Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS12792.roa
File:                     AS12792.roa (raw, json)
Hash identifier:          sd8gWzESBYNz/YWYwwBzomKSZ+50tjt01WEAu+/DqB4=
Subject key identifier:   01:A4:A0:C6:86:48:E5:30:29:69:53:F7:D1:BD:B5:C9:3B:38:90:53
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       46451DF975576497FA3EAF40078EA9794805B856
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS12792.roa
Signing time:             Thu 04 Jun 2026 14:26:58 +0000
ROA not before:           Thu 04 Jun 2026 14:21:58 +0000
ROA not after:            Thu 03 Jun 2027 14:26:58 +0000
asID:                     12792
IP address blocks:        2a0f:9400:6170::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:45:1d:f9:75:57:64:97:fa:3e:af:40:07:8e:a9:79:48:05:b8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Jun  4 14:21:58 2026 GMT
            Not After : Jun  3 14:26:58 2027 GMT
        Subject: CN=01A4A0C68648E530296953F7D1BDB5C93B389053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:fd:8b:7a:7f:90:06:53:01:e3:c4:f8:a1:
                    55:fb:0f:8e:62:a7:d2:68:3f:82:70:e5:97:7a:f4:
                    38:90:26:7b:68:54:f8:fe:29:c7:c6:9d:7e:c0:61:
                    63:41:e5:c7:7a:61:13:16:a8:b3:ec:46:b6:f5:dc:
                    7d:b7:77:b1:b0:b0:de:49:0d:1d:20:eb:15:1d:74:
                    18:8f:56:99:0a:c7:2b:7b:4f:1a:e7:1e:4e:b4:6c:
                    21:df:d3:b9:a6:ef:a5:1a:b0:9e:63:ab:eb:4b:a9:
                    ef:e9:4d:ed:91:d9:c3:6a:0d:e4:f6:e4:ff:4a:fb:
                    d5:b5:fe:9f:64:b9:92:7f:4d:66:fb:15:97:be:ea:
                    5c:34:8a:8f:a7:55:d0:b8:d9:55:b6:95:e5:a3:8e:
                    49:31:df:18:c5:bb:75:a3:c5:6c:7f:c1:aa:da:d0:
                    87:1b:4f:2c:66:3b:4f:b5:8f:f9:ea:a6:43:86:d6:
                    83:e5:19:ae:d3:8c:d6:0f:a1:a6:d0:2a:d3:80:24:
                    64:0f:ec:88:8e:c5:58:c0:6b:90:72:b3:bd:3a:c8:
                    f9:7f:0c:b5:73:15:f2:d5:c6:e6:26:89:b2:88:41:
                    73:5b:90:7a:af:62:0c:00:62:27:b8:f4:32:41:2d:
                    1a:11:c9:1e:31:de:6e:aa:29:22:f0:55:2f:56:82:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A4:A0:C6:86:48:E5:30:29:69:53:F7:D1:BD:B5:C9:3B:38:90:53
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS12792.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:6170::/44

    Signature Algorithm: sha256WithRSAEncryption
         88:d7:ed:fe:52:cf:29:23:57:be:9b:4c:17:76:4b:26:0e:5e:
         82:83:dd:19:a7:f6:d9:df:e4:82:f8:bd:d7:84:bd:bd:bc:8d:
         e0:93:75:7d:8f:17:a3:96:03:0c:1f:6b:ce:e4:1a:62:2a:8c:
         33:cb:df:4e:24:c7:ea:a7:0b:92:d0:8c:4a:e7:87:b2:e7:af:
         42:bd:f5:1e:ee:37:ee:71:66:90:71:cd:fe:5d:20:d3:34:20:
         2d:40:43:9f:01:2d:e8:d6:4c:44:f6:cb:38:98:d4:59:58:aa:
         95:b2:df:7e:f9:33:14:3b:57:0d:16:80:80:2b:1b:4c:0d:de:
         fc:4d:61:3f:d2:99:3e:0a:37:1c:61:4d:3b:d9:d5:bc:5e:3d:
         81:9d:4f:e3:be:48:9f:aa:b3:8b:b0:5e:ce:c1:b9:96:25:31:
         6a:10:0f:f0:85:cb:29:3a:13:4c:85:a6:b9:87:9f:0c:52:06:
         75:67:5e:9d:f5:83:3b:79:ee:69:8a:9a:f1:ff:37:4a:81:da:
         95:3e:34:81:1e:ac:5c:d5:2f:ac:d8:56:fe:59:91:30:ec:7d:
         f9:e6:28:ff:d0:4a:a8:7f:ec:37:11:c5:a7:76:dc:c8:33:38:
         b7:82:3d:b2:19:57:09:1e:69:db:7e:b6:08:57:9f:b3:f9:20:
         83:fc:f1:3b
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIURkUd+XVXZJf6Pq9AB46peUgFuFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjA2MDQxNDIxNThaFw0yNzA2MDMxNDI2NThaMDMxMTAvBgNV
BAMTKDAxQTRBMEM2ODY0OEU1MzAyOTY5NTNGN0QxQkRCNUM5M0IzODkwNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ov2Len+QBlMB48T4oVX7D45i
p9JoP4Jw5Zd69DiQJntoVPj+KcfGnX7AYWNB5cd6YRMWqLPsRrb13H23d7GwsN5J
DR0g6xUddBiPVpkKxyt7TxrnHk60bCHf07mm76UasJ5jq+tLqe/pTe2R2cNqDeT2
5P9K+9W1/p9kuZJ/TWb7FZe+6lw0io+nVdC42VW2leWjjkkx3xjFu3WjxWx/wara
0IcbTyxmO0+1j/nqpkOG1oPlGa7TjNYPoabQKtOAJGQP7IiOxVjAa5Bys706yPl/
DLVzFfLVxuYmibKIQXNbkHqvYgwAYie49DJBLRoRyR4x3m6qKSLwVS9Wgq+lAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUAaSgxoZI5TApaVP30b21yTs4kFMwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzEyNzkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg+UAGFwMA0GCSqGSIb3DQEBCwUAA4IB
AQCI1+3+Us8pI1e+m0wXdksmDl6Cg90Zp/bZ3+SC+L3XhL29vI3gk3V9jxejlgMM
H2vO5BpiKowzy99OJMfqpwuS0IxK54ey569CvfUe7jfucWaQcc3+XSDTNCAtQEOf
AS3o1kxE9ss4mNRZWKqVst9++TMUO1cNFoCAKxtMDd78TWE/0pk+CjccYU072dW8
Xj2BnU/jvkifqrOLsF7OwbmWJTFqEA/whcspOhNMhaa5h58MUgZ1Z16d9YM7ee5p
iprx/zdKgdqVPjSBHqxc1S+s2Fb+WZEw7H355ij/0Eqof+w3EcWndtzIMzi3gj2y
GVcJHmnbfrYIV5+z+SCD/PE7
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:50 2026 by rpki-client