Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200936.roa
File: AS200936.roa (raw, json)
Hash identifier: bRDpHLvzrOzx1CUO7gGjgP+DTPPjs0ZbnhJD4nyYqMA=
Subject key identifier: B1:9F:F1:55:66:3E:0A:82:5D:05:F4:76:F8:C8:97:26:B3:06:C4:73
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 10E46A120B810EDDF52D085DAB9E42C241A2E59E
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200936.roa
Signing time: Sun 09 Aug 2026 03:30:39 +0000
ROA not before: Sun 09 Aug 2026 03:25:39 +0000
ROA not after: Sun 08 Aug 2027 03:30:39 +0000
asID: 200936
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e4:6a:12:0b:81:0e:dd:f5:2d:08:5d:ab:9e:42:c2:41:a2:e5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 9 03:25:39 2026 GMT
Not After : Aug 8 03:30:39 2027 GMT
Subject: CN=B19FF155663E0A825D05F476F8C89726B306C473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:3e:01:f2:07:6d:96:eb:1f:32:6a:6b:37:
0c:80:bc:c2:fc:4c:2e:9b:73:45:6b:a7:cc:c2:3c:
98:3d:d1:c8:48:fa:09:05:8d:77:e7:76:0d:67:9c:
0d:23:ba:9a:65:7d:40:09:bb:d6:9b:5f:ab:52:fd:
0c:b7:84:a4:67:4f:78:21:14:b6:b2:e8:6a:93:3f:
3b:2b:20:63:81:31:97:ec:47:22:03:e4:8e:b9:34:
57:62:48:c9:4f:c7:38:fa:36:3e:ec:36:6a:cb:15:
8e:74:4d:06:f8:5c:fb:4d:7a:73:34:dc:ce:f8:dc:
a7:28:97:4a:00:f6:ab:9f:9f:08:e4:bf:14:5f:ca:
e5:51:0a:e3:65:4d:d5:7f:23:49:89:93:cd:9f:8a:
07:15:e6:4c:e0:45:ea:8f:a2:8c:c6:e8:0c:d5:16:
5b:c4:dc:5e:90:5e:41:59:1e:df:67:28:22:84:91:
43:4b:56:03:a0:e5:52:26:a5:13:d8:19:1f:73:5f:
14:a5:64:fb:6a:94:f0:db:4d:ee:1e:e7:c3:18:9d:
15:74:2c:d6:3a:02:de:9f:58:df:eb:84:19:e1:0e:
d7:e4:97:de:70:4b:67:86:14:1e:91:bd:95:1e:c4:
e6:cc:ba:56:42:b4:c3:cc:74:27:a9:d8:31:a9:52:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9F:F1:55:66:3E:0A:82:5D:05:F4:76:F8:C8:97:26:B3:06:C4:73
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
4e:38:c1:5c:a0:a6:52:0d:95:ad:9c:ef:76:90:df:7b:1e:29:
94:4d:27:50:2a:3b:0d:e8:93:46:c7:9d:f2:4e:8e:b4:2d:d4:
0a:42:2b:c7:33:2e:42:57:19:01:f4:ef:d1:37:a0:da:a5:b0:
c8:f9:19:51:e8:2f:82:af:82:fe:0a:68:04:59:89:2d:62:14:
d9:e8:25:a3:3f:f9:fa:af:fc:f7:c6:6c:0b:06:54:0c:ad:c8:
83:3d:61:17:79:20:9d:10:89:95:fd:00:3e:68:9c:a9:84:66:
dd:d6:a7:bd:87:12:6f:fd:bb:50:35:a2:72:f2:d4:94:6c:c7:
b1:f4:00:99:07:f1:63:19:ce:0e:14:2d:1a:d8:b9:70:d3:15:
66:4f:91:20:d7:ac:72:bb:d6:42:82:b6:b5:2c:64:bc:a7:24:
a5:bd:2b:dd:0c:ae:de:6b:30:f7:a1:8e:dc:1e:54:94:4b:43:
b6:7d:c7:8b:64:2a:c1:a1:fb:25:93:fd:2b:23:21:99:65:db:
2b:9e:76:38:79:f3:a0:7e:99:5b:f6:d3:61:0b:03:5d:2a:df:
23:8e:0b:db:18:f3:39:92:7b:7f:d9:9f:f6:79:32:92:21:1e:
ef:dc:de:28:2e:3e:6f:bb:bf:72:83:92:de:65:dd:13:93:b8:
ff:a2:bc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:57:12 2026 by rpki-client