Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203283.roa
File: AS203283.roa (raw, json)
Hash identifier: QN89lXXkTak+YzrxAKLEP55jvPdZpDoDxFUIwTPs+40=
Subject key identifier: E6:94:7E:CC:C3:CB:9B:5A:60:18:AA:72:52:BC:3A:2E:11:4C:AE:AA
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 620115EB2A491A895BEDCCE64A408297A19E86B6
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203283.roa
Signing time: Tue 01 Sep 2026 23:31:18 +0000
ROA not before: Tue 01 Sep 2026 23:26:18 +0000
ROA not after: Tue 31 Aug 2027 23:31:18 +0000
asID: 203283
IP address blocks: 2a0f:9400:6518::/45 maxlen: 48
2a0f:9400:6540::/44 maxlen: 48
2a0f:9400:6560::/44 maxlen: 48
2a0f:9400:6570::/45 maxlen: 48
2a0f:9400:6578::/45 maxlen: 48
2a0f:9400:6580::/45 maxlen: 48
2a0f:9400:6588::/45 maxlen: 45
2a0f:9400:65f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:01:15:eb:2a:49:1a:89:5b:ed:cc:e6:4a:40:82:97:a1:9e:86:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 1 23:26:18 2026 GMT
Not After : Aug 31 23:31:18 2027 GMT
Subject: CN=E6947ECCC3CB9B5A6018AA7252BC3A2E114CAEAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:0e:48:64:9f:53:c0:5a:84:a8:51:55:34:
91:62:30:5d:b1:07:6e:74:33:3d:b2:4e:54:43:09:
6a:60:be:35:fb:ac:ba:67:97:c4:aa:4a:cb:6e:6f:
41:5b:a5:78:a7:b0:45:54:e6:93:b2:76:3c:fc:17:
cc:09:62:9f:ac:1f:bc:02:c7:ca:9b:74:cf:3f:ec:
b2:67:a7:5d:15:21:c1:37:d1:4d:7b:75:64:7e:cc:
c9:f6:e7:c2:cc:d8:74:5b:38:ff:fb:81:43:5c:f7:
ce:31:88:d4:6a:d9:18:45:b3:8c:cd:81:b0:73:46:
7d:c7:0e:69:7a:12:28:f6:97:fd:94:a8:36:4c:1f:
7b:2c:6d:27:71:bb:38:0d:0b:6f:63:d4:1d:db:7a:
e7:f1:29:e2:c4:2d:7d:89:7f:7c:13:aa:2a:33:23:
c6:a7:b2:ab:3b:a5:55:6d:36:bd:c9:63:40:5f:11:
01:a3:45:b2:4e:21:ac:bd:51:3e:81:4d:5b:47:e6:
dd:8e:cd:85:03:b5:fc:55:5f:11:bd:1b:43:91:aa:
98:35:8a:87:b4:86:f4:87:27:6e:a3:be:47:58:18:
13:e8:ff:5f:11:ac:ff:0a:28:8c:47:12:33:3a:44:
be:1f:26:1e:98:c4:71:06:d7:7e:69:41:4a:29:f4:
01:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:94:7E:CC:C3:CB:9B:5A:60:18:AA:72:52:BC:3A:2E:11:4C:AE:AA
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203283.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6518::/45
2a0f:9400:6540::/44
2a0f:9400:6560::-2a0f:9400:658f:ffff:ffff:ffff:ffff:ffff
2a0f:9400:65f0::/44
Signature Algorithm: sha256WithRSAEncryption
1d:6b:e1:8d:41:d5:3b:15:c8:bd:d2:54:c4:12:15:74:a7:5f:
ca:bd:da:6c:5f:d0:2c:92:d8:64:ac:9c:33:41:c6:30:dd:8f:
07:0d:e0:73:7f:58:2c:2a:5b:53:cc:cb:dd:1e:23:37:79:bd:
c3:a6:a5:b5:77:36:08:32:9e:53:5b:72:a2:3b:97:c6:13:c5:
0b:f7:d5:2c:ad:c0:f9:10:cd:a6:8f:79:75:84:b9:bc:e1:4e:
ed:44:c0:68:db:0f:c4:f3:14:7a:e3:78:14:3b:33:40:5b:36:
93:b0:f0:ab:0b:db:d0:85:4e:f5:91:95:f2:e2:db:84:f6:70:
b3:6d:73:bb:d2:b6:8e:fa:74:1f:6f:2d:04:c4:c2:b9:13:6b:
4e:ce:4a:b9:22:c1:37:c3:b2:4d:f8:96:34:6b:23:c2:ad:94:
78:85:9c:31:4a:d6:71:1e:27:0a:3c:ab:be:b4:a1:f2:c3:d0:
90:5d:1c:83:21:bd:30:23:46:21:97:a9:53:dd:35:f4:45:65:
ce:c2:e1:77:d9:04:f7:0c:2d:70:cb:88:61:90:e7:7a:68:3a:
27:c7:49:0b:a6:53:1d:82:b0:f7:53:b8:01:93:98:26:43:80:
f1:d7:33:2c:51:87:bb:89:4f:1f:e0:7f:16:8a:4c:3e:62:e2:
87:91:7a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:35:22 2026 by rpki-client