e:e2:6c:4d:59:8a:2a:8b:32:a0:82:e8:11:08:4c:ab:70:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 22 03:53:35 2025 GMT
Not After : Sep 21 03:58:35 2026 GMT
Subject: CN=96802C50D24957F6854B78265D17FB12A21D2054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b7:f9:e9:6f:9b:9e:e3:23:04:76:ec:a9:5d:
04:35:08:5f:89:fb:82:69:c2:89:3d:df:93:e1:8f:
6d:0e:a3:f7:80:65:97:36:44:39:79:d8:c3:b9:2b:
3c:62:96:b9:82:44:66:c5:0c:03:14:e3:e8:01:6b:
3f:98:ad:64:2a:d3:41:e1:3d:d3:7a:74:db:ae:6b:
1e:b9:ec:d6:de:60:bf:f1:7b:a3:15:22:bc:f4:d1:
06:15:7c:52:d4:fe:d7:69:b3:e1:8a:da:d7:da:9f:
0b:8a:8e:51:99:19:5a:e4:59:74:af:90:d4:27:18:
ae:df:64:f1:b1:74:2b:4b:9a:bc:b1:17:a8:95:62:
c1:5f:da:b5:2e:06:47:d8:ee:36:ab:8f:43:4a:17:
90:4d:2e:61:ed:04:fc:bf:65:7c:37:82:34:84:22:
d7:48:bf:83:a5:d0:68:20:62:1e:84:a6:ac:17:41:
b1:ce:89:8a:98:ac:2c:eb:7c:30:c5:f6:ee:66:6d:
06:e4:76:1f:08:1f:f0:05:66:3a:27:00:81:7c:c5:
c8:fb:d9:4d:39:ad:66:5f:28:fd:a7:45:0c:a7:9a:
27:a7:d8:b0:d9:50:9c:89:45:5e:5f:8a:cc:5c:89:
89:9f:84:66:d9:b9:b3:2e:d8:ec:69:44:b4:d2:51:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:80:2C:50:D2:49:57:F6:85:4B:78:26:5D:17:FB:12:A2:1D:20:54
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS8772.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6170::/44
Signature Algorithm: sha256WithRSAEncryption
84:c3:f9:77:94:35:be:00:ae:b1:f0:ec:f0:e1:7d:db:38:31:
08:a2:f6:cc:d4:56:31:f7:51:85:99:7d:34:11:37:fc:d8:c1:
11:a2:8b:ba:1a:0e:11:de:3b:62:34:d4:51:8b:e1:ab:53:dc:
8e:7b:78:76:91:ec:8d:63:35:73:88:c4:73:31:ea:4e:bf:b3:
90:57:d2:7a:4b:4e:dd:fa:69:c4:89:34:4f:a7:15:56:9a:94:
5f:58:3d:f9:b7:48:9c:67:dd:80:98:c7:64:80:3c:e8:b2:f8:
26:e4:cf:b2:d5:ed:cd:3f:16:b1:d9:e7:d2:12:43:78:76:6b:
d5:7a:67:4d:1e:56:7c:74:a3:dc:13:0f:60:2f:37:72:4b:2a:
8a:a9:65:f9:fe:a4:17:4e:bc:68:e3:2a:8b:8b:cc:5d:6b:ea:
90:a1:ed:8f:02:91:03:4b:0d:1c:a7:90:97:10:5e:7c:58:e5:
a4:a6:05:25:d2:99:6e:ae:c7:47:ad:3d:7b:b0:3d:d5:6a:21:
5f:20:13:7f:5c:3e:d3:13:b3:54:bc:17:82:dd:61:cd:26:3c:
d3:f5:74:c9:d8:cd:be:05:88:e1:28:2e:34:db:b6:50:c4:8b:
bd:f2:1c:ba:0b:32:5d:93:f0:fb:3d:de:29:5d:b0:37:27:28:
41:29:30:6a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIULNOe4mxNWYoqizKggugRCEyrcJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA5MjIwMzUzMzVaFw0yNjA5MjEwMzU4MzVaMDMxMTAvBgNV
BAMTKDk2ODAyQzUwRDI0OTU3RjY4NTRCNzgyNjVEMTdGQjEyQTIxRDIwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgt/npb5ue4yMEduypXQQ1CF+J
+4Jpwok935Phj20Oo/eAZZc2RDl52MO5KzxilrmCRGbFDAMU4+gBaz+YrWQq00Hh
PdN6dNuuax657NbeYL/xe6MVIrz00QYVfFLU/tdps+GK2tfanwuKjlGZGVrkWXSv
kNQnGK7fZPGxdCtLmryxF6iVYsFf2rUuBkfY7jarj0NKF5BNLmHtBPy/ZXw3gjSE
ItdIv4Ol0GggYh6EpqwXQbHOiYqYrCzrfDDF9u5mbQbkdh8IH/AFZjonAIF8xcj7
2U05rWZfKP2nRQynmien2LDZUJyJRV5fisxciYmfhGbZubMu2OxpRLTSUeyDAgMB
AAGjggHHMIIBwzAdBgNVHQ4EFgQUloAsUNJJV/aFS3gmXRf7EqIdIFQwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBaBggrBgEFBQcBCwROMEwwSgYIKwYBBQUHMAuG
PnJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzg3NzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB
BQUHAQcBAf8EEzARMA8EAgACMAkDBwQqD5QAYXAwDQYJKoZIhvcNAQELBQADggEB
AITD+XeUNb4ArrHw7PDhfds4MQii9szUVjH3UYWZfTQRN/zYwRGii7oaDhHeO2I0
1FGL4atT3I57eHaR7I1jNXOIxHMx6k6/s5BX0npLTt36acSJNE+nFVaalF9YPfm3
SJxn3YCYx2SAPOiy+Cbkz7LV7c0/FrHZ59ISQ3h2a9V6Z00eVnx0o9wTD2AvN3JL
KoqpZfn+pBdOvGjjKouLzF1r6pCh7Y8CkQNLDRynkJcQXnxY5aSmBSXSmW6ux0et
PXuwPdVqIV8gE39cPtMTs1S8F4LdYc0mPNP1dMnYzb4FiOEoLjTbtlDEi73yHLoL
Ml2T8Ps93ildsDcnKEEpMGo=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:09:58 2025 by rpki-client