Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198025.roa
File: AS198025.roa (raw, json)
Hash identifier: jdif/WCvRqxJ+e01ZvORZ3EUAMIdwbk5gLyFWlMFtiY=
Subject key identifier: 62:13:45:BE:DF:16:9B:31:EE:CE:AB:C9:97:6C:FA:AB:02:4A:4B:BD
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 252C387C81C4ED35FE8B8B808374D5C3F79732B5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198025.roa
Signing time: Wed 15 Jul 2026 12:29:38 +0000
ROA not before: Wed 15 Jul 2026 12:24:38 +0000
ROA not after: Wed 14 Jul 2027 12:29:38 +0000
asID: 198025
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:2c:38:7c:81:c4:ed:35:fe:8b:8b:80:83:74:d5:c3:f7:97:32:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 15 12:24:38 2026 GMT
Not After : Jul 14 12:29:38 2027 GMT
Subject: CN=621345BEDF169B31EECEABC9976CFAAB024A4BBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:47:57:fa:de:6c:b1:96:fc:a2:57:7e:cf:
26:16:32:6f:e5:c9:52:dc:6e:64:5c:e7:de:52:11:
5f:17:f4:3e:da:8b:08:cf:69:69:55:9c:f7:72:e0:
53:a9:b8:1d:13:31:16:05:cf:70:9a:eb:c2:dc:a2:
09:26:86:cf:a7:1b:6c:b9:90:8e:a4:ba:3c:e1:ce:
69:52:d8:ee:40:78:ac:2b:99:69:5c:b4:1f:f0:da:
5c:91:c3:f9:a5:22:e3:ca:4c:84:b2:25:ab:6d:ce:
af:2d:72:cf:7e:cd:e8:c0:ce:d0:49:6d:52:17:e1:
fd:3b:90:31:d7:d8:25:a4:2e:5d:4f:db:a5:72:73:
a7:76:60:1e:55:d3:e4:5b:8c:f7:b9:1f:5d:4d:7e:
eb:f3:0a:db:aa:a7:71:de:bf:8b:3b:eb:7a:9a:5c:
2e:20:b2:f8:5d:fa:e5:76:da:88:00:61:db:df:12:
0d:2d:f8:21:f5:9b:9e:52:73:bd:d5:50:7a:8e:bd:
73:23:31:dd:f6:2a:8b:a2:57:a1:ba:75:fc:8b:fa:
4d:a0:b2:5f:9d:42:35:85:8f:df:e2:fd:28:0f:da:
a2:8c:2a:36:c0:5c:71:a9:46:13:f3:2b:28:85:b6:
18:ca:16:ce:d8:32:68:9c:d6:e1:a5:b4:64:b3:fd:
7f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:13:45:BE:DF:16:9B:31:EE:CE:AB:C9:97:6C:FA:AB:02:4A:4B:BD
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
a5:dd:51:fe:9d:ec:3d:ed:76:af:9d:ce:8c:5b:fc:32:95:fd:
85:be:4a:19:05:93:80:ca:43:af:73:eb:7e:72:b6:bb:51:21:
42:45:9b:bb:49:ed:8a:d0:ac:0d:8b:ca:78:f7:7e:39:76:e2:
40:69:4b:a5:db:0a:12:22:d3:1b:b5:8a:1f:72:1a:d4:8a:0e:
b8:a6:37:13:43:7b:00:61:a3:68:b4:8b:4a:06:e8:4b:b6:5c:
7a:f9:d1:01:63:11:52:b1:02:13:c7:41:65:59:bc:63:ff:d7:
be:8e:35:d6:c2:b5:ff:6a:7c:4f:c9:d5:6d:24:a7:68:d4:5d:
8c:4c:dd:0f:d6:a7:62:35:53:00:fc:ef:0f:86:e7:81:48:2e:
c3:dd:26:6e:b2:5d:cc:60:ce:21:e0:da:92:27:a3:fb:68:bc:
41:c4:c9:28:52:3a:de:e7:e9:7b:b2:11:5e:6d:7f:a8:9c:f2:
02:2f:76:76:ce:7a:72:9f:a5:73:73:2e:9d:67:2d:d1:b2:bb:
68:d8:1d:72:0e:0d:fc:f3:e0:2e:18:a2:f6:32:68:07:d7:c6:
f4:58:b2:03:76:95:d7:29:bb:a9:bc:37:d1:c6:56:b4:8b:9a:
d3:f8:9d:51:51:14:56:09:2e:08:a8:98:81:08:17:00:49:d2:
a0:51:37:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:03:14 2026 by rpki-client