Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150645.roa
File: AS150645.roa (raw, json)
Hash identifier: Exn+z2rzXz65jlQNssVORtSq9vLCsf0L1JB7nXho6kM=
Subject key identifier: 5C:39:BB:D9:33:B5:67:9F:CC:12:EB:6E:02:96:70:FA:DF:34:18:7B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 48365C3E7662CE36099053F0F5CEECE549E6F31D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150645.roa
Signing time: Fri 05 Jun 2026 22:25:08 +0000
ROA not before: Fri 05 Jun 2026 22:20:08 +0000
ROA not after: Fri 04 Jun 2027 22:25:08 +0000
asID: 150645
IP address blocks: 2a0f:9400:691d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:36:5c:3e:76:62:ce:36:09:90:53:f0:f5:ce:ec:e5:49:e6:f3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 5 22:20:08 2026 GMT
Not After : Jun 4 22:25:08 2027 GMT
Subject: CN=5C39BBD933B5679FCC12EB6E029670FADF34187B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:0f:ef:4a:f7:ef:ff:2b:61:0a:5a:5f:75:
0f:1c:11:40:53:0a:bf:1a:cc:2b:71:a1:19:eb:82:
0a:1e:47:62:26:9b:d0:e1:8d:12:f4:b1:db:f7:c5:
1c:b0:4b:3b:ce:1b:ab:97:06:7d:b6:ff:6b:62:2f:
77:72:16:c2:2a:3c:f9:0f:2c:ed:d3:7e:e1:26:aa:
71:dd:2d:76:ea:32:44:19:5e:27:b3:47:e6:7b:fb:
b3:f0:e1:34:a8:c6:2e:67:2c:af:cc:7f:6f:1b:71:
22:0a:53:7d:12:f2:68:7b:e3:e7:97:32:2f:fa:42:
b1:3f:45:60:c4:a2:00:63:02:c8:8e:da:16:9e:69:
a8:e3:0e:b3:c7:d1:15:53:81:60:18:9c:2f:66:44:
80:ae:81:77:ff:d6:a8:bd:99:3b:f5:d2:d2:2d:ae:
57:f7:61:36:12:50:be:97:b1:f6:a3:5b:29:d7:9c:
82:81:ff:e2:c4:be:df:1a:91:69:d7:b0:c9:5c:95:
78:cb:e7:d6:b5:84:a5:e8:cf:1d:56:ae:f4:64:23:
80:22:d8:6d:20:a8:f7:2d:d8:21:17:e8:36:b5:ca:
9f:44:6b:c4:49:5d:4a:de:87:4c:99:e4:f2:6e:fe:
17:50:03:8a:34:1e:a9:b8:f0:ec:10:7d:af:5f:f2:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:39:BB:D9:33:B5:67:9F:CC:12:EB:6E:02:96:70:FA:DF:34:18:7B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150645.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:691d::/48
Signature Algorithm: sha256WithRSAEncryption
05:a9:dd:30:0b:9f:da:d6:8e:7a:a6:ef:e8:57:d5:b7:4c:84:
15:23:b5:55:9e:b5:d8:3a:ac:a0:88:f5:cd:10:28:82:fb:a0:
50:19:3a:25:ce:35:64:75:7f:fa:4e:c6:1f:4e:5b:45:a2:39:
7e:91:4d:b0:93:80:05:37:6e:8f:d1:34:56:16:c9:42:9f:8e:
d7:13:21:96:77:fa:ad:fb:81:27:95:3d:5a:ec:ee:b4:87:78:
0e:21:7b:66:7b:85:a1:c9:8d:b5:ec:38:c9:43:fe:2e:d0:29:
58:e7:3f:3a:60:c0:60:7e:8f:68:b6:1e:89:14:ae:2d:09:b2:
be:c5:56:74:a3:7d:5c:5a:00:3e:1a:5b:7e:db:fe:89:13:8a:
05:15:f6:43:1d:f3:78:11:4a:df:88:70:06:a9:ea:07:f7:12:
18:2f:d6:89:70:0f:9d:18:0c:c5:3e:34:ca:8f:78:b2:3f:f2:
10:2b:c9:7c:ce:34:43:c9:24:fd:75:10:03:66:88:44:7b:a8:
5e:2a:50:e2:1d:ab:d0:56:7b:a5:3b:ca:d6:0e:d1:65:5c:3e:
c7:22:4a:41:1b:5e:27:e0:2e:28:c1:82:58:ca:b4:e8:65:b8:
94:50:12:5a:ab:9b:ed:52:6a:90:b5:3d:b8:ce:8c:4d:38:47:
a1:26:27:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:23:52 2026 by rpki-client