Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199832.roa
File: AS199832.roa (raw, json)
Hash identifier: Z7wFLfXS/QsvQ3/hfhqU0+0iJx/6djALnFWBj4O4DiA=
Subject key identifier: 50:2B:C0:2F:3B:16:14:3E:9A:A7:0C:DE:B4:6D:FD:59:A6:25:90:08
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3AA423E8B1E884CDB82FF4D40DE91A000755CE5D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199832.roa
Signing time: Wed 21 Oct 2026 15:32:21 +0000
ROA not before: Wed 21 Oct 2026 15:27:21 +0000
ROA not after: Wed 20 Oct 2027 15:32:21 +0000
asID: 199832
IP address blocks: 2a0f:9400:6903::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a4:23:e8:b1:e8:84:cd:b8:2f:f4:d4:0d:e9:1a:00:07:55:ce:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 21 15:27:21 2026 GMT
Not After : Oct 20 15:32:21 2027 GMT
Subject: CN=502BC02F3B16143E9AA70CDEB46DFD59A6259008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:49:d9:25:d0:d2:8d:67:ef:fe:47:90:66:15:
a0:ee:bd:f7:b3:40:79:a2:84:5e:93:01:47:14:fc:
4e:a6:0a:7d:8c:89:38:0f:91:8a:f1:04:a5:fb:87:
77:7e:3c:c1:2e:10:e9:9c:7d:95:81:35:b8:9e:c1:
38:28:86:60:96:ce:33:7b:f4:bf:48:a0:17:d0:ec:
4a:4f:d4:fd:d6:d1:26:53:13:c8:a4:44:eb:95:16:
27:65:1f:07:dd:1a:f1:72:56:32:19:ec:1e:6e:fc:
72:4a:2e:32:c5:e7:27:1e:fc:bc:2a:44:ad:fc:af:
1d:20:7e:70:a2:b1:de:d9:c2:3c:17:94:24:46:03:
a1:3c:4b:cb:02:97:85:ca:4f:fd:b1:28:ff:9f:3f:
65:02:98:3a:d5:84:57:54:2b:b3:66:6a:c8:be:38:
90:b1:4e:c8:e6:10:78:34:3b:0e:fb:87:ed:53:cf:
b3:82:42:cd:f8:e9:c4:dc:9c:36:1f:f6:f4:87:86:
ca:86:e6:61:92:4d:30:38:1f:d2:51:78:d5:d7:52:
a8:d6:f8:79:84:eb:96:1b:fb:45:21:86:45:ab:41:
77:a7:b6:e2:e0:b5:f5:6b:15:15:29:7f:3a:cf:00:
16:93:cb:af:7c:45:e6:8f:81:2f:8e:fd:d4:3a:86:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2B:C0:2F:3B:16:14:3E:9A:A7:0C:DE:B4:6D:FD:59:A6:25:90:08
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6903::/48
Signature Algorithm: sha256WithRSAEncryption
c5:7a:e4:52:79:dd:88:7c:75:0e:81:9e:1e:73:43:99:a4:5c:
8d:df:28:09:8f:60:3a:1b:35:41:43:88:3c:ea:a8:e9:bd:97:
2d:bf:cb:8f:93:93:ca:26:e3:d0:47:4f:be:e8:62:63:65:af:
dd:61:7e:6d:a9:29:8d:b3:0a:76:02:dc:11:d6:22:cf:a1:ec:
9d:a8:45:81:3e:ec:36:d5:78:32:d1:3b:c8:36:0c:d2:97:7d:
c6:ee:38:eb:31:37:ea:ea:75:fa:2b:b0:36:c8:a1:64:fb:13:
80:00:f9:fb:1f:72:d6:47:e4:84:11:9a:1b:c0:b4:af:f6:14:
cf:c5:97:6c:f9:e2:69:62:90:93:5f:4d:98:d4:51:5a:3f:f5:
df:42:2d:18:4c:44:64:e3:8c:a3:44:01:4c:43:e6:05:29:57:
28:a5:dc:8e:21:4b:44:b3:7f:de:dd:05:f4:a9:48:1c:59:16:
4f:9d:62:62:73:7f:62:56:10:30:1d:1b:f8:e0:ce:0a:b5:07:
09:22:70:c1:c9:c3:e5:21:2f:7f:69:dc:c1:41:09:85:1c:8e:
18:e1:a9:d5:86:ac:3d:60:dd:d1:5c:ef:2c:cd:62:47:0b:7f:
a0:50:17:f2:d7:22:f5:9d:32:b0:fc:17:02:f2:ba:16:76:ef:
dc:10:89:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:05:08 2026 by rpki-client