Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209242.roa
File: AS209242.roa (raw, json)
Hash identifier: sBu+qewb+Ac1jseNdjhgG5lrU5D8MEp1mGaJ7Zon500=
Subject key identifier: 3A:E3:A9:39:F3:BB:A5:78:97:B0:EF:99:27:25:4D:CA:49:EF:63:27
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 418089E285205D172AE17B8F3EC9575B11DE54FA
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209242.roa
Signing time: Mon 24 Aug 2026 04:31:08 +0000
ROA not before: Mon 24 Aug 2026 04:26:08 +0000
ROA not after: Mon 23 Aug 2027 04:31:08 +0000
asID: 209242
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:80:89:e2:85:20:5d:17:2a:e1:7b:8f:3e:c9:57:5b:11:de:54:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 24 04:26:08 2026 GMT
Not After : Aug 23 04:31:08 2027 GMT
Subject: CN=3AE3A939F3BBA57897B0EF9927254DCA49EF6327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4e:38:9d:27:f5:0f:fd:3a:67:0f:99:9f:c3:
9c:b0:d6:28:93:de:a0:ff:0e:5c:68:07:30:55:07:
43:fd:6a:63:d2:3e:07:af:eb:89:1d:68:35:f3:2b:
b2:d2:e3:4a:cf:41:1a:0e:e9:90:b1:f7:2d:d6:c0:
f7:ce:e2:a0:74:c3:dd:3d:44:d6:73:0f:85:75:81:
3c:6b:8c:a7:c9:ef:8c:a4:0c:35:3b:bd:90:37:52:
ff:f7:33:9e:a8:4f:85:31:df:88:6b:7f:c9:cb:37:
8b:04:89:02:80:6b:11:5f:95:db:2e:b5:c6:4a:2e:
59:2d:0b:bd:63:b0:e0:4a:a8:9c:4f:ce:52:09:9c:
56:b0:ae:01:be:96:64:c8:52:05:a7:ea:e6:6f:2a:
5b:23:f6:41:ec:55:45:c1:d1:7c:de:7d:d4:96:ff:
71:64:6a:f1:0c:3c:66:c9:ef:5b:89:eb:94:41:44:
b6:b7:dd:0f:f5:8c:3d:4d:b6:5f:d7:49:77:27:34:
05:e3:dd:e8:97:2d:c1:1b:30:2e:fb:24:44:0e:17:
2c:c4:00:98:ea:7d:f8:a2:08:1a:ea:cd:70:21:b7:
cd:65:58:e0:fa:0b:df:8a:5b:13:d9:7e:fb:cc:08:
8f:5c:33:3a:77:1d:77:f2:4d:bd:e0:4c:f1:5f:4d:
2b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E3:A9:39:F3:BB:A5:78:97:B0:EF:99:27:25:4D:CA:49:EF:63:27
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS209242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
13:b4:f2:08:ce:1f:54:86:22:59:2a:e1:24:f7:8d:34:25:c3:
00:03:c9:69:c5:ee:c4:d5:54:df:e1:4e:0e:35:b8:c4:68:8d:
cc:74:a6:59:eb:a4:fa:e3:37:73:2d:52:8c:62:da:2c:77:e3:
cf:b8:3c:d3:c2:2c:bb:7b:6a:da:1e:ce:c6:99:38:f7:9f:82:
2b:c7:b8:42:eb:b9:b7:57:a4:ac:8c:0d:b5:73:3f:32:fc:8f:
a2:ec:92:19:dd:42:cb:10:ba:e0:b9:9d:df:c9:f9:45:6f:03:
13:92:de:34:58:c3:04:fa:c6:6f:47:83:d1:8e:a6:9f:36:1d:
58:af:52:ac:9d:5d:7a:12:f4:7c:0f:10:24:4c:fe:c2:3e:60:
31:06:59:e4:e6:10:73:32:a8:ef:30:27:53:b9:1f:db:ea:9d:
bf:62:70:08:9c:b1:36:cd:17:59:cc:95:b5:00:2f:31:25:c8:
53:5e:1a:88:51:ca:4d:38:cc:9e:de:85:00:b0:08:cc:5b:d7:
05:8f:a8:ea:d9:b5:7f:7d:ad:e0:75:14:e7:a4:40:cd:6c:10:
cc:1b:fd:39:24:3c:f6:1d:ef:69:a7:6c:30:53:08:71:8d:3c:
44:25:3b:07:19:c7:07:40:8e:50:79:98:f1:32:aa:8d:71:ae:
5c:72:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:11:18 2026 by rpki-client