Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200241.roa
File: AS200241.roa (raw, json)
Hash identifier: mZgWFm/v6a3myGmeBT3zFHz+kxkKc0TK3a7mv7Hmxxw=
Subject key identifier: 7E:EB:5B:96:0C:36:DE:1A:B7:08:52:98:2E:C2:21:CF:1D:B8:CF:6A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 498FA402D89CD437F75D040B8E4D7D6245F7C1D5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200241.roa
Signing time: Thu 20 Aug 2026 09:31:02 +0000
ROA not before: Thu 20 Aug 2026 09:26:02 +0000
ROA not after: Thu 19 Aug 2027 09:31:02 +0000
asID: 200241
IP address blocks: 2a0f:9400:6550::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8f:a4:02:d8:9c:d4:37:f7:5d:04:0b:8e:4d:7d:62:45:f7:c1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 20 09:26:02 2026 GMT
Not After : Aug 19 09:31:02 2027 GMT
Subject: CN=7EEB5B960C36DE1AB70852982EC221CF1DB8CF6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:15:f0:0c:15:80:ed:52:6b:a0:97:46:8c:31:
da:f4:d6:de:70:e0:5c:35:41:fc:cd:c6:59:9a:56:
c4:c1:b4:dd:68:b3:02:fc:2b:d6:15:c9:0c:c3:9c:
6b:44:cb:a3:29:92:6b:97:a4:08:e7:71:43:08:05:
f7:96:01:98:4a:15:85:ea:96:be:1a:e3:df:ad:55:
f0:0e:7b:3f:ae:27:ab:6f:99:23:43:1e:55:2f:02:
54:2d:0f:be:da:29:9d:81:d4:e4:a3:2e:7c:54:a2:
ba:47:ac:13:96:05:f7:29:3d:73:2d:15:24:1e:30:
92:72:78:a9:99:de:29:f7:d4:c4:cc:ab:11:f1:e5:
96:a2:68:89:f0:ba:c9:ae:cf:83:26:4d:92:7b:3e:
79:40:28:8c:1b:f7:5c:69:ea:4f:01:2d:e3:10:b6:
56:d5:61:1a:14:b9:48:20:13:db:00:00:89:12:50:
eb:aa:18:f5:ad:e7:c3:61:b9:b4:db:1c:01:b9:54:
0f:88:8e:37:39:a9:4d:64:0f:cf:71:8c:d3:aa:0c:
df:35:7f:71:57:c1:f0:c0:39:ce:c5:c3:3e:6e:21:
ae:9d:c6:44:e7:98:41:eb:ce:4f:76:9b:69:6e:3f:
7e:df:d3:fc:a1:1b:85:85:9a:1c:c3:2e:98:3d:c4:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EB:5B:96:0C:36:DE:1A:B7:08:52:98:2E:C2:21:CF:1D:B8:CF:6A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200241.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6550::/44
Signature Algorithm: sha256WithRSAEncryption
9b:e9:b5:57:91:af:8c:f3:79:4a:13:c6:61:57:99:06:7d:d1:
72:23:82:f5:87:07:1c:aa:0e:08:23:3c:46:dc:b3:cc:ac:b1:
46:06:66:b2:4c:29:0c:ba:75:c9:8a:ee:93:78:ed:4c:0b:35:
80:5a:00:e2:0e:3a:73:4a:b0:15:ed:14:41:e6:2f:d2:1f:a6:
01:5b:25:15:48:2d:3a:29:58:4f:c2:7a:11:49:ad:c7:02:ab:
6a:b2:da:52:08:03:90:77:54:ee:90:0d:4b:18:7e:5d:f4:7c:
e0:9b:3c:0f:8f:5b:32:05:a6:1b:60:84:1c:2e:74:02:72:72:
ec:94:5c:0f:55:42:fd:b5:43:81:4b:9b:cf:05:23:37:f3:54:
c5:5d:74:a3:65:5d:cb:01:3f:16:33:01:1f:4d:e8:fd:9e:23:
03:9b:e1:21:aa:49:d8:7c:f4:05:30:9c:34:d2:7c:65:35:16:
87:02:9f:99:01:9e:88:4b:28:13:20:93:f5:79:16:1e:bc:23:
66:91:7e:40:4e:d6:0e:e5:21:72:ef:23:3b:96:6e:f4:64:e0:
85:d8:e8:5c:25:82:06:3d:47:e9:10:05:ba:88:e6:82:44:8d:
3d:23:3c:06:32:e9:bb:ee:15:9d:d4:ad:66:ac:c3:72:de:2b:
a9:28:60:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:11:10 2026 by rpki-client