Route Origin Authorization

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205941.roa
File:                     AS205941.roa (raw, json)
Hash identifier:          43EQ83U9DskLXUbLWjVTKaIH/4w+RZklhz/jpxgQeyU=
Subject key identifier:   FB:F7:5F:98:E1:91:45:EA:89:75:90:2D:F3:3D:FD:FB:27:58:F4:D4
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       087F3E3A3D024A9D85737CA6954C36579245CD83
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205941.roa
Signing time:             Wed 19 Aug 2026 11:30:59 +0000
ROA not before:           Wed 19 Aug 2026 11:25:59 +0000
ROA not after:            Wed 18 Aug 2027 11:30:59 +0000
asID:                     205941
IP address blocks:        2a0f:9400:6119::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7f:3e:3a:3d:02:4a:9d:85:73:7c:a6:95:4c:36:57:92:45:cd:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Aug 19 11:25:59 2026 GMT
            Not After : Aug 18 11:30:59 2027 GMT
        Subject: CN=FBF75F98E19145EA8975902DF33DFDFB2758F4D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bd:3b:cf:1a:50:90:70:98:18:c1:03:fa:40:
                    91:5f:1a:06:e7:ec:9d:7c:2b:13:5d:b9:36:b3:9a:
                    f7:c1:b1:d1:00:42:80:af:04:88:53:63:8e:f0:df:
                    1e:af:b7:84:6b:47:a5:8a:05:eb:b4:c4:ea:2f:42:
                    29:d7:f0:b3:b2:2d:33:08:ca:86:33:38:9a:db:8f:
                    7c:16:9d:46:98:b1:e6:4e:53:d9:22:88:9e:a4:eb:
                    b5:24:8e:3c:21:a1:95:af:76:08:ed:0f:ab:94:cd:
                    be:e2:80:63:53:3f:e2:38:2b:02:7a:36:7b:c2:2e:
                    58:2a:62:6f:b8:98:f4:cf:38:83:16:ac:b2:85:7d:
                    38:34:4c:1e:39:8d:e7:16:90:9b:b6:c2:87:5b:49:
                    bf:fa:05:90:c2:94:6b:60:10:93:fc:02:52:b0:d4:
                    34:c1:21:35:13:40:03:5b:41:cf:26:b8:6f:9b:e9:
                    ce:8c:02:e9:1c:a0:9f:81:cd:d3:6a:00:1e:ae:c0:
                    7f:19:b2:2a:2a:c2:42:e7:ed:d6:12:4f:40:b9:a9:
                    40:27:7b:96:55:68:b2:cc:6a:ef:7c:96:eb:59:d9:
                    82:41:01:c5:65:32:de:7a:93:56:4b:d9:c8:84:ba:
                    09:d4:59:f8:6c:72:0b:ca:c2:da:e5:74:c8:a6:54:
                    8a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F7:5F:98:E1:91:45:EA:89:75:90:2D:F3:3D:FD:FB:27:58:F4:D4
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205941.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:6119::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:8f:87:4d:13:5d:01:5c:71:32:8b:2c:4b:7d:92:6e:0a:ef:
         39:ab:f8:ed:bc:ec:66:7b:d6:ab:aa:d6:d8:14:19:d2:60:e3:
         f5:8e:10:f6:77:41:56:95:8b:f9:3f:27:fe:86:ee:48:96:04:
         b1:33:09:be:9d:6c:71:e7:55:7c:57:6d:98:c4:a6:ef:ca:4d:
         23:02:86:ca:b2:8d:52:28:61:85:34:62:b6:a1:61:3a:69:27:
         0d:fa:5c:42:27:07:9e:b0:ef:d2:4f:6e:c7:5f:eb:e3:d2:48:
         f1:37:d5:b6:27:92:fe:ff:70:75:39:30:8a:12:fb:1f:5a:49:
         60:f3:84:b0:5b:85:c2:b9:e4:55:0f:29:d2:be:02:9e:97:5c:
         5a:54:a1:5c:3f:75:81:9d:a1:6f:42:80:5d:19:25:2b:81:97:
         97:5a:8b:16:17:52:d1:bf:f5:bb:c9:2a:ef:18:b7:30:f2:fa:
         96:85:d3:4c:d5:57:85:11:95:39:d8:c2:9f:c8:68:c9:5f:dc:
         0e:a7:df:9a:88:a3:1b:6b:47:6e:59:da:00:5a:ec:88:d6:6a:
         16:2c:65:5a:43:2b:1d:5a:80:64:9e:19:7b:db:26:6e:14:d8:
         49:d5:e6:5f:46:ec:ce:93:0b:49:05:20:89:f5:df:65:d1:68:
         a0:2a:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:11:11 2026 by rpki-client