Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200809.roa
File: AS200809.roa (raw, json)
Hash identifier: /hg0UYZQCfQUnycyzy91PoH1KtfjtLQudax2gJeI7cU=
Subject key identifier: 01:7F:89:B1:4B:B1:8A:14:CE:09:9B:C2:7C:0B:A4:D9:C6:6F:FA:00
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 28037C807B4E3B07B49E4B645DC4962D713AE1D7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200809.roa
Signing time: Sun 02 Nov 2025 21:22:15 +0000
ROA not before: Sun 02 Nov 2025 21:17:15 +0000
ROA not after: Sun 01 Nov 2026 21:22:15 +0000
asID: 200809
IP address blocks: 2a0f:9400:6903::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:03:7c:80:7b:4e:3b:07:b4:9e:4b:64:5d:c4:96:2d:71:3a:e1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 2 21:17:15 2025 GMT
Not After : Nov 1 21:22:15 2026 GMT
Subject: CN=017F89B14BB18A14CE099BC27C0BA4D9C66FFA00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a7:a2:db:c5:6a:58:1f:2f:2a:7a:fd:3f:a4:
a4:a2:ec:94:5e:34:fb:27:54:80:3b:0f:56:1f:38:
e4:29:72:4a:44:2b:62:7b:90:6a:76:c4:1c:ce:84:
fa:ca:53:a9:cc:23:03:04:b2:2a:0b:4f:1d:f6:12:
cf:59:8a:f1:59:c7:82:6f:05:cf:ea:cf:c1:16:4d:
3a:a4:f2:2b:90:a1:40:50:6b:00:47:6a:40:a4:d6:
df:d9:08:b1:3a:91:e9:6c:be:91:6b:96:cb:55:a4:
67:2a:f6:f2:da:9a:da:3e:c2:c4:f0:59:3e:36:42:
68:a9:37:c3:06:51:17:b8:6d:1a:e4:3f:ca:19:b4:
2f:90:5d:41:04:66:ef:8f:d7:46:c9:95:1c:99:58:
c6:e5:7c:57:5f:2e:86:4e:4b:3a:e5:fb:2e:6c:ea:
6d:f0:74:e6:32:11:11:63:e8:e0:3a:f2:93:b9:d5:
a3:91:74:54:b4:26:48:0f:bc:08:a0:d5:79:b8:c9:
d0:cc:4d:cb:77:77:3e:17:06:2e:7e:3c:b2:25:2d:
cf:76:11:c4:ef:b5:9e:f0:ea:45:b9:b1:8c:f9:ce:
0c:e4:1a:fd:21:45:57:21:db:29:02:03:0b:76:48:
1b:ab:91:0e:4e:18:94:c2:7d:c6:b6:09:b6:0b:7b:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7F:89:B1:4B:B1:8A:14:CE:09:9B:C2:7C:0B:A4:D9:C6:6F:FA:00
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6903::/48
Signature Algorithm: sha256WithRSAEncryption
32:66:c2:c8:f7:cc:54:9e:3a:4f:52:d9:37:f6:93:b3:41:16:
48:89:3f:36:ac:1c:1b:2b:2d:e5:12:e2:63:e9:50:50:f8:07:
3d:30:0e:b6:e2:c8:08:13:98:56:28:eb:e0:fa:48:9d:e8:c2:
ca:58:83:e0:4e:a1:c3:7d:c2:29:94:b9:7e:73:59:bb:64:22:
26:6d:97:3a:0a:06:c0:2c:4a:63:38:89:4f:98:a9:24:63:92:
8a:29:3e:55:8c:74:f3:13:da:e5:e0:44:30:85:99:50:e3:0c:
b2:56:f6:3b:d5:9c:24:5e:56:06:0a:80:a8:24:52:dc:ba:04:
da:98:b6:6e:fd:b2:9e:48:6a:ec:33:ce:63:45:36:85:2b:f2:
d1:61:7f:96:c4:6b:b8:cb:11:1c:db:44:28:7e:16:bf:64:0a:
49:53:0a:c2:9b:d9:b3:14:39:9b:25:f0:2f:27:0a:ac:df:4c:
b2:d0:2a:61:9f:dc:9e:79:97:79:1d:aa:cf:dc:33:3e:cc:a3:
57:72:62:c6:3b:b5:76:dd:dc:a8:73:23:73:c4:01:5a:fb:da:
ec:4a:e0:8b:5d:c2:d4:a8:72:04:0d:18:99:d7:8e:56:e5:df:
31:11:3b:53:6a:2f:94:b5:27:3b:d3:e1:1b:b9:5e:db:99:aa:
69:0f:31:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:05:14 2025 by rpki-client