Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204539.roa
File: AS204539.roa (raw, json)
Hash identifier: opbXoY5/cNC149VuisVdKFSAYM6JORcttRcvVu8Y9o0=
Subject key identifier: E7:30:D1:17:95:D5:D9:2E:23:7B:DA:C5:96:81:69:50:A3:73:FE:83
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 42E003A4E992DC5A5646A2FA6BCE095C46F396E6
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204539.roa
Signing time: Fri 31 Oct 2025 17:16:37 +0000
ROA not before: Fri 31 Oct 2025 17:11:37 +0000
ROA not after: Fri 30 Oct 2026 17:16:37 +0000
asID: 204539
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e0:03:a4:e9:92:dc:5a:56:46:a2:fa:6b:ce:09:5c:46:f3:96:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 31 17:11:37 2025 GMT
Not After : Oct 30 17:16:37 2026 GMT
Subject: CN=E730D11795D5D92E237BDAC596816950A373FE83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:4e:b3:99:06:6b:8f:7e:44:d5:9c:47:67:
1d:45:69:43:13:f7:a3:45:6d:39:14:96:ec:c3:1b:
36:8c:4b:fb:39:7e:b7:19:94:f1:54:2f:05:8e:9f:
3c:bc:b1:f9:39:c7:88:d4:f9:fd:71:d1:f6:c4:ec:
05:e5:50:e9:a7:c8:9b:b8:d2:e4:cc:81:12:bd:11:
67:65:96:04:e0:b4:0e:f5:80:4d:90:e6:5c:8e:35:
8c:29:6b:09:d4:17:12:a2:82:93:2f:5d:dd:c5:fe:
58:88:de:54:47:a7:7f:c1:be:4e:d0:e0:29:88:8c:
74:76:25:49:6a:2f:e7:87:95:28:49:7d:e4:ee:b2:
91:e5:94:96:78:24:30:56:67:8d:12:54:e7:37:91:
26:b7:a2:4e:78:21:7b:0d:e8:10:94:e0:4c:c0:58:
af:9f:47:a4:ee:1e:b6:38:67:a7:82:8e:12:74:62:
2e:ed:74:76:c2:96:c7:24:5d:ff:72:e9:08:83:ed:
8d:d3:0d:90:41:04:01:a9:d0:1a:33:37:e4:2f:37:
9d:95:7d:b7:2e:fc:0c:3f:f4:93:64:ba:bb:d9:4c:
16:80:4b:f0:0b:5f:83:fc:40:49:27:0b:70:15:35:
ef:20:b7:0e:3c:42:12:f0:52:a1:12:3e:91:11:97:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:D1:17:95:D5:D9:2E:23:7B:DA:C5:96:81:69:50:A3:73:FE:83
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
9d:d2:d9:69:12:4c:43:98:64:d4:0d:55:10:ed:c6:de:22:f5:
c3:aa:8c:14:70:a1:6d:3f:f6:a1:fc:eb:15:fc:6e:23:88:91:
92:ef:a5:da:f1:97:5c:20:9a:7c:9e:97:73:cc:7f:68:d1:5e:
b7:e5:2e:3b:7f:cf:4e:9e:5d:4c:9b:e0:e2:6b:34:1c:4b:3d:
57:fe:3c:f4:8c:89:30:ee:cb:b4:14:70:01:b4:65:d1:07:f2:
0d:55:06:08:85:1e:df:91:db:16:cd:f0:6a:de:1e:48:92:81:
3e:40:49:01:90:4c:d9:de:25:48:4d:4d:2f:36:16:4f:55:0a:
f0:1c:f7:42:86:be:d9:3a:f3:fb:14:95:15:4b:76:40:3e:74:
17:2f:f1:f7:c8:67:1e:c1:85:b1:05:e4:0a:7d:a0:a0:8b:54:
39:93:31:a6:71:4c:e5:93:dd:e1:61:4c:c8:55:e8:12:d7:4e:
0f:86:57:d9:11:8c:16:97:49:5c:42:6f:f0:d5:7d:e1:47:cd:
8c:fc:5f:f9:8d:31:22:6f:29:e1:6f:e0:5d:2b:da:69:a5:36:
53:a8:e6:a5:b4:e0:16:2d:c6:3e:8f:92:34:50:ac:05:e8:3c:
56:8a:e0:ca:e2:54:26:43:6d:17:00:c5:aa:b2:2a:f2:32:c8:
4e:70:4f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:14:51 2025 by rpki-client