Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204211.roa
File: AS204211.roa (raw, json)
Hash identifier: C8/pcAJ+ayNJ60ZWlL6IfmzrvnWrH/zu0FhGZsq4N8A=
Subject key identifier: 5F:EF:E9:38:F9:D6:74:AB:95:08:04:4C:84:CC:86:BA:3E:FD:30:14
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5CF2652F9F7118C6CC685694CF957764C572C8AD
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204211.roa
Signing time: Fri 09 Oct 2026 09:32:01 +0000
ROA not before: Fri 09 Oct 2026 09:27:01 +0000
ROA not after: Fri 08 Oct 2027 09:32:01 +0000
asID: 204211
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:f2:65:2f:9f:71:18:c6:cc:68:56:94:cf:95:77:64:c5:72:c8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 9 09:27:01 2026 GMT
Not After : Oct 8 09:32:01 2027 GMT
Subject: CN=5FEFE938F9D674AB9508044C84CC86BA3EFD3014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:5c:be:39:22:ea:b2:df:23:74:5c:d2:b7:
e0:90:47:c6:46:5d:a9:33:6f:31:6b:62:fe:89:c4:
32:ee:6c:39:de:5a:5f:c9:a5:fe:d7:b1:82:66:0a:
72:dc:f8:50:d3:b8:d6:92:20:1f:f7:d1:16:86:c0:
e5:1b:c8:ce:2f:3e:f2:54:07:c9:f3:bc:4c:42:e2:
67:b8:d7:54:c4:18:3c:94:20:09:97:b6:8a:ae:81:
05:14:87:fb:46:d1:50:f2:e5:50:5c:e5:0d:97:98:
da:b9:7f:74:4c:12:69:5b:8c:0e:a8:e5:e1:79:d1:
fb:db:f3:de:b8:17:97:0b:ef:72:1c:a4:6b:fd:ec:
6d:30:19:11:45:82:87:78:51:10:82:c7:76:70:b5:
60:63:85:0f:88:be:80:fa:b6:55:11:7d:7c:0d:35:
43:96:92:cf:68:76:87:72:f1:8f:f0:31:1f:f1:55:
ec:b5:bf:e9:61:aa:ea:5b:56:83:17:88:88:9b:c4:
e1:22:d6:11:95:0f:9f:cc:90:ad:67:c3:c5:61:6f:
17:40:4a:86:1e:99:38:ab:7c:41:08:a7:04:5e:a4:
1a:bf:c2:10:a8:82:16:11:88:c5:69:75:57:d3:8a:
d8:c1:56:50:8d:f6:74:76:74:36:85:f1:2f:bb:4a:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EF:E9:38:F9:D6:74:AB:95:08:04:4C:84:CC:86:BA:3E:FD:30:14
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204211.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
b5:db:6a:e5:8c:32:49:0f:b5:aa:ec:ae:fb:fc:12:10:4d:0d:
53:61:57:c1:73:2a:16:eb:a4:a7:d6:db:7a:2e:07:98:9c:37:
c9:c4:06:f2:28:3c:b2:15:2a:ce:f9:e5:98:5f:ea:e2:bb:02:
fd:04:4c:04:a1:87:f6:06:64:8e:3e:17:a0:be:e5:aa:4e:85:
15:6a:c9:89:2e:0f:1a:fa:63:45:7b:e8:75:50:a3:64:0d:e2:
fc:a6:b0:68:d1:a1:ad:dc:b8:f3:83:43:6b:e5:ae:3d:2e:a4:
ba:d4:6e:70:60:38:7b:93:40:bf:cf:b9:91:26:8c:e2:7c:cc:
2a:38:8a:0e:7b:d3:9a:45:65:62:06:8e:3e:84:63:fc:9f:c9:
41:22:b1:9d:3f:0d:d7:b3:5b:ea:82:15:1a:3a:e2:6a:31:ae:
65:5f:98:cb:22:71:68:24:4c:76:64:3a:19:f5:ec:60:54:18:
ba:f2:e5:b2:9b:0a:f5:b6:ec:93:31:45:0d:3d:4d:96:88:20:
b2:0e:f7:49:67:12:d4:ae:f5:27:a2:b6:1c:08:74:88:34:19:
55:8c:f4:79:29:70:74:4a:ec:ca:d1:23:97:de:eb:6f:bd:75:
b1:d3:49:00:2b:62:bf:6e:7d:92:9f:cb:27:40:cf:8b:22:ca:
ad:c1:6d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 07:54:05 2026 by rpki-client