Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197715.roa
File: AS197715.roa (raw, json)
Hash identifier: LDoFCLMNocbu8XjbVYOCmz1BVZfdzsV1pP0WuvRClbo=
Subject key identifier: 56:8F:7F:02:D8:5A:4E:FC:28:D9:4D:DB:24:70:00:56:DD:A1:3B:D3
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 75FDCC231532168CF5BC57A4F5142AB3E856FFF1
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197715.roa
Signing time: Wed 03 Jun 2026 10:12:43 +0000
ROA not before: Wed 03 Jun 2026 10:07:43 +0000
ROA not after: Wed 02 Jun 2027 10:12:43 +0000
asID: 197715
IP address blocks: 2a0f:9400:610d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:fd:cc:23:15:32:16:8c:f5:bc:57:a4:f5:14:2a:b3:e8:56:ff:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 3 10:07:43 2026 GMT
Not After : Jun 2 10:12:43 2027 GMT
Subject: CN=568F7F02D85A4EFC28D94DDB24700056DDA13BD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:cb:fd:40:99:f0:39:ee:3b:eb:a2:75:8c:
59:0d:cc:37:4d:aa:72:cd:17:6a:d0:f3:70:b0:0f:
99:33:05:bb:dc:95:b8:c4:3e:fc:3c:14:4f:93:39:
de:64:f4:e7:75:40:f1:fd:32:d3:66:a1:e2:56:4b:
dc:54:b4:5b:04:26:7c:6e:54:20:4d:85:a3:32:99:
df:0b:2f:4d:73:a5:5e:34:d4:03:d9:f0:ba:79:60:
bb:1e:ae:11:5f:65:18:a9:ec:ab:64:07:eb:12:95:
8a:ba:0e:6a:03:ae:ab:61:fd:4b:29:ed:97:99:f3:
67:0e:90:0a:63:f7:d3:7c:34:53:d4:5d:4a:0d:a3:
b1:4f:95:64:85:04:ac:5e:f6:54:2f:b6:ea:0b:c9:
10:03:22:ef:f1:ea:42:87:2a:84:8f:18:03:c9:21:
17:eb:32:9e:92:84:8f:58:a7:8c:e6:48:51:f0:80:
9e:4b:0b:b8:ca:2f:2e:99:4c:92:fd:58:1c:17:22:
32:65:47:9a:7e:58:fc:6a:16:2e:86:1d:a9:65:de:
3c:de:fa:72:f8:a1:43:3a:5f:8c:a5:87:52:6a:bb:
6a:98:3e:04:c3:16:b6:c0:24:d6:7e:ff:ce:a2:b0:
ac:a3:04:c7:59:a1:94:e5:fe:52:f5:6c:76:2e:dc:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8F:7F:02:D8:5A:4E:FC:28:D9:4D:DB:24:70:00:56:DD:A1:3B:D3
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610d::/48
Signature Algorithm: sha256WithRSAEncryption
bb:b2:44:d9:fd:d6:bc:41:d2:0e:35:3e:95:2c:9a:59:f2:70:
b6:1c:ea:b0:4e:49:4b:f4:8e:37:cc:fa:91:a0:01:9e:51:98:
8d:f8:85:87:75:15:5a:f2:87:5c:2f:8b:c3:46:46:a8:67:d4:
59:96:be:a1:f0:58:65:e7:fd:e8:0e:2f:cf:05:e8:47:50:7b:
12:7e:9f:4d:2c:fa:98:d9:73:27:9c:98:02:49:ac:6e:84:12:
17:50:90:83:d5:dd:7d:e5:fc:fe:15:f1:20:38:de:36:35:f5:
4c:37:e6:5e:26:f6:3a:f2:24:4c:b9:5d:ed:3f:31:4f:87:59:
43:ad:ae:25:13:b7:7e:0e:65:41:44:2f:c7:b8:77:0b:db:e9:
60:9c:60:15:b2:a2:57:48:6e:d1:98:8f:5b:10:07:8a:9b:0d:
42:9e:0a:f4:ad:de:86:fe:10:b4:26:87:0e:7b:3f:c7:e7:93:
29:bf:4d:40:2a:7c:ea:e8:65:f0:c9:7f:90:ac:b9:6b:aa:53:
87:47:7f:29:39:d9:4e:17:2b:39:c2:94:5c:c4:c8:d8:ce:d9:
a1:8c:40:c6:f9:b9:6f:4c:fa:c8:10:3f:bc:47:67:ed:f8:20:
ce:0f:96:3d:6d:78:a9:17:f4:23:69:14:dd:f1:c3:b4:83:07:
16:9d:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:04:48 2026 by rpki-client