Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204044.roa
File: AS204044.roa (raw, json)
Hash identifier: sOEhPFvgszoSWhprZaC/CIcunhDbjryy7+9xvYn0+TA=
Subject key identifier: 68:2E:51:B9:20:5F:EA:51:15:66:C8:E1:2E:E6:3B:14:AD:39:35:92
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1C041189E926A9F6C8B948FCBD9284F0F9FB52E7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204044.roa
Signing time: Tue 30 Jun 2026 06:29:22 +0000
ROA not before: Tue 30 Jun 2026 06:24:22 +0000
ROA not after: Tue 29 Jun 2027 06:29:22 +0000
asID: 204044
IP address blocks: 2a0f:9400:6162::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:04:11:89:e9:26:a9:f6:c8:b9:48:fc:bd:92:84:f0:f9:fb:52:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 30 06:24:22 2026 GMT
Not After : Jun 29 06:29:22 2027 GMT
Subject: CN=682E51B9205FEA511566C8E12EE63B14AD393592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:d5:80:4f:e7:18:0e:84:ea:4b:09:24:97:
79:95:33:72:d0:3b:8c:9e:dc:c7:f3:a6:9d:a2:fe:
93:a5:41:01:70:42:f8:ca:e4:95:d5:fe:d3:e8:1e:
9a:15:dc:60:d2:6f:ff:48:c2:f2:e3:ee:cd:74:d3:
96:87:6a:85:81:33:4b:a7:f9:5d:d0:0c:99:d8:07:
07:dc:72:8b:71:d9:51:6a:ba:89:2b:85:63:1f:38:
c8:b1:d1:40:eb:dd:d0:96:80:b0:21:25:a9:52:8a:
0a:94:75:4c:a9:9d:d1:06:75:0b:88:0b:a1:69:0c:
5e:7b:43:c8:b1:cc:c5:5d:c2:a1:9d:5c:f9:4f:db:
cd:65:93:71:78:d7:8d:f7:75:d0:da:f1:56:da:a2:
80:c9:fa:af:c6:df:c1:e1:10:0f:50:83:6c:44:6d:
57:32:c0:25:58:98:19:18:ac:58:6e:e9:86:0f:af:
8d:11:55:12:db:36:9a:96:73:de:54:ac:d2:d6:fa:
93:36:54:a8:22:8a:9a:d5:90:e3:8d:28:24:51:cb:
c5:b4:c4:14:50:25:ff:6b:19:ae:7e:76:d0:a7:2d:
3a:7d:e5:8e:5f:bc:36:9d:26:5f:ab:90:bb:e2:5a:
7a:f4:31:58:90:2a:d9:04:16:9a:d0:ad:5b:bc:b5:
7e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2E:51:B9:20:5F:EA:51:15:66:C8:E1:2E:E6:3B:14:AD:39:35:92
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204044.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6162::/48
Signature Algorithm: sha256WithRSAEncryption
02:b0:3f:6c:00:44:ad:31:ac:7a:d0:83:17:7b:49:dd:3a:08:
fd:9d:55:33:14:5d:90:27:2d:9a:a0:06:a2:03:b1:91:c4:82:
5d:0b:cb:88:9e:63:04:74:f2:5b:21:84:9c:de:17:1f:48:d6:
98:e8:42:16:99:0d:a6:c8:1d:27:cb:d7:26:c0:f8:89:c1:c7:
88:33:75:e6:62:e2:db:cc:9c:c2:37:be:43:86:f5:c7:58:36:
7c:ca:7c:78:5e:58:a6:80:95:df:c4:84:5a:3c:02:b8:c9:78:
4d:5b:ac:30:6b:a4:e2:49:2f:fa:db:94:c6:1e:dd:22:93:7b:
8a:6b:1e:91:45:a7:2b:c7:0d:e1:5b:5d:61:93:48:92:37:25:
fc:16:25:4f:4e:2d:cc:12:fa:c9:2e:b5:5d:37:07:4e:4f:e8:
69:4d:47:cf:d7:3f:69:ff:2c:c6:7f:db:15:ae:ad:5a:cb:c7:
ed:4b:6b:e7:35:18:f8:0f:5c:6a:6c:bb:90:7d:6c:37:b1:e7:
42:dd:74:67:f0:0c:6c:d2:32:32:b8:7c:6c:93:3f:b6:6a:77:
7a:1c:a7:88:42:19:56:b8:63:e9:b0:65:a3:18:55:d6:62:a2:
30:84:d6:a1:60:5a:31:7f:9e:63:36:76:b4:af:cd:8b:9b:f3:
bc:ed:af:8d
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUHAQRiekmqfbIuUj8vZKE8Pn7UucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjA2MzAwNjI0MjJaFw0yNzA2MjkwNjI5MjJaMDMxMTAvBgNV
BAMTKDY4MkU1MUI5MjA1RkVBNTExNTY2QzhFMTJFRTYzQjE0QUQzOTM1OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5itWAT+cYDoTqSwkkl3mVM3LQ
O4ye3Mfzpp2i/pOlQQFwQvjK5JXV/tPoHpoV3GDSb/9IwvLj7s1005aHaoWBM0un
+V3QDJnYBwfccotx2VFquokrhWMfOMix0UDr3dCWgLAhJalSigqUdUypndEGdQuI
C6FpDF57Q8ixzMVdwqGdXPlP281lk3F41433ddDa8VbaooDJ+q/G38HhEA9Qg2xE
bVcywCVYmBkYrFhu6YYPr40RVRLbNpqWc95UrNLW+pM2VKgiiprVkOONKCRRy8W0
xBRQJf9rGa5+dtCnLTp95Y5fvDadJl+rkLviWnr0MViQKtkEFprQrVu8tX73AgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUaC5RuSBf6lEVZsjhLuY7FK05NZIwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwNDA0NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhYjANBgkqhkiG9w0BAQsFAAOC
AQEAArA/bABErTGsetCDF3tJ3ToI/Z1VMxRdkCctmqAGogOxkcSCXQvLiJ5jBHTy
WyGEnN4XH0jWmOhCFpkNpsgdJ8vXJsD4icHHiDN15mLi28ycwje+Q4b1x1g2fMp8
eF5YpoCV38SEWjwCuMl4TVusMGuk4kkv+tuUxh7dIpN7imsekUWnK8cN4VtdYZNI
kjcl/BYlT04tzBL6yS61XTcHTk/oaU1Hz9c/af8sxn/bFa6tWsvH7Utr5zUY+A9c
amy7kH1sN7HnQt10Z/AMbNIyMrh8bJM/tmp3ehyniEIZVrhj6bBloxhV1mKiMITW
oWBaMX+eYzZ2tK/Ni5vzvO2vjQ==
-----END CERTIFICATE-----
Generated at Fri Jul 3 20:07:08 2026 by rpki-client