Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS154185.roa
File: AS154185.roa (raw, json)
Hash identifier: Hz1a8Z7VmKZUqoXfCIVLz6l4lGXHSYpbfiWHZSR+hvA=
Subject key identifier: 60:4E:53:55:7D:7E:FF:63:25:9C:87:12:25:A3:43:1C:E5:3F:F7:4E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5BA76186667F6DDFA4537A2E72F1D10248D5F537
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS154185.roa
Signing time: Tue 04 Aug 2026 01:30:12 +0000
ROA not before: Tue 04 Aug 2026 01:25:12 +0000
ROA not after: Tue 03 Aug 2027 01:30:12 +0000
asID: 154185
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a7:61:86:66:7f:6d:df:a4:53:7a:2e:72:f1:d1:02:48:d5:f5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 4 01:25:12 2026 GMT
Not After : Aug 3 01:30:12 2027 GMT
Subject: CN=604E53557D7EFF63259C871225A3431CE53FF74E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:48:93:5b:b7:c3:7c:90:08:c9:d6:c4:53:
34:47:ed:57:3e:d9:75:51:84:24:06:59:e8:da:8f:
e8:00:05:a9:4a:d6:41:c6:69:73:be:a5:c5:0b:71:
4a:1e:28:4e:70:c3:27:60:e3:bf:29:73:45:83:c3:
11:ac:2c:d6:de:5a:2c:32:cb:0d:d2:54:52:21:80:
9e:cb:42:e8:d0:b9:d8:5d:bc:83:a0:8b:eb:19:4a:
e5:6f:9c:9b:be:15:3f:b4:7c:51:c6:2f:48:6d:cb:
5e:59:98:ac:fd:ad:dd:23:cb:39:a9:21:62:1e:8e:
ce:2a:36:c7:ae:46:59:29:b7:8f:e7:50:09:b1:18:
ef:f7:bc:77:34:0b:7a:ca:3d:c8:36:2e:f7:a4:6b:
80:5b:70:a0:a1:37:3c:c7:ca:de:6e:e6:fd:ef:85:
2d:22:df:1c:71:18:f9:29:1d:07:40:7c:05:d1:7d:
4f:44:7c:ee:76:19:25:6b:84:eb:aa:43:54:3d:66:
d3:f2:19:3c:5d:bb:8d:63:69:ba:3c:d1:82:52:91:
20:b4:0c:8d:a4:86:80:78:27:9b:1d:de:f2:39:18:
f5:13:5d:bc:28:03:a7:86:29:9c:8e:9b:d2:13:f4:
11:e2:0f:0e:4a:b2:6e:14:13:c8:0f:cd:92:fc:26:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:53:55:7D:7E:FF:63:25:9C:87:12:25:A3:43:1C:E5:3F:F7:4E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS154185.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
9a:5b:00:9d:b7:fe:01:53:8e:78:14:9e:3a:6d:45:87:48:77:
04:16:0b:3f:be:ab:af:be:3d:e2:95:75:55:0d:1a:f1:17:09:
fa:e2:08:be:42:31:5b:9d:d1:33:f4:98:7b:54:f5:84:74:53:
99:16:16:2d:3b:46:d5:5b:7f:c3:c3:79:b1:01:15:27:ba:a6:
32:db:6c:92:82:07:28:a7:ac:3b:b0:98:be:f6:bc:8a:6a:5d:
2f:17:5a:3b:e8:be:ef:eb:84:37:e0:8c:20:4c:05:64:39:05:
88:15:af:bd:7a:80:09:11:47:e6:c3:0b:ce:7e:38:a7:1a:50:
06:b9:1d:52:8b:43:10:d4:00:8a:7d:37:b0:6c:28:79:34:88:
34:ae:82:7c:01:48:dd:61:4e:e0:ed:38:38:dd:5e:8b:70:8f:
a2:ea:c2:35:46:a0:6b:16:37:7f:5d:81:28:eb:1b:f0:4f:7c:
fa:7e:f0:12:43:18:4e:fc:31:b5:be:33:ec:b7:73:61:1e:b9:
05:e6:03:61:ef:b3:f9:b3:5a:d0:b8:41:b5:81:78:76:5c:aa:
28:66:a8:74:91:cf:08:41:da:c7:1e:d1:53:b3:f3:1c:41:60:
0d:62:ff:9d:1b:7c:c7:bb:52:b2:7b:2b:d9:8e:d9:9e:26:05:
1a:fb:8d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:21 2026 by rpki-client