Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204969.roa
File: AS204969.roa (raw, json)
Hash identifier: XRO7x9cycbiZvQfhKH4HCjBL4L9yZYmb42+r8JJy61k=
Subject key identifier: FE:4A:E9:32:66:F2:47:C2:E9:98:4C:33:F7:50:90:18:36:D8:D3:4A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 34881B5BAA7EDEC0BE6CADEBEE2087609C4DADDA
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204969.roa
Signing time: Fri 29 Aug 2025 17:41:02 +0000
ROA not before: Fri 29 Aug 2025 17:36:02 +0000
ROA not after: Fri 28 Aug 2026 17:41:02 +0000
asID: 204969
IP address blocks: 2a0f:9400:6120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 19:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:88:1b:5b:aa:7e:de:c0:be:6c:ad:eb:ee:20:87:60:9c:4d:ad:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 29 17:36:02 2025 GMT
Not After : Aug 28 17:41:02 2026 GMT
Subject: CN=FE4AE93266F247C2E9984C33F750901836D8D34A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:f5:5b:87:eb:96:a9:b5:fa:15:a5:04:44:
d5:82:f0:89:bc:f0:ca:02:e3:4a:9b:d7:55:dc:e1:
49:8d:b7:83:74:a2:ca:50:8c:9d:4b:ca:f7:3a:5c:
2c:f0:07:10:ea:64:75:a9:13:06:eb:44:33:8e:15:
3a:82:f0:01:3c:f8:80:0f:f1:67:c2:63:f6:85:47:
ff:bb:27:5b:64:4f:94:db:60:89:1d:ec:8c:a2:67:
a4:c5:ad:ed:1d:ab:2a:b8:7a:ab:42:26:37:a3:c3:
40:3e:d2:18:66:1e:4d:a4:13:00:77:8d:5c:21:03:
3e:39:4f:f9:34:46:34:7c:b4:61:e3:3a:8b:5f:44:
2d:a0:e6:6c:39:e9:4f:c9:d9:d9:2f:e2:23:9e:42:
af:14:e9:f5:e8:bd:27:d5:77:bf:eb:d5:b2:92:3a:
53:db:2d:a5:f4:8e:54:3c:94:1e:9d:cb:de:02:b3:
83:4f:03:0f:41:cd:5f:79:76:cd:db:a2:0b:e6:02:
55:54:83:68:94:a1:a5:f2:ed:a1:a3:32:e4:3c:ed:
86:6d:75:1f:f3:09:23:63:cc:13:a6:c7:9c:d5:7d:
e0:7f:89:b5:fb:49:16:85:4b:9b:e1:6c:bd:a5:c8:
20:1f:41:2c:ae:99:ae:09:6e:4a:c9:ad:4d:df:ab:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4A:E9:32:66:F2:47:C2:E9:98:4C:33:F7:50:90:18:36:D8:D3:4A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6120::/44
Signature Algorithm: sha256WithRSAEncryption
64:fe:3c:e9:b1:d3:1e:3f:21:2c:4d:e8:94:64:d1:16:45:0d:
42:97:76:b0:12:95:b5:b2:01:3b:83:dd:40:a8:20:60:87:fe:
70:d5:ad:3d:bc:fd:1e:3a:45:4b:e3:bd:d5:e4:70:23:c1:4a:
7e:9b:66:34:a0:73:7a:30:43:0d:f8:f5:9e:bd:38:d2:bc:cc:
e7:a7:c8:95:a0:c8:31:59:aa:b3:09:26:2e:ae:83:81:77:48:
7b:9e:d5:18:28:68:08:78:ba:23:41:1b:93:0b:02:9d:3e:64:
f9:eb:5a:ff:22:e2:ba:cf:c2:7a:ec:9a:df:ff:14:8e:9e:f5:
c7:d1:73:d7:1a:9a:46:44:9c:f0:bf:26:42:1f:9e:2a:91:36:
a8:3f:43:7f:4f:0e:44:f5:11:ba:94:05:3e:4e:26:74:27:38:
74:62:45:9f:3c:16:5e:10:b5:a2:95:cf:a7:77:e3:6a:4c:82:
fd:cd:dd:12:66:f5:2a:8f:e3:d2:c5:7a:bb:7f:73:71:a4:4b:
b4:ae:3a:b9:20:17:64:d4:ee:85:9b:9b:10:70:b5:f9:a0:be:
ab:df:ab:db:3c:ea:01:6d:ee:76:77:ae:00:d5:4e:18:b5:8b:
43:97:ed:fd:61:4b:8e:82:2c:a8:1c:a3:e8:49:80:6b:48:83:
9d:98:c6:bf
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUNIgbW6p+3sC+bK3r7iCHYJxNrdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA4MjkxNzM2MDJaFw0yNjA4MjgxNzQxMDJaMDMxMTAvBgNV
BAMTKEZFNEFFOTMyNjZGMjQ3QzJFOTk4NEMzM0Y3NTA5MDE4MzZEOEQzNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxn/Vbh+uWqbX6FaUERNWC8Im8
8MoC40qb11Xc4UmNt4N0ospQjJ1Lyvc6XCzwBxDqZHWpEwbrRDOOFTqC8AE8+IAP
8WfCY/aFR/+7J1tkT5TbYIkd7IyiZ6TFre0dqyq4eqtCJjejw0A+0hhmHk2kEwB3
jVwhAz45T/k0RjR8tGHjOotfRC2g5mw56U/J2dkv4iOeQq8U6fXovSfVd7/r1bKS
OlPbLaX0jlQ8lB6dy94Cs4NPAw9BzV95ds3bogvmAlVUg2iUoaXy7aGjMuQ87YZt
dR/zCSNjzBOmx5zVfeB/ibX7SRaFS5vhbL2lyCAfQSyuma4JbkrJrU3fq7xPAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQU/krpMmbyR8LpmEwz91CQGDbY00owHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwNDk2OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoPlABhIDANBgkqhkiG9w0BAQsFAAOC
AQEAZP486bHTHj8hLE3olGTRFkUNQpd2sBKVtbIBO4PdQKggYIf+cNWtPbz9HjpF
S+O91eRwI8FKfptmNKBzejBDDfj1nr040rzM56fIlaDIMVmqswkmLq6DgXdIe57V
GChoCHi6I0EbkwsCnT5k+eta/yLius/Ceuya3/8Ujp71x9Fz1xqaRkSc8L8mQh+e
KpE2qD9Df08ORPURupQFPk4mdCc4dGJFnzwWXhC1opXPp3fjakyC/c3dEmb1Ko/j
0sV6u39zcaRLtK46uSAXZNTuhZubEHC1+aC+q9+r2zzqAW3udneuANVOGLWLQ5ft
/WFLjoIsqByj6EmAa0iDnZjGvw==
-----END CERTIFICATE-----
Generated at Mon Sep 8 06:18:07 2025 by rpki-client