Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207445.roa
File: AS207445.roa (raw, json)
Hash identifier: kR0U8PRc+09yD5FYhyspYPKts8+KZDT9+ZfQZOLQVzc=
Subject key identifier: 2F:2E:D4:C8:F5:15:4B:F2:F0:5E:C0:AF:BC:7C:24:97:A1:2F:6B:01
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 29DE817AAF892A8F5C1EE97C132B0F88A2D12159
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207445.roa
Signing time: Wed 04 Mar 2026 03:21:19 +0000
ROA not before: Wed 04 Mar 2026 03:16:19 +0000
ROA not after: Wed 03 Mar 2027 03:21:19 +0000
asID: 207445
IP address blocks: 2a0f:9400:8011::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 04:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:de:81:7a:af:89:2a:8f:5c:1e:e9:7c:13:2b:0f:88:a2:d1:21:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 4 03:16:19 2026 GMT
Not After : Mar 3 03:21:19 2027 GMT
Subject: CN=2F2ED4C8F5154BF2F05EC0AFBC7C2497A12F6B01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:f5:84:1a:6b:c8:55:c3:2c:14:85:d8:d5:
99:e9:7e:2f:10:31:86:89:aa:f5:b7:c9:03:4a:b4:
1d:0d:93:8f:23:cb:12:e2:5b:c2:f4:81:b6:a9:42:
f1:0d:30:9b:e2:3a:71:f0:fc:62:f9:70:a3:89:89:
83:a3:59:a1:cc:90:db:92:d6:12:a9:4c:29:d3:f6:
63:ac:56:38:d1:17:f1:60:3e:0a:83:84:16:24:6c:
17:6f:5e:96:1c:9e:29:8d:79:16:d7:52:14:0e:df:
a2:d3:e7:45:ec:3c:f6:1c:f6:78:26:48:ef:1a:29:
af:90:24:d1:8f:16:7d:42:01:53:7b:01:0e:bd:bb:
7d:6b:a9:c4:3e:02:d5:89:d6:0a:90:51:0d:c2:5e:
cd:94:80:f9:f5:f5:64:ad:06:64:c3:55:b0:82:7f:
f4:11:93:e4:32:6a:ff:ef:ae:d6:e6:b4:4e:26:f6:
bc:a9:a0:64:9e:6c:56:a8:2a:46:93:be:f6:54:e3:
ee:13:de:0b:84:39:b1:e8:b0:f0:05:52:41:e3:8c:
6b:7b:fd:17:11:0d:9d:01:6c:d4:9e:40:3f:6d:bc:
7c:72:01:44:fe:4b:09:0d:77:b2:ad:16:2a:c2:f9:
23:be:e3:97:94:a2:e1:73:77:42:83:21:99:ad:8c:
9c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2E:D4:C8:F5:15:4B:F2:F0:5E:C0:AF:BC:7C:24:97:A1:2F:6B:01
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8011::/48
Signature Algorithm: sha256WithRSAEncryption
c8:e7:52:2d:e3:c2:47:60:f2:0b:7c:45:d6:6f:7d:b1:cd:7b:
4a:36:2c:47:05:83:fc:a6:ce:c6:0f:64:7e:93:55:89:3a:01:
4c:d3:db:02:89:0d:89:29:8d:ed:ed:69:ac:7a:65:3c:f9:3b:
89:9a:ba:9f:87:d1:79:ce:c0:0a:3c:bb:f0:22:23:49:a1:9e:
d0:ba:14:87:4a:6f:58:44:5e:b9:22:59:ee:22:5d:02:0c:b3:
d3:fa:73:92:7d:34:40:59:05:45:a9:76:30:05:12:16:43:97:
6c:e0:e6:cb:ab:1e:90:87:5e:20:84:a0:0f:c6:33:44:64:bc:
53:d1:41:49:0d:d0:e5:dc:a1:f5:48:61:2c:eb:e9:07:af:71:
06:1c:8c:cb:b3:ae:ce:57:e6:c8:cc:22:af:36:09:34:c6:31:
59:89:21:49:b5:5a:58:99:e2:28:b0:07:dd:fb:ea:36:20:7a:
2c:4f:bc:80:2f:39:b6:30:3a:6f:78:9a:95:71:ca:0f:09:f6:
ad:60:bc:19:ca:64:88:21:b3:43:7e:96:0b:51:44:73:d7:d7:
ba:25:25:e3:2b:5a:b9:b2:0e:b3:22:7c:48:5b:5a:9c:b9:f9:
78:90:fe:14:aa:63:1d:23:49:66:e0:ab:be:3f:60:ee:e7:50:
08:ca:a8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 12:16:18 2026 by rpki-client