Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200809.roa
File: AS200809.roa (raw, json)
Hash identifier: /lSfAJluAoGUT/xzx5AbsICI0O+vikK3/4EbIW2ow3w=
Subject key identifier: D7:70:18:BE:72:EF:35:D7:7F:BD:6B:F6:25:A3:FC:85:01:D5:41:0F
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7C988277C76C34C4F63CBB68029C1201839BB016
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200809.roa
Signing time: Sun 04 Oct 2026 21:31:56 +0000
ROA not before: Sun 04 Oct 2026 21:26:56 +0000
ROA not after: Sun 03 Oct 2027 21:31:56 +0000
asID: 200809
IP address blocks: 2a0f:9400:6903::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:98:82:77:c7:6c:34:c4:f6:3c:bb:68:02:9c:12:01:83:9b:b0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 4 21:26:56 2026 GMT
Not After : Oct 3 21:31:56 2027 GMT
Subject: CN=D77018BE72EF35D77FBD6BF625A3FC8501D5410F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:95:a0:95:df:43:0d:01:b7:de:bf:1e:58:d2:
63:dd:3e:fd:22:aa:7a:06:2b:e1:a7:20:62:5e:dd:
00:ba:ce:cd:a2:25:79:51:a8:64:18:7e:33:eb:37:
7f:7b:a0:f4:91:d4:44:81:fb:c1:20:62:fb:64:93:
07:54:31:f1:d5:60:2b:8c:ff:05:80:4b:07:60:2f:
2d:92:05:09:d9:90:80:b5:de:ef:b9:b6:7b:5b:90:
8e:21:1b:5c:30:cb:27:6f:b2:fc:c7:14:bc:41:cd:
32:eb:87:76:55:b8:9a:c4:2e:ae:45:53:f9:9e:9e:
a4:36:15:a3:f6:7c:4f:af:82:73:bf:b5:00:5e:ec:
de:14:19:d2:9c:d2:ae:bd:41:f2:b3:c9:57:c4:71:
24:6d:be:4a:5a:36:29:35:99:bc:ae:47:c1:1f:c7:
96:5e:bf:63:b4:29:2f:37:4c:05:40:6a:80:32:cd:
2f:e0:4d:73:17:a5:fd:ba:3e:60:fa:62:d7:7e:e6:
b7:ce:74:a6:64:f6:bc:b6:69:44:87:b8:61:75:77:
64:71:0b:f6:52:62:fc:8d:55:50:d1:c3:85:24:fd:
c7:81:8c:6a:49:5e:73:65:98:f2:c3:97:94:ce:05:
33:76:9a:a3:a1:f3:51:28:95:b1:65:09:09:fe:e8:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:70:18:BE:72:EF:35:D7:7F:BD:6B:F6:25:A3:FC:85:01:D5:41:0F
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6903::/48
Signature Algorithm: sha256WithRSAEncryption
30:7b:87:43:7d:82:01:49:08:ea:f3:06:df:3f:0e:fe:92:c5:
d4:e7:08:0a:e3:f0:c3:00:17:d9:de:87:49:f3:83:8b:70:6f:
05:30:7b:eb:38:f4:fa:2f:5c:5e:60:c9:ea:a2:1d:26:75:51:
96:ee:af:f9:f8:7c:8b:f4:06:fd:27:65:14:d7:43:ba:68:59:
1d:ee:a8:fe:81:ea:04:d5:89:d4:ce:b1:15:c0:15:d7:07:37:
df:18:10:b4:bc:95:7c:0f:2d:39:47:d9:31:6d:7d:fc:ef:81:
be:27:47:44:ed:12:a9:b4:b4:2f:b5:ee:a7:30:18:e3:77:8a:
96:5a:9a:e7:4e:32:98:2a:6d:d0:dd:61:b3:88:d4:9d:4a:99:
6f:b6:94:83:b3:f8:b7:de:f6:4c:93:f1:b2:e8:2f:12:c7:cf:
53:47:12:df:37:7d:2a:05:d4:f0:81:d8:9f:ea:4e:a2:9c:ad:
ee:cf:e4:c2:5e:d6:f4:80:44:3c:64:47:2d:1f:01:8e:b4:e2:
e2:88:e9:41:98:8f:08:5b:52:ff:46:03:b6:e7:77:7c:47:54:
5e:bc:9e:e8:bd:95:a4:b3:75:bc:aa:71:0b:f4:6b:9e:3c:ab:
b5:1f:f0:00:3f:19:00:fc:3a:c6:75:fd:ac:1a:d2:2f:17:fb:
5c:01:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:09:24 2026 by rpki-client