Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197959.roa
File: AS197959.roa (raw, json)
Hash identifier: e8limYotK+rKO18VkJtLonGlA1Z7mU2xJHgl2ZC6fgM=
Subject key identifier: 68:DD:56:68:2A:30:17:7C:8A:FD:EF:9D:70:37:06:42:00:0A:3F:4B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6551E31A6CCB64BC1690E94A91E89820BB52B3D4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197959.roa
Signing time: Wed 10 Jun 2026 23:09:05 +0000
ROA not before: Wed 10 Jun 2026 23:04:05 +0000
ROA not after: Wed 09 Jun 2027 23:09:05 +0000
asID: 197959
IP address blocks: 2a0f:9400:7389::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:51:e3:1a:6c:cb:64:bc:16:90:e9:4a:91:e8:98:20:bb:52:b3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 10 23:04:05 2026 GMT
Not After : Jun 9 23:09:05 2027 GMT
Subject: CN=68DD56682A30177C8AFDEF9D70370642000A3F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:1c:82:f3:5e:44:cd:65:ba:4f:a4:86:69:
65:33:75:75:24:6e:db:39:12:83:25:20:61:11:08:
fe:ec:c4:1c:d0:f1:9e:fa:38:7c:ff:eb:a5:55:e9:
74:53:fc:b7:38:bd:30:3a:74:92:6e:ee:19:78:28:
5f:b8:16:1c:d5:c4:a8:84:ae:c2:3d:0e:a5:7d:b2:
4d:4b:93:42:25:d0:66:22:4e:50:05:99:d0:54:42:
58:55:37:90:20:0b:4f:5b:6a:c9:cc:9e:de:11:54:
75:b3:7f:8b:fc:df:2b:42:71:16:e4:8a:14:ea:10:
7e:37:e6:88:86:ff:45:50:aa:d0:86:72:eb:5d:03:
28:6b:56:6e:98:60:b6:d1:78:e5:95:21:e3:ee:e2:
7b:62:d1:ac:5c:84:0a:c7:fd:36:c4:d7:2d:5d:31:
f8:03:c9:fd:fc:2f:0f:39:c0:9b:d3:b2:f4:9c:a0:
23:f2:90:47:65:83:10:40:c4:63:22:fc:a4:91:d0:
19:bf:41:fe:2f:ab:bd:bb:03:d2:45:21:cb:23:96:
33:97:40:e0:f6:72:5f:c6:62:81:da:2c:09:8b:43:
94:bf:df:19:ed:d9:f6:ab:1c:aa:95:dd:f0:df:7c:
6c:36:18:07:0a:d8:84:7b:9d:f5:f7:44:0c:ed:28:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DD:56:68:2A:30:17:7C:8A:FD:EF:9D:70:37:06:42:00:0A:3F:4B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7389::/48
Signature Algorithm: sha256WithRSAEncryption
b6:e2:80:4f:78:1c:9f:1e:93:f6:1b:91:a6:de:d4:39:8d:ec:
df:ad:32:7f:ba:a3:7a:d7:54:27:bb:0b:ba:0f:70:1c:bf:47:
d1:4a:7d:53:c9:55:24:e4:f8:70:a6:e4:51:ca:64:50:18:be:
21:40:e8:2e:ab:f4:d6:ae:53:e7:2e:3c:97:90:b6:2d:a9:e2:
ed:61:a7:46:eb:3f:85:e6:1d:29:40:77:67:fb:f2:ee:9b:c6:
61:a3:04:70:91:e7:de:84:94:14:a1:3f:e1:72:43:74:a8:97:
87:e6:2c:5d:b5:dc:18:44:c3:12:3d:b8:c2:89:60:93:b6:ca:
19:cc:38:6d:f8:d0:57:5c:54:60:a3:f9:bd:5c:13:0e:be:bd:
ed:60:9f:57:83:31:9f:72:f3:8e:ee:67:31:51:2d:a2:15:0c:
5e:b2:e4:44:50:45:db:ac:54:bf:42:ac:a3:5c:09:35:51:f6:
43:80:d8:8f:23:57:b8:40:ca:4f:a6:30:35:ee:5e:68:cf:d1:
97:81:44:60:b6:76:e4:4d:a5:e0:d7:5b:5f:14:d9:1d:34:c0:
ae:f7:bb:89:f6:1b:d2:21:04:84:89:37:fa:18:d8:f7:76:7e:
05:a3:d6:47:36:68:ce:95:c1:0e:a4:38:72:27:0d:a4:d5:06:
8c:b4:ef:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:44:07 2026 by rpki-client