Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202939.roa
File: AS202939.roa (raw, json)
Hash identifier: wnLai+pE+jFxcbtLRTcU1ZhJ5C/IA+ZIFCqCcU7aTVs=
Subject key identifier: D8:4E:C3:FA:1B:E7:D3:D0:FA:2C:ED:BB:AC:62:11:CC:0E:F2:AC:20
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 239E8C1AEE05D35CD7373A3C3F17E9AFF03F633A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202939.roa
Signing time: Fri 17 Jul 2026 07:29:48 +0000
ROA not before: Fri 17 Jul 2026 07:24:48 +0000
ROA not after: Fri 16 Jul 2027 07:29:48 +0000
asID: 202939
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9e:8c:1a:ee:05:d3:5c:d7:37:3a:3c:3f:17:e9:af:f0:3f:63:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 17 07:24:48 2026 GMT
Not After : Jul 16 07:29:48 2027 GMT
Subject: CN=D84EC3FA1BE7D3D0FA2CEDBBAC6211CC0EF2AC20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:92:e3:b4:e2:ab:42:d0:cb:be:83:b2:7e:
7f:2f:73:77:f2:5c:aa:60:32:03:e5:a6:59:70:f2:
1b:ea:c9:70:ee:ce:a7:38:3a:1b:74:dd:1a:84:61:
85:08:54:c4:b7:a4:73:c0:20:76:5a:85:5a:c1:4a:
3a:81:8e:ba:ad:02:44:72:d5:f9:dd:81:5a:eb:d6:
6d:f3:d9:d3:76:d3:8b:3a:c4:75:8f:54:6d:01:43:
08:75:a0:bc:60:55:a0:9a:67:85:97:23:74:fb:cc:
35:c9:fe:91:5f:c5:f8:d1:68:68:df:de:18:ef:db:
5d:70:e7:b2:69:c5:02:b4:18:eb:78:13:5b:37:c4:
61:86:29:2f:c9:ba:8c:91:9a:8f:fb:c9:40:d0:69:
c5:0e:2e:50:cb:94:67:49:6a:3c:92:72:12:ed:8d:
7b:53:cb:6e:9c:38:90:5d:18:c0:ed:af:2b:40:97:
8b:f4:54:96:8b:17:fa:cd:ee:16:1c:f2:67:7e:5e:
01:34:cc:83:a1:62:73:ef:ca:17:76:10:9f:dd:c8:
df:2b:1e:43:54:88:1f:9a:ea:c6:52:d0:e9:c7:2c:
ef:0a:c4:61:48:08:13:5a:c0:77:fb:a0:83:c5:ab:
c1:cd:31:57:7b:06:d3:c5:6d:2e:16:cc:d1:b0:50:
6b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4E:C3:FA:1B:E7:D3:D0:FA:2C:ED:BB:AC:62:11:CC:0E:F2:AC:20
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
d1:5d:aa:2a:71:1b:04:e1:bd:97:2d:06:90:eb:93:8d:fd:34:
c5:cc:bd:7d:9c:05:14:0c:24:96:ae:ca:47:06:3f:7a:04:9d:
2e:a0:cf:c4:45:c8:49:5b:4a:00:24:7e:eb:50:19:e3:08:42:
9e:a1:48:4d:25:8e:09:5b:f0:cc:36:31:ad:6a:ce:bf:d8:91:
3c:b9:ae:7e:20:9e:67:c5:2b:91:8b:7c:1c:05:3c:b3:4e:59:
f2:a0:95:26:40:97:05:41:f2:d8:93:e8:a8:d9:7d:9d:99:83:
8d:c7:22:72:35:6f:1c:04:1c:13:96:b1:8f:1d:55:25:a7:59:
1a:b0:13:54:83:76:88:2a:cd:8f:d2:4c:47:be:85:1c:fa:01:
38:c0:22:b0:97:d6:6b:8c:80:b3:cb:94:d4:f7:2d:7b:df:c2:
ef:a5:65:a9:cd:fa:cd:94:20:b9:81:d5:f2:7f:21:3d:5a:cd:
63:22:5a:43:1e:63:b8:75:78:b8:1f:b5:79:fe:f0:ed:be:ea:
00:6a:b1:6c:35:71:76:ae:b7:46:55:05:e2:53:82:ca:c6:48:
8b:54:ff:9d:4d:12:24:7e:4e:6e:bf:dc:dd:a4:8d:99:f7:95:
37:2f:97:07:f8:5a:d0:d1:e7:dc:2c:89:f2:41:08:c7:dd:22:
70:a0:0b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:03:11 2026 by rpki-client