Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204969.roa
File: AS204969.roa (raw, json)
Hash identifier: TkwOEWgr3W8/OpwvQB7gHYtyGi2V7C+1nhE4AIAnoJU=
Subject key identifier: 71:3A:EF:23:27:F9:25:47:58:6D:8E:A1:63:E8:FD:BB:C9:89:77:F4
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1C6A0359BAA3B091D80CBA68BB6006E8E8DAAD66
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204969.roa
Signing time: Fri 31 Jul 2026 18:30:09 +0000
ROA not before: Fri 31 Jul 2026 18:25:09 +0000
ROA not after: Fri 30 Jul 2027 18:30:09 +0000
asID: 204969
IP address blocks: 2a0f:9400:6120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:6a:03:59:ba:a3:b0:91:d8:0c:ba:68:bb:60:06:e8:e8:da:ad:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 31 18:25:09 2026 GMT
Not After : Jul 30 18:30:09 2027 GMT
Subject: CN=713AEF2327F92547586D8EA163E8FDBBC98977F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:74:d4:8f:08:69:38:2b:5a:2e:a5:42:e4:
4c:06:b2:6f:1e:aa:33:70:23:e3:94:40:c0:64:95:
7c:97:d1:54:aa:89:1f:64:c4:e6:44:ec:cd:34:5c:
79:f9:8e:dc:e3:83:ee:41:42:80:ba:b2:c1:c3:b9:
f9:c6:31:87:11:73:74:80:06:ff:df:df:5e:2c:e7:
a2:31:46:69:16:84:3c:e2:f3:ef:0d:d0:93:e1:2e:
47:41:3b:13:b8:6c:4b:c4:0a:a8:92:42:9f:66:6e:
65:1b:ed:02:11:73:48:ec:05:8a:54:a4:a6:c0:20:
87:ac:05:1e:1e:0b:e3:c7:7f:b8:b1:bb:a1:e9:b0:
3e:81:3c:37:3a:a8:15:f3:4d:a0:18:c0:0e:2d:f6:
ef:0f:cf:ab:d3:45:06:de:f9:af:e6:27:7b:91:81:
f6:4d:b3:cb:20:35:4a:2c:39:89:fa:d6:8b:e7:da:
2b:b1:a5:f9:e4:31:5e:a1:69:c3:3a:74:10:4a:ee:
72:6c:a0:4c:9d:bc:df:b2:01:58:c6:f8:84:66:e2:
0d:19:e5:5c:66:e6:72:a4:10:74:64:ae:7a:6c:01:
41:66:22:c8:9b:53:eb:76:15:43:a7:50:16:3f:05:
aa:3b:45:2f:43:67:26:f2:c2:98:30:da:ff:a1:b3:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3A:EF:23:27:F9:25:47:58:6D:8E:A1:63:E8:FD:BB:C9:89:77:F4
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6120::/44
Signature Algorithm: sha256WithRSAEncryption
d8:8f:27:c2:d6:61:59:ff:52:9e:17:40:23:3e:b5:a1:8d:f4:
2e:96:2f:3c:64:f8:e3:8a:ca:97:97:42:7e:b8:73:3b:a8:06:
0b:73:de:dd:62:59:79:6a:00:af:e2:3e:89:c2:ae:99:66:12:
d7:11:8f:1c:c2:6d:d9:42:ab:2c:6e:92:ad:70:9f:2c:f0:85:
88:85:28:bf:d5:f2:05:63:ab:e5:14:df:5f:8d:69:ef:fc:71:
8e:5b:53:8f:03:73:c5:7a:67:0e:15:fa:db:e7:3b:90:19:23:
5a:28:33:9a:8a:13:fe:a4:50:b5:2e:f7:7f:20:b1:7e:c2:d9:
a3:05:c5:20:c8:9e:f7:7f:25:c3:d9:34:fc:77:ed:5d:44:39:
f6:8c:e9:f1:e2:68:78:de:33:7f:23:a6:ca:d0:f4:17:26:88:
0a:65:fb:bb:4c:2c:db:6d:98:ba:b7:66:10:0a:8f:a9:82:04:
3f:c6:3c:bb:0f:d4:e3:47:2a:8c:82:51:4a:20:5c:26:09:c9:
32:b3:72:8a:7d:c8:2a:e7:ff:78:06:43:ad:cd:7c:a6:90:f2:
39:82:7a:06:59:f7:f9:3f:1b:9a:34:c1:1f:b1:1a:bb:14:90:
d8:0a:65:bf:82:75:d1:02:d4:08:3a:de:37:45:d1:bf:66:db:
cc:7a:99:e0
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUHGoDWbqjsJHYDLpou2AG6OjarWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjA3MzExODI1MDlaFw0yNzA3MzAxODMwMDlaMDMxMTAvBgNV
BAMTKDcxM0FFRjIzMjdGOTI1NDc1ODZEOEVBMTYzRThGREJCQzk4OTc3RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYR3TUjwhpOCtaLqVC5EwGsm8e
qjNwI+OUQMBklXyX0VSqiR9kxOZE7M00XHn5jtzjg+5BQoC6ssHDufnGMYcRc3SA
Bv/f314s56IxRmkWhDzi8+8N0JPhLkdBOxO4bEvECqiSQp9mbmUb7QIRc0jsBYpU
pKbAIIesBR4eC+PHf7ixu6HpsD6BPDc6qBXzTaAYwA4t9u8Pz6vTRQbe+a/mJ3uR
gfZNs8sgNUosOYn61ovn2iuxpfnkMV6hacM6dBBK7nJsoEydvN+yAVjG+IRm4g0Z
5Vxm5nKkEHRkrnpsAUFmIsibU+t2FUOnUBY/Bao7RS9DZybywpgw2v+hsyovAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUcTrvIyf5JUdYbY6hY+j9u8mJd/QwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwNDk2OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoPlABhIDANBgkqhkiG9w0BAQsFAAOC
AQEA2I8nwtZhWf9SnhdAIz61oY30LpYvPGT444rKl5dCfrhzO6gGC3Pe3WJZeWoA
r+I+icKumWYS1xGPHMJt2UKrLG6SrXCfLPCFiIUov9XyBWOr5RTfX41p7/xxjltT
jwNzxXpnDhX62+c7kBkjWigzmooT/qRQtS73fyCxfsLZowXFIMie938lw9k0/Hft
XUQ59ozp8eJoeN4zfyOmytD0FyaICmX7u0ws222YurdmEAqPqYIEP8Y8uw/U40cq
jIJRSiBcJgnJMrNyin3IKuf/eAZDrc18ppDyOYJ6Bln3+T8bmjTBH7EauxSQ2Apl
v4J10QLUCDreN0XRv2bbzHqZ4A==
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:11:16 2026 by rpki-client