Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS8772.roa
File: AS8772.roa (raw, json)
Hash identifier: NMhKoq11WhYsYppqIF/DoZm+gKCFJfOJU740MgS3eg8=
Subject key identifier: B3:FB:6D:8B:FB:40:42:B4:EE:F6:BC:64:0B:71:D2:1D:7E:36:FA:F6
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5FBC49503A5A37461A2897E807D7E528CF0AE450
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS8772.roa
Signing time: Mon 24 Aug 2026 04:31:08 +0000
ROA not before: Mon 24 Aug 2026 04:26:08 +0000
ROA not after: Mon 23 Aug 2027 04:31:08 +0000
asID: 8772
IP address blocks: 2a0f:9400:6170::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:bc:49:50:3a:5a:37:46:1a:28:97:e8:07:d7:e5:28:cf:0a:e4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 24 04:26:08 2026 GMT
Not After : Aug 23 04:31:08 2027 GMT
Subject: CN=B3FB6D8BFB4042B4EEF6BC640B71D21D7E36FAF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8e:d8:b9:41:02:53:46:cc:d6:2c:d4:22:f0:
2f:db:e0:a1:97:b4:08:2b:68:0b:3b:f0:4c:67:aa:
eb:df:e2:05:93:89:b5:d6:00:87:45:2d:53:23:66:
f9:33:53:5f:b0:82:39:54:68:ff:53:23:bf:18:d7:
ce:f9:69:4a:03:aa:1a:26:ed:17:e1:54:f3:72:5a:
c8:db:02:e5:57:9c:da:f9:b2:9c:03:ad:9e:f0:fa:
09:3f:b2:1c:cd:20:0c:95:fe:19:cf:ef:56:44:e2:
94:9e:65:25:da:34:d1:cd:f0:f8:58:af:a9:2b:be:
2a:22:bd:77:59:b8:dc:6b:bd:92:c0:01:c6:0b:33:
f3:f1:62:6e:59:d3:e7:c5:35:0d:7b:1c:b5:99:49:
1b:f9:e2:6d:cd:a7:36:e6:fe:11:8b:37:5f:10:f6:
6c:9c:5b:a2:7f:84:50:2c:f5:a7:f9:b3:41:e0:c1:
9a:a8:b9:5c:8d:27:9d:6e:b9:c2:54:ae:31:93:26:
e9:81:80:09:ff:52:d1:2f:eb:b8:e5:b8:2d:1e:97:
4e:a7:2f:c7:6f:34:e8:e2:4e:4f:0a:11:86:e3:70:
6d:96:fb:52:17:5f:8e:61:45:c2:4c:7f:62:0b:20:
6f:ef:0b:24:16:5d:43:af:9e:06:95:15:46:1f:43:
85:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FB:6D:8B:FB:40:42:B4:EE:F6:BC:64:0B:71:D2:1D:7E:36:FA:F6
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS8772.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6170::/44
Signature Algorithm: sha256WithRSAEncryption
6c:ae:3b:55:8c:60:eb:1b:1b:31:c9:cb:71:e6:bc:00:9d:e7:
f2:b6:a6:0f:99:71:ca:d1:f8:a4:09:c9:6b:f5:16:ad:f0:1f:
d4:25:ce:ba:fd:97:5c:70:a3:a5:57:f0:a1:4f:87:00:63:2e:
2c:3c:86:b5:67:87:cc:15:47:b9:7f:27:91:e2:bc:98:6c:af:
b7:9b:cf:02:b2:25:50:1a:83:3f:53:af:a9:53:4a:36:de:e8:
5a:8f:52:52:cc:98:d5:b5:e4:c2:cc:14:09:d5:53:85:e6:89:
4b:0b:4f:36:88:15:49:5e:f0:f0:e6:9a:38:0b:01:f3:ee:92:
0c:94:b7:f3:bb:b5:c9:c5:1d:64:45:d2:26:ad:9b:58:b9:83:
36:de:2a:62:71:fa:fa:de:dc:ca:31:40:00:c3:3a:22:9d:86:
0d:4c:74:cf:75:04:bc:4c:d9:7a:84:ad:ea:5c:61:ff:bf:2b:
fc:86:5c:02:61:22:2f:93:dd:d7:67:0c:4b:fd:49:c2:b5:15:
23:4e:4c:d1:11:ce:5e:df:e1:72:b5:37:56:9b:6b:af:46:53:
02:02:86:e0:d4:5b:4c:b8:ab:81:9b:1b:79:47:fd:d8:08:58:
23:e6:df:74:04:6d:10:2a:b9:f1:b2:95:20:89:44:83:f6:d0:
75:a0:97:d8
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIUX7xJUDpaN0YaKJfoB9flKM8K5FAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjA4MjQwNDI2MDhaFw0yNzA4MjMwNDMxMDhaMDMxMTAvBgNV
BAMTKEIzRkI2RDhCRkI0MDQyQjRFRUY2QkM2NDBCNzFEMjFEN0UzNkZBRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmjti5QQJTRszWLNQi8C/b4KGX
tAgraAs78Exnquvf4gWTibXWAIdFLVMjZvkzU1+wgjlUaP9TI78Y1875aUoDqhom
7RfhVPNyWsjbAuVXnNr5spwDrZ7w+gk/shzNIAyV/hnP71ZE4pSeZSXaNNHN8PhY
r6krvioivXdZuNxrvZLAAcYLM/PxYm5Z0+fFNQ17HLWZSRv54m3Npzbm/hGLN18Q
9mycW6J/hFAs9af5s0HgwZqouVyNJ51uucJUrjGTJumBgAn/UtEv67jluC0el06n
L8dvNOjiTk8KEYbjcG2W+1IXX45hRcJMf2ILIG/vCyQWXUOvngaVFUYfQ4VNAgMB
AAGjggHHMIIBwzAdBgNVHQ4EFgQUs/tti/tAQrTu9rxkC3HSHX42+vYwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBaBggrBgEFBQcBCwROMEwwSgYIKwYBBQUHMAuG
PnJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzg3NzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB
BQUHAQcBAf8EEzARMA8EAgACMAkDBwQqD5QAYXAwDQYJKoZIhvcNAQELBQADggEB
AGyuO1WMYOsbGzHJy3HmvACd5/K2pg+ZccrR+KQJyWv1Fq3wH9Qlzrr9l1xwo6VX
8KFPhwBjLiw8hrVnh8wVR7l/J5HivJhsr7ebzwKyJVAagz9Tr6lTSjbe6FqPUlLM
mNW15MLMFAnVU4XmiUsLTzaIFUle8PDmmjgLAfPukgyUt/O7tcnFHWRF0iatm1i5
gzbeKmJx+vre3MoxQADDOiKdhg1MdM91BLxM2XqErepcYf+/K/yGXAJhIi+T3ddn
DEv9ScK1FSNOTNERzl7f4XK1N1aba69GUwIChuDUW0y4q4GbG3lH/dgIWCPm33QE
bRAqufGylSCJRIP20HWgl9g=
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:23:24 2026 by rpki-client