Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS51202.roa
File: AS51202.roa (raw, json)
Hash identifier: OkNmrjCGs3ftd+MM025cLUGa/sbYPqCTmhjR55UC0wo=
Subject key identifier: 21:16:B9:7E:43:FC:A0:B1:5E:93:CB:1A:1D:99:BF:39:FD:B4:4C:35
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 11EB0B8B081B9E70D696EC1022A9DADAD42FA553
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS51202.roa
Signing time: Sun 05 Jul 2026 07:29:27 +0000
ROA not before: Sun 05 Jul 2026 07:24:27 +0000
ROA not after: Sun 04 Jul 2027 07:29:27 +0000
asID: 51202
IP address blocks: 2a0f:9400:6909::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:eb:0b:8b:08:1b:9e:70:d6:96:ec:10:22:a9:da:da:d4:2f:a5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 5 07:24:27 2026 GMT
Not After : Jul 4 07:29:27 2027 GMT
Subject: CN=2116B97E43FCA0B15E93CB1A1D99BF39FDB44C35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:3f:6a:88:c6:67:98:8e:49:e0:fe:a4:65:
0e:a8:38:ce:ba:68:6e:4a:ce:08:e0:b6:2c:f7:59:
8f:56:77:f7:95:b6:09:58:5b:1d:d3:fa:1d:3f:b6:
95:2d:6a:a9:4f:73:e4:3e:04:08:4c:c2:d5:34:30:
1f:5e:56:9b:bd:37:2a:49:d7:1d:b6:81:d5:07:85:
96:dc:f6:6c:6f:92:4c:1e:6a:fc:27:65:e9:c0:50:
e8:4b:69:77:19:a2:1e:85:7e:6d:04:e3:3a:0f:97:
b1:dc:5b:48:70:07:ab:ba:64:fa:9f:2b:2b:5b:0a:
55:e8:ad:2b:7a:85:20:7f:ea:86:e3:df:2c:8d:c4:
19:54:79:ec:b7:f7:15:cb:c0:c5:b1:c2:67:4f:72:
2b:66:2b:71:13:44:fb:7d:da:f8:4e:6a:21:5b:a9:
bd:17:05:fd:43:ad:94:0b:e3:65:97:d3:6a:f9:7a:
46:7b:a7:3a:05:b4:bc:4a:1c:d9:ed:67:ee:80:4d:
b4:b7:e5:1f:50:6e:69:77:e7:83:88:1f:fd:c2:92:
90:7c:90:5d:54:07:b0:86:c4:74:04:e2:d1:c3:2e:
a3:85:e9:8a:91:da:fe:37:14:92:52:03:cf:61:ef:
d7:9f:f7:42:31:25:ca:8e:dd:69:e4:c4:68:1e:8b:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:16:B9:7E:43:FC:A0:B1:5E:93:CB:1A:1D:99:BF:39:FD:B4:4C:35
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS51202.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6909::/48
Signature Algorithm: sha256WithRSAEncryption
91:f7:92:53:76:07:bd:10:21:3c:aa:19:38:af:1c:2b:6c:28:
7d:60:9a:fb:ef:7b:bb:6a:06:72:cc:e2:8e:40:5b:bc:a1:30:
fa:2c:eb:e6:65:5b:4e:c0:5f:aa:6a:71:97:e4:51:88:d1:d2:
7c:ba:19:37:6a:00:dd:50:06:55:0e:c8:cc:6c:36:38:37:ab:
54:79:5b:8d:82:34:0b:21:d9:61:4e:ef:74:d7:78:81:b6:32:
4c:7a:92:2d:a4:e8:f5:e1:e7:d4:d0:09:39:fe:af:5c:ea:bc:
07:76:07:f9:94:17:5b:19:0f:03:69:0b:ac:2b:12:d1:5d:4e:
68:ae:26:35:13:a4:4f:43:67:ba:e3:15:74:7b:ee:04:eb:1f:
24:33:91:d1:b6:4d:5d:9c:7a:52:a8:d9:51:83:f3:6f:16:b0:
aa:60:05:57:ef:84:8d:8d:3d:38:b0:8f:81:8b:31:87:75:dc:
13:6e:d4:56:da:eb:32:fe:9c:e4:da:09:f1:e5:76:08:99:c4:
3e:61:c4:87:58:1f:47:76:3e:bd:bc:c5:3e:01:51:7b:b9:31:
b8:b0:65:d8:31:12:ff:07:aa:bc:70:87:76:fa:ca:d9:3d:e2:
b2:66:05:4f:25:5f:ef:b3:b9:f5:5f:95:b9:74:f9:e4:f4:5f:
d8:79:0b:83
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUEesLiwgbnnDWluwQIqna2tQvpVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjA3MDUwNzI0MjdaFw0yNzA3MDQwNzI5MjdaMDMxMTAvBgNV
BAMTKDIxMTZCOTdFNDNGQ0EwQjE1RTkzQ0IxQTFEOTlCRjM5RkRCNDRDMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpD9qiMZnmI5J4P6kZQ6oOM66
aG5Kzgjgtiz3WY9Wd/eVtglYWx3T+h0/tpUtaqlPc+Q+BAhMwtU0MB9eVpu9NypJ
1x22gdUHhZbc9mxvkkweavwnZenAUOhLaXcZoh6Ffm0E4zoPl7HcW0hwB6u6ZPqf
KytbClXorSt6hSB/6obj3yyNxBlUeey39xXLwMWxwmdPcitmK3ETRPt92vhOaiFb
qb0XBf1DrZQL42WX02r5ekZ7pzoFtLxKHNntZ+6ATbS35R9Qbml354OIH/3CkpB8
kF1UB7CGxHQE4tHDLqOF6YqR2v43FJJSA89h79ef90IxJcqO3WnkxGgeizqDAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUIRa5fkP8oLFek8saHZm/Of20TDUwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzUxMjAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+UAGkJMA0GCSqGSIb3DQEBCwUAA4IB
AQCR95JTdge9ECE8qhk4rxwrbCh9YJr773u7agZyzOKOQFu8oTD6LOvmZVtOwF+q
anGX5FGI0dJ8uhk3agDdUAZVDsjMbDY4N6tUeVuNgjQLIdlhTu9013iBtjJMepIt
pOj14efU0Ak5/q9c6rwHdgf5lBdbGQ8DaQusKxLRXU5oriY1E6RPQ2e64xV0e+4E
6x8kM5HRtk1dnHpSqNlRg/NvFrCqYAVX74SNjT04sI+BizGHddwTbtRW2usy/pzk
2gnx5XYImcQ+YcSHWB9Hdj69vMU+AVF7uTG4sGXYMRL/B6q8cId2+srZPeKyZgVP
JV/vs7n1X5W5dPnk9F/YeQuD
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:57 2026 by rpki-client