Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200021.roa
File: AS200021.roa (raw, json)
Hash identifier: nyGmJhYVnviRrhes6wiW0+BqTJVW+GC8mSKRRVdSbOc=
Subject key identifier: 76:15:C1:0B:D2:98:F6:B2:F6:AD:84:2C:6E:8E:B1:2E:C9:1E:4E:0B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 508021653CEB3141E3D8C2B4482D7563A03D35F6
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200021.roa
Signing time: Tue 14 Apr 2026 04:26:57 +0000
ROA not before: Tue 14 Apr 2026 04:21:57 +0000
ROA not after: Tue 13 Apr 2027 04:26:57 +0000
asID: 200021
IP address blocks: 2a0f:9400:6f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:80:21:65:3c:eb:31:41:e3:d8:c2:b4:48:2d:75:63:a0:3d:35:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 14 04:21:57 2026 GMT
Not After : Apr 13 04:26:57 2027 GMT
Subject: CN=7615C10BD298F6B2F6AD842C6E8EB12EC91E4E0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:a2:eb:24:5b:14:49:d1:a8:52:2b:7a:93:
0d:26:5a:1c:5a:67:b6:ea:49:50:2f:cb:98:c7:b9:
f8:a3:9b:11:98:91:db:c4:d3:d2:14:4f:3c:45:34:
31:a7:bc:f8:d0:5b:64:93:f4:87:3c:93:a4:cb:9d:
00:46:8f:9e:64:34:67:0b:11:64:7d:07:8d:34:a7:
5a:5d:b2:16:1b:5d:8e:b3:a8:2f:90:e4:f2:90:da:
65:59:ff:94:09:3e:aa:c1:f2:fd:ea:f3:c9:83:e8:
d3:2a:60:46:70:95:a8:58:76:d8:78:0f:16:dc:54:
2e:e2:56:72:3c:f6:84:92:d4:e2:84:a4:9e:96:2e:
5a:43:7b:88:b9:8e:55:36:b9:4d:b7:cf:fd:bb:f0:
d7:9a:64:68:bf:91:8d:c9:e3:6c:43:7b:b1:0e:95:
e7:c5:17:9a:7d:9c:a0:2e:7e:d9:39:ef:7e:da:37:
47:36:d2:f4:31:d5:08:fc:0c:51:87:fc:c8:c5:83:
14:1f:72:49:fe:f8:fe:ec:43:23:55:0b:72:8c:79:
40:86:54:12:08:46:97:b9:f3:46:a0:57:4b:ca:50:
6a:74:81:21:81:ea:41:a9:ea:01:62:65:9c:92:6f:
f1:42:cb:8b:a0:c3:19:81:8a:bb:50:17:59:60:1c:
bb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:15:C1:0B:D2:98:F6:B2:F6:AD:84:2C:6E:8E:B1:2E:C9:1E:4E:0B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200021.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6f00::/40
Signature Algorithm: sha256WithRSAEncryption
93:d1:08:e1:3b:59:22:05:08:f8:fc:12:a9:1e:5d:f5:47:26:
3c:5d:c0:97:af:f2:16:e5:4d:14:3f:e8:28:ef:0b:49:bf:5d:
c4:20:f7:c7:d4:4b:f6:10:ed:55:7a:e1:bf:99:15:8f:9e:e9:
a1:4e:c1:ae:b8:d4:d8:24:50:c4:e6:ed:91:b1:91:f0:6f:38:
e1:1d:fd:01:4a:bd:13:65:56:14:1b:be:26:53:c9:9e:05:87:
5a:79:1a:80:4d:49:cc:97:37:7c:01:d3:b0:79:d5:37:9d:29:
94:fc:c0:11:4d:a8:af:51:36:a5:37:07:94:78:fa:45:1c:4c:
de:8f:34:c4:b3:64:af:1d:4a:f8:c1:9c:78:c8:21:da:15:42:
4d:ff:6d:43:98:ab:58:bb:80:7f:0d:cd:f2:1e:4f:f8:ab:bf:
2d:07:61:e4:ae:a7:7c:c2:da:f9:fc:35:16:61:db:f5:7c:39:
50:40:de:53:c8:a4:33:9c:cf:4b:d4:e3:83:f5:12:81:60:a8:
60:3d:d5:44:13:5e:47:d9:8f:2a:1c:80:fa:06:21:f8:a5:dc:
f1:15:d1:ab:71:19:91:90:2b:e5:b0:1b:0d:10:9b:66:43:2e:
09:4d:42:31:5c:05:70:46:fc:7e:b5:c9:3a:aa:ec:1e:f3:4a:
8c:ed:95:1c
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUUIAhZTzrMUHj2MK0SC11Y6A9NfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjA0MTQwNDIxNTdaFw0yNzA0MTMwNDI2NTdaMDMxMTAvBgNV
BAMTKDc2MTVDMTBCRDI5OEY2QjJGNkFEODQyQzZFOEVCMTJFQzkxRTRFMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSKLrJFsUSdGoUit6kw0mWhxa
Z7bqSVAvy5jHufijmxGYkdvE09IUTzxFNDGnvPjQW2ST9Ic8k6TLnQBGj55kNGcL
EWR9B400p1pdshYbXY6zqC+Q5PKQ2mVZ/5QJPqrB8v3q88mD6NMqYEZwlahYdth4
DxbcVC7iVnI89oSS1OKEpJ6WLlpDe4i5jlU2uU23z/278NeaZGi/kY3J42xDe7EO
lefFF5p9nKAuftk5737aN0c20vQx1Qj8DFGH/MjFgxQfckn++P7sQyNVC3KMeUCG
VBIIRpe580agV0vKUGp0gSGB6kGp6gFiZZySb/FCy4ugwxmBirtQF1lgHLshAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUdhXBC9KY9rL2rYQsbo6xLskeTgswHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwMDAyMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoPlABvMA0GCSqGSIb3DQEBCwUAA4IB
AQCT0QjhO1kiBQj4/BKpHl31RyY8XcCXr/IW5U0UP+go7wtJv13EIPfH1Ev2EO1V
euG/mRWPnumhTsGuuNTYJFDE5u2RsZHwbzjhHf0BSr0TZVYUG74mU8meBYdaeRqA
TUnMlzd8AdOwedU3nSmU/MARTaivUTalNweUePpFHEzejzTEs2SvHUr4wZx4yCHa
FUJN/21DmKtYu4B/Dc3yHk/4q78tB2Hkrqd8wtr5/DUWYdv1fDlQQN5TyKQznM9L
1OOD9RKBYKhgPdVEE15H2Y8qHID6BiH4pdzxFdGrcRmRkCvlsBsNEJtmQy4JTUIx
XAVwRvx+tck6quwe80qM7ZUc
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:09:16 2026 by rpki-client