Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204921.roa
File: AS204921.roa (raw, json)
Hash identifier: 9gH37iq4IwpcVtYfPlpjohCs2LOSaFOom98jzigwMF0=
Subject key identifier: 37:3A:50:A4:54:D6:8F:99:FF:D2:14:1F:C4:1A:E0:F4:F9:BB:D1:35
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 19A92BB9D82B2A21CE70F1652ECCABD2C659C9FC
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204921.roa
Signing time: Tue 03 Nov 2026 14:32:40 +0000
ROA not before: Tue 03 Nov 2026 14:27:40 +0000
ROA not after: Tue 02 Nov 2027 14:32:40 +0000
asID: 204921
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a9:2b:b9:d8:2b:2a:21:ce:70:f1:65:2e:cc:ab:d2:c6:59:c9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 3 14:27:40 2026 GMT
Not After : Nov 2 14:32:40 2027 GMT
Subject: CN=373A50A454D68F99FFD2141FC41AE0F4F9BBD135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:35:56:fd:74:f2:69:85:79:a0:24:4a:8b:
db:8b:85:0b:59:9e:c5:03:ed:60:88:2f:49:93:39:
2a:fa:38:85:af:b7:b2:3a:c8:04:2a:58:93:d1:09:
ee:cc:0d:fd:c3:c3:d3:4e:40:ab:92:f1:e9:02:5c:
5b:9f:b9:1a:ff:5c:98:0c:20:0f:76:eb:4e:9f:65:
82:48:21:08:8e:9d:2b:c0:fa:81:2b:2d:48:ca:6a:
ae:74:cf:02:82:02:65:25:82:fa:25:2a:1f:54:98:
ec:cd:e1:19:1a:bc:0f:a7:84:c8:a8:7c:d7:d9:b6:
77:d6:f5:78:bd:2e:f8:ca:0a:62:59:f7:1b:e6:21:
e2:a4:f9:ec:2c:ae:f2:2a:0b:c3:4e:0d:45:15:2e:
00:f6:d6:c5:28:ab:31:ba:b7:86:84:c9:03:83:2c:
92:49:37:c8:46:f8:87:cc:b8:b0:b2:16:ea:6a:d9:
d9:8b:3b:1f:57:88:61:6d:6e:10:ef:bf:3e:34:d5:
bd:0f:87:98:09:bb:13:22:fe:f7:d8:47:2d:62:68:
08:7f:bc:b6:4a:7f:c5:84:79:98:6b:91:1b:f5:2f:
45:3c:b4:9b:c6:87:f1:47:23:d4:c0:a5:18:d3:5f:
df:74:90:00:08:46:05:27:cb:55:d4:7e:31:52:7f:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3A:50:A4:54:D6:8F:99:FF:D2:14:1F:C4:1A:E0:F4:F9:BB:D1:35
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204921.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
94:36:97:bf:af:c4:02:44:48:ef:a0:8f:ab:55:17:ea:8f:f7:
1b:f0:28:c2:a5:1f:dc:28:e2:c1:37:b5:9b:18:c7:1f:00:ef:
9a:76:01:f6:97:60:3d:21:72:96:87:2d:5c:55:21:4e:a2:0c:
b1:ec:44:7e:97:a2:10:4b:c6:89:1d:39:ae:22:a4:bc:1b:6f:
ab:33:d0:e9:26:26:94:83:63:f0:68:9e:78:ed:56:15:68:fd:
fc:42:9e:44:26:e6:85:c7:d8:8d:c1:32:d2:ad:25:be:c6:80:
64:1b:9d:6a:67:ae:49:b1:08:c5:40:94:8f:33:a1:35:30:80:
db:32:b5:40:12:be:cc:23:7d:f5:0d:70:ab:b0:48:6d:c7:eb:
c5:4c:27:37:ee:62:98:b7:7e:02:6f:79:44:e5:d6:b1:b7:6e:
81:b2:3e:5c:d5:f2:0f:af:0b:ee:72:d6:f7:1d:fc:03:12:83:
cd:e6:ff:87:3e:d1:81:17:76:5c:ee:55:f5:12:52:4c:e2:65:
0b:e0:a4:d8:ca:9b:97:c8:9d:44:db:0b:13:c0:58:ba:4f:6c:
21:09:b1:8a:9f:92:66:00:0a:8a:3b:23:35:ab:1c:8a:b0:9d:
25:10:92:3b:96:df:44:ba:ca:c1:0a:ed:8e:43:a1:a9:3b:16:
32:44:87:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:17:53 2026 by rpki-client