Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204539.roa
File: AS204539.roa (raw, json)
Hash identifier: tZ9GxTGfkFNpTANJsgbPWvH0TFRUKrBgw9F8ZylLq5Q=
Subject key identifier: D3:BB:62:5E:6B:8C:09:CB:BC:00:76:1A:09:75:96:61:18:93:B6:5B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0C2A405C257B2BAB5B6A4A00C7ED907B1764B3BB
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204539.roa
Signing time: Fri 02 Oct 2026 17:31:54 +0000
ROA not before: Fri 02 Oct 2026 17:26:54 +0000
ROA not after: Fri 01 Oct 2027 17:31:54 +0000
asID: 204539
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:2a:40:5c:25:7b:2b:ab:5b:6a:4a:00:c7:ed:90:7b:17:64:b3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 2 17:26:54 2026 GMT
Not After : Oct 1 17:31:54 2027 GMT
Subject: CN=D3BB625E6B8C09CBBC00761A097596611893B65B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:d7:35:06:07:64:72:3d:d9:5a:7a:84:52:
69:1d:76:b0:42:23:f3:d6:04:a7:21:fa:8e:0a:ce:
1a:cd:10:13:59:9b:56:3a:44:c7:d8:52:e6:e5:b5:
11:63:d6:cd:c6:38:09:01:66:af:f0:e0:10:7d:62:
cf:67:c3:5a:be:d4:24:90:ac:53:a9:4a:85:aa:0d:
d8:c0:9a:ed:5a:9e:b5:41:68:4b:a5:54:8f:3d:b2:
8e:5a:ef:df:ca:cd:f5:d3:53:01:bf:9e:3e:2f:79:
2e:76:de:62:d8:72:75:c1:f6:cb:ea:e2:49:75:4a:
c7:8d:a6:55:33:92:c9:04:e8:f3:20:a2:e7:52:f4:
e8:16:e8:32:c3:74:94:08:26:1b:92:d5:cc:47:0a:
b1:26:d5:fe:b3:04:a2:2f:46:d3:96:34:88:de:ee:
ee:30:cd:e5:1d:44:85:70:6d:21:d0:10:ca:e9:6c:
b5:b4:1f:f5:88:92:96:58:78:12:94:18:9a:27:cb:
fe:44:40:59:e0:2d:1f:21:d2:ed:c0:fc:58:12:07:
c4:71:6a:c4:2b:93:5c:55:cd:bf:07:c0:54:03:49:
d4:5b:87:a3:06:dd:cb:49:6a:c2:28:0a:bc:ba:3e:
b1:7b:f0:86:d8:24:fe:c3:e4:db:ca:f8:7f:a5:30:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BB:62:5E:6B:8C:09:CB:BC:00:76:1A:09:75:96:61:18:93:B6:5B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
18:18:ef:eb:e0:74:62:2b:7d:5c:ef:39:b9:be:57:bd:ac:a7:
06:d9:01:bc:d1:8a:0a:3a:71:1e:f6:e3:28:26:ac:7a:e7:96:
27:60:2f:a9:f1:c8:0f:9e:9f:ed:ee:58:c4:36:9d:9b:e9:ed:
8a:af:7d:94:2e:78:e7:39:57:d0:28:6b:4c:c0:a6:7e:93:88:
46:23:80:22:06:3b:39:e8:3b:0b:0e:dd:f8:08:ef:4c:d9:6b:
c5:1d:3b:96:f9:e0:f2:8b:fb:33:45:95:fe:65:d0:d8:84:23:
3e:c5:e4:9d:cf:9b:4b:f5:a8:1c:32:75:08:fb:85:65:63:8a:
14:f8:a0:6d:10:a6:d2:0d:7b:64:63:44:d8:8b:56:83:5e:ef:
0a:44:0c:07:66:f3:8a:b5:e9:cb:a6:de:e9:9c:70:01:97:64:
ac:64:ce:66:02:6e:e9:d2:63:5b:6f:9c:0f:a6:02:ab:4d:59:
2d:79:7f:e1:61:15:71:c5:27:dd:69:26:40:35:7d:79:9e:96:
2a:17:2d:17:01:c8:69:5a:73:34:8b:ae:a4:03:ed:93:99:f7:
cd:8e:0b:39:d7:8b:82:02:51:4b:03:ff:20:de:e0:04:e9:3c:
b9:07:c0:e6:35:2b:c0:82:2b:3b:8e:f7:be:e8:2c:30:13:24:
51:bf:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:28:35 2026 by rpki-client