Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207941.roa
File: AS207941.roa (raw, json)
Hash identifier: z4fLVNL/7fwNWYDaZnx+uXTz24tHG7MbtE0hNfYKXAU=
Subject key identifier: 24:B7:1B:09:80:67:E4:B1:E5:1A:4C:C6:14:96:25:E4:30:15:47:63
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 56601EB31CB9BBA3967318A792CC282E4210FE4C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207941.roa
Signing time: Tue 19 May 2026 04:03:25 +0000
ROA not before: Tue 19 May 2026 03:58:25 +0000
ROA not after: Tue 18 May 2027 04:03:25 +0000
asID: 207941
IP address blocks: 2a0f:9400:772b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:60:1e:b3:1c:b9:bb:a3:96:73:18:a7:92:cc:28:2e:42:10:fe:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 03:58:25 2026 GMT
Not After : May 18 04:03:25 2027 GMT
Subject: CN=24B71B098067E4B1E51A4CC6149625E430154763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:55:92:52:5d:a2:6a:ae:35:b7:bc:de:2c:
38:97:af:65:bc:66:06:a4:2f:d2:b9:8c:53:89:60:
fc:07:1a:de:31:8c:cc:b8:bd:25:c8:3c:95:75:8b:
d3:f0:41:72:8c:8c:27:4b:84:83:7c:da:1b:28:9e:
36:ea:03:7c:22:84:6f:4a:6c:9d:b1:aa:fe:08:9f:
4b:68:91:20:6d:4d:46:56:3a:3f:67:98:bf:51:f8:
33:f7:dc:bd:e9:f3:74:25:69:de:2f:88:3b:f9:a5:
73:15:28:9f:17:89:e1:55:39:e4:22:58:44:51:b1:
76:e8:2a:df:51:b4:d4:2b:cb:92:6a:c3:c2:6a:65:
6d:01:e7:ce:8f:cb:e1:55:af:2e:cd:5a:ad:b1:65:
35:a7:d4:ba:f7:98:e2:01:eb:5d:d9:78:bc:3f:97:
ba:23:8d:a7:8f:a3:74:c9:41:6e:81:23:e0:16:69:
7d:38:3a:3c:da:69:b5:41:3e:0d:6d:8a:40:6a:74:
5a:9a:d9:55:c5:11:ad:04:56:1a:7a:ba:9d:30:a2:
ad:3c:d6:76:33:a3:ab:e6:49:f1:e1:21:49:85:2d:
c4:48:f8:80:42:46:aa:4a:67:a2:40:b2:4d:12:2b:
16:6d:65:1b:ba:3e:08:8e:6a:75:25:1d:0d:ce:23:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B7:1B:09:80:67:E4:B1:E5:1A:4C:C6:14:96:25:E4:30:15:47:63
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:772b::/48
Signature Algorithm: sha256WithRSAEncryption
80:83:bc:bc:f9:95:cc:9e:87:22:91:be:fc:60:82:43:ea:0c:
df:54:57:9c:f4:ad:b0:72:2b:9e:4f:4a:13:4e:c9:a0:65:86:
2f:08:17:35:c7:82:32:28:11:71:3f:02:9a:fb:8c:13:4e:f2:
94:c9:ca:35:cf:a9:fe:65:97:e2:8f:be:8c:de:81:13:e9:ee:
ad:27:8e:d4:f4:d3:c0:a2:c7:ab:13:a6:84:e4:f3:c0:8b:bb:
c6:51:0f:57:77:41:fc:88:26:a7:da:42:36:2b:9b:f2:57:ef:
bd:de:60:72:db:d2:e9:78:16:97:27:b7:a1:92:84:bd:95:79:
70:29:41:12:79:51:a1:63:38:5a:ac:36:d2:e5:ca:c2:c8:bb:
57:06:a7:cf:47:a4:8a:d6:e8:4f:43:42:cb:99:c1:c9:78:a5:
5a:a4:0f:62:70:b8:ef:c3:4e:15:ae:4d:13:5c:9f:6e:67:1a:
a1:1a:55:ec:d1:80:a5:34:44:0d:da:24:0a:ae:5c:e1:dc:7b:
4c:22:3b:55:d7:20:df:da:9a:e5:74:44:ca:25:03:61:52:42:
ad:62:3b:48:ce:72:8d:e6:47:38:bb:b7:dd:27:e5:26:ce:c6:
f8:a5:a2:9a:77:c9:c8:7b:92:af:20:67:0d:02:58:d4:50:06:
fd:c3:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:42 2026 by rpki-client