Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203090.roa
File: AS203090.roa (raw, json)
Hash identifier: Y4k5/ysDMhzht3K6idO3A1ovfuGeveRAPgFTRTRU6eY=
Subject key identifier: 3A:15:65:86:56:B0:FD:4F:45:64:E5:CE:4B:4D:F1:90:F6:80:0C:34
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0B022A9221EA8836918687F4F30B3738D3035795
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203090.roa
Signing time: Sun 26 Jul 2026 10:39:13 +0000
ROA not before: Sun 26 Jul 2026 10:34:13 +0000
ROA not after: Sun 25 Jul 2027 10:39:13 +0000
asID: 203090
IP address blocks: 2a0f:9400:6909::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:02:2a:92:21:ea:88:36:91:86:87:f4:f3:0b:37:38:d3:03:57:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 26 10:34:13 2026 GMT
Not After : Jul 25 10:39:13 2027 GMT
Subject: CN=3A15658656B0FD4F4564E5CE4B4DF190F6800C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e5:ea:b7:d7:8b:e0:cb:02:a1:5e:51:70:48:
cc:58:2a:11:c4:1a:c2:99:bd:b3:a1:57:91:ec:72:
d3:2b:b6:ff:8a:af:3f:22:0a:15:c5:79:f8:50:c7:
87:a4:4f:a7:20:f2:3b:30:94:0b:81:57:e0:01:33:
b8:15:be:b3:5e:14:4d:d5:a7:3c:ad:3b:28:f0:9a:
bd:b5:d8:47:d6:d5:2c:e1:30:c4:c9:68:75:fa:b3:
e9:49:9e:e7:33:c7:e5:af:94:d0:c1:73:59:08:9b:
25:2a:0b:eb:a9:50:b2:12:eb:ec:5f:89:aa:21:71:
89:ae:37:fc:4c:af:59:00:5a:ef:24:a1:ac:1b:22:
18:25:f6:4a:4b:4c:32:a4:a7:c0:2c:d1:2a:66:8b:
4f:ba:4c:27:be:18:c1:2b:5c:70:5c:a0:ab:02:d4:
3a:3b:b0:64:d4:62:6b:04:f2:d6:bb:00:92:c4:4c:
71:f0:c2:18:07:10:b6:9d:96:04:82:c8:58:81:57:
56:ec:f4:bc:2a:03:5e:03:44:89:64:e4:55:ba:b8:
7c:08:1b:43:8c:af:31:50:e7:94:de:89:3e:45:ee:
61:9d:f1:bf:71:e8:89:6c:93:52:eb:5d:9e:12:da:
7d:c8:fd:1b:4f:35:7f:35:19:16:a8:3b:57:43:dd:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:15:65:86:56:B0:FD:4F:45:64:E5:CE:4B:4D:F1:90:F6:80:0C:34
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203090.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6909::/48
Signature Algorithm: sha256WithRSAEncryption
86:fc:e4:e4:a3:6a:a7:25:2e:3d:d4:17:bb:5b:ac:6e:67:50:
82:c8:ed:92:c9:09:ff:9c:56:dd:40:82:9e:88:51:8c:89:73:
d3:bf:54:90:00:4f:68:dc:03:88:b5:a2:f7:0c:02:a1:57:af:
32:62:6d:1c:91:7e:15:e7:a1:a8:87:12:8c:e0:12:23:1a:c0:
09:b8:ac:ff:b1:28:ae:ec:16:c6:6c:30:c2:d7:1d:d9:4f:55:
ff:49:d7:d5:8d:40:c9:bf:6b:27:c6:0d:28:0f:ab:6c:e6:be:
7a:d7:ed:a7:7c:54:ce:1f:ac:2b:db:ad:5d:7f:62:45:75:83:
43:be:d9:39:72:68:72:1c:bb:d8:1d:51:f3:e8:e7:cc:4e:42:
86:f6:18:72:66:bc:7a:b4:55:b5:c9:7b:d9:3c:0b:16:e1:d0:
c6:8e:6c:ba:be:7c:7c:22:1a:50:2d:98:7e:45:36:bc:2f:27:
60:c6:f4:18:76:cf:c9:3d:15:28:21:0d:bd:db:2b:55:80:b1:
07:03:9d:80:e3:a3:31:79:67:36:89:c5:69:4d:7f:14:8c:a2:
5d:66:8e:4f:3c:e9:f1:ca:1d:d2:b5:76:8b:13:53:7d:d0:a8:
b4:94:65:fd:c8:fb:16:bc:4c:88:df:aa:51:4a:e0:0f:b5:6b:
36:d5:9c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:39 2026 by rpki-client