Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208393.roa
File: AS208393.roa (raw, json)
Hash identifier: DEks9eCShUFE4OA7slle5RpBJ5/NCLEvz3/islAOqN4=
Subject key identifier: 0C:37:BA:13:06:1F:5B:72:68:9C:63:24:DA:E4:0A:9A:EC:8F:04:31
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 21F3B7D2887E0A6FFB0EBF8C0710F3D776AEC3F9
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208393.roa
Signing time: Tue 19 May 2026 04:03:20 +0000
ROA not before: Tue 19 May 2026 03:58:20 +0000
ROA not after: Tue 18 May 2027 04:03:20 +0000
asID: 208393
IP address blocks: 2a0f:9400:8001::/48 maxlen: 48
2a0f:9400:8004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f3:b7:d2:88:7e:0a:6f:fb:0e:bf:8c:07:10:f3:d7:76:ae:c3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 03:58:20 2026 GMT
Not After : May 18 04:03:20 2027 GMT
Subject: CN=0C37BA13061F5B72689C6324DAE40A9AEC8F0431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:cb:26:ac:b4:3d:c7:a3:50:ea:fe:ba:ee:
12:5a:fe:c5:e0:a4:29:e5:38:d5:1b:2f:df:5b:88:
53:0b:83:ad:a1:c5:76:7b:d2:8a:f5:ba:dc:c1:9d:
80:49:59:0f:81:77:6e:fe:6a:f9:4a:dd:77:18:fb:
9d:9b:df:fa:9c:7b:4b:4c:79:19:08:1d:ed:0c:70:
6f:d2:f5:50:c7:cb:e0:e1:7f:98:63:11:64:9b:ba:
17:8c:2c:b7:9a:39:9c:c8:de:b5:33:81:eb:d5:5d:
89:b1:e6:aa:89:48:f2:b1:72:ea:00:b9:99:22:0a:
1e:06:e0:d5:64:e8:04:d5:ed:d8:d3:ce:ee:42:ea:
9a:a5:9d:d9:60:17:52:88:b5:d2:8d:df:77:26:5f:
80:c0:7a:7a:88:4c:a8:04:00:19:ed:a7:1e:a7:1c:
bc:19:76:ae:72:c4:17:99:dc:c7:9e:3e:e3:28:7c:
fb:cb:4f:f2:54:b0:dc:ee:8d:44:4c:dd:27:a2:27:
36:4d:28:7d:03:0d:b0:d5:ad:f5:03:1d:73:e5:71:
8f:bb:8c:12:61:af:37:55:d7:9d:68:a5:3f:ae:d9:
df:15:8f:8b:29:5a:f6:ed:98:5f:49:2f:56:e5:c8:
42:60:11:d7:96:a3:46:b3:68:bd:48:64:cd:53:4e:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:37:BA:13:06:1F:5B:72:68:9C:63:24:DA:E4:0A:9A:EC:8F:04:31
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8001::/48
2a0f:9400:8004::/48
Signature Algorithm: sha256WithRSAEncryption
a2:3d:47:7c:20:5a:cc:72:0c:c0:58:05:b9:aa:b9:ec:90:8d:
1f:3a:62:0b:57:12:26:ab:e2:1c:f9:4d:c3:e7:8b:d7:4f:a1:
af:d1:05:4e:91:cf:db:f7:fd:db:53:b9:2d:3b:f0:08:b1:34:
5c:9d:63:71:7d:30:5a:59:69:52:a9:e7:dc:db:2f:bc:9a:f0:
7c:db:76:24:1e:08:23:4c:9d:7a:50:ba:d7:0d:8d:93:65:d5:
46:ea:9c:4d:bd:cd:b0:41:58:d2:49:26:a6:54:30:00:b5:45:
66:e1:9d:78:0c:d1:77:15:83:ab:4b:37:9f:f0:96:8b:11:65:
5f:00:16:ad:ae:d9:f8:ad:fc:6e:7d:b0:e3:69:d0:44:bd:42:
e8:2b:74:7e:d0:f6:c1:41:a8:75:9e:10:aa:8b:5f:a6:a9:5c:
76:f2:07:83:c4:58:cd:09:7c:9f:84:91:43:aa:4b:71:8c:94:
7c:2e:8c:27:14:25:c4:a8:62:58:77:ba:2b:5f:1e:c2:47:78:
5d:4f:db:9c:c0:ce:c8:44:ed:16:68:25:00:d1:40:c3:f2:b9:
e4:91:72:c2:fe:de:6a:5f:cb:20:19:e5:87:32:8f:8b:d6:47:
3e:3a:4f:3b:44:f9:9a:0e:bc:7e:4d:2f:f6:18:57:b7:ba:9f:
00:80:45:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:23:53 2026 by rpki-client