Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS134677.roa
File: AS134677.roa (raw, json)
Hash identifier: JF3cdxz/FPMm+y9GTtb+4qOSZBQoeKZaDHkG9Mf4Afc=
Subject key identifier: 9E:86:E8:60:95:0E:47:E6:A9:15:40:9B:37:87:07:E0:28:72:76:17
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 359E7350155DD793C9468FE6C1B0651049346561
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS134677.roa
Signing time: Wed 20 May 2026 04:13:43 +0000
ROA not before: Wed 20 May 2026 04:08:43 +0000
ROA not after: Wed 19 May 2027 04:13:43 +0000
asID: 134677
IP address blocks: 2a0f:9400:7390::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:9e:73:50:15:5d:d7:93:c9:46:8f:e6:c1:b0:65:10:49:34:65:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 20 04:08:43 2026 GMT
Not After : May 19 04:13:43 2027 GMT
Subject: CN=9E86E860950E47E6A915409B378707E028727617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:68:de:d5:9f:ff:70:2a:c3:58:f9:79:ec:6b:
b5:b8:c0:8a:0e:ec:99:23:56:a0:26:c6:4e:06:e2:
fe:96:e5:c5:ae:00:54:17:77:8a:6a:d7:f1:e7:5d:
9b:9b:74:21:45:b3:0f:0c:fb:9f:07:3b:74:55:8e:
dd:cd:91:83:5f:76:3f:5c:73:7b:23:be:c1:f2:49:
ed:79:cb:74:fc:b6:2a:33:b9:7e:61:a8:62:d4:28:
41:b0:1f:05:62:1d:1a:c8:c2:64:fc:20:17:0a:6a:
e4:22:84:09:81:53:94:ac:e5:b3:a4:18:ad:48:21:
96:6d:4b:b8:22:e6:ec:3d:1f:e9:cd:45:70:f3:17:
63:74:41:9f:6a:e0:2c:10:82:1e:b0:f3:f1:76:fe:
fc:de:a2:0b:6a:bb:04:ff:b0:2b:98:50:e1:d0:e6:
dc:2d:b2:a4:20:90:98:a6:51:e1:e0:c6:8f:dd:fe:
34:23:34:34:77:6e:d3:7b:bf:f8:5c:23:0e:51:14:
de:68:7b:07:7c:16:a2:d2:1f:ad:e4:f5:bf:e9:c6:
05:b7:87:76:b1:c0:61:ae:a6:35:8f:b3:3f:e9:33:
7b:aa:c7:fc:70:4b:2f:03:a4:3f:ba:8d:58:96:19:
69:4a:5c:51:64:7b:2f:53:8b:11:08:4e:a9:24:3a:
f9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:86:E8:60:95:0E:47:E6:A9:15:40:9B:37:87:07:E0:28:72:76:17
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS134677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7390::/44
Signature Algorithm: sha256WithRSAEncryption
9a:47:d9:bc:05:21:fe:99:9d:8d:69:d9:f4:c8:f7:90:25:4d:
e1:95:7f:3e:8a:58:65:7d:4c:78:22:90:ab:8b:7d:5a:e1:7d:
67:fc:a2:1f:3f:c6:a6:f1:42:db:c7:39:d1:fd:9c:2d:e7:64:
18:01:7b:72:20:e3:af:64:47:57:11:9a:ff:71:ef:c8:34:be:
23:1a:3a:f9:a2:53:96:8b:33:0a:3e:ba:8c:a1:b6:e2:12:bb:
87:57:17:7d:80:a7:04:4d:2b:a2:62:4a:97:31:c5:3e:ca:f4:
3b:a6:80:e6:ba:73:58:7a:3a:d0:12:c6:a3:32:fa:ba:1d:17:
bb:62:7b:61:9d:27:1f:16:6f:76:b0:88:e7:78:f4:0a:d0:a0:
9e:16:b6:71:d9:30:57:53:32:47:f2:c2:7c:64:42:5d:bd:20:
27:f2:33:34:df:6b:2a:18:55:02:53:46:f4:9e:ee:0b:86:85:
fc:5a:91:db:b2:3e:96:67:42:86:51:f5:d9:35:60:1b:e1:65:
53:34:0b:93:39:12:43:e8:2b:e8:3f:f5:36:98:37:5c:59:92:
2e:9a:1c:09:91:d5:36:78:b0:ad:50:7c:38:14:19:8d:a0:5c:
53:72:99:15:01:27:42:74:41:73:7b:46:72:2b:81:22:a4:6e:
a8:18:e6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:50 2026 by rpki-client