Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS19318.roa
File: AS19318.roa (raw, json)
Hash identifier: zOFAbvTd3GI2HXhqQvBokPAdSjc33FHoXMXLK3qQuuo=
Subject key identifier: 62:85:B2:D8:42:40:9D:D6:EA:F6:DD:20:FA:0B:F0:DF:81:9A:CD:19
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 240B6CD13A675D8CC3D04ACE1FFCAB669E9E5A88
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS19318.roa
Signing time: Fri 02 Oct 2026 00:31:51 +0000
ROA not before: Fri 02 Oct 2026 00:26:51 +0000
ROA not after: Fri 01 Oct 2027 00:31:51 +0000
asID: 19318
IP address blocks: 2a0f:9400:7e03::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0b:6c:d1:3a:67:5d:8c:c3:d0:4a:ce:1f:fc:ab:66:9e:9e:5a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 2 00:26:51 2026 GMT
Not After : Oct 1 00:31:51 2027 GMT
Subject: CN=6285B2D842409DD6EAF6DD20FA0BF0DF819ACD19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:0d:f8:b2:f8:3a:f2:5a:02:60:86:c5:66:
fe:b1:4b:4d:63:98:c0:bf:0e:4d:aa:b6:02:bf:79:
db:ee:61:60:69:04:7a:ad:a9:05:ab:60:a5:31:d9:
13:f0:02:94:9f:9d:97:b6:e4:cb:dc:f4:5f:88:f3:
dc:45:82:ec:9c:7a:a2:4e:b4:fb:6b:56:cd:13:7b:
be:dd:1a:5c:9c:b9:37:9f:5e:7b:23:c5:e9:27:f6:
d8:f0:b4:ce:76:e4:ea:bb:49:b8:66:d0:dc:68:34:
1c:94:c4:44:69:70:b7:e0:3f:34:0f:73:bf:48:e3:
cf:8f:1b:42:43:e7:d8:c9:b6:15:54:e6:b9:5a:7f:
35:de:37:5b:71:25:77:89:1d:99:45:a1:43:a5:60:
e1:f2:ea:fd:ab:ad:d6:ac:2f:de:60:ef:62:81:de:
78:d6:16:da:ac:b7:58:6d:a6:8b:7d:5b:b9:1d:62:
f6:10:53:05:ab:e7:58:85:1e:16:6a:1b:fe:17:7f:
30:5d:b6:0b:ed:d4:92:11:3d:6f:c3:c9:75:58:da:
9e:4b:d9:31:0c:05:7b:7e:c8:c0:0f:4c:4d:44:56:
d8:ba:a8:2c:9e:65:4f:06:7b:cc:a1:ca:c8:77:e9:
a2:e5:a6:26:3b:ce:1b:7f:00:ad:58:0e:5c:57:f7:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:85:B2:D8:42:40:9D:D6:EA:F6:DD:20:FA:0B:F0:DF:81:9A:CD:19
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS19318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e03::/48
Signature Algorithm: sha256WithRSAEncryption
80:e3:90:bf:a2:aa:ab:dc:a9:ec:98:25:e8:71:2a:e3:22:ea:
9b:f1:10:9a:95:76:70:d9:64:28:b7:f0:3b:c0:7f:11:e0:2b:
a4:75:0d:d1:c9:cc:07:62:11:16:fe:6b:6b:3f:13:65:b7:75:
71:46:4a:b5:ac:69:39:e0:10:4a:b0:ae:50:b8:83:06:73:6a:
d6:46:43:5e:a7:bc:8a:ea:06:b8:8e:2b:2c:68:50:55:1d:7c:
08:ad:d2:13:15:58:b3:d8:8b:88:ed:22:54:eb:dc:b8:91:34:
aa:32:60:ca:1a:0c:84:79:d7:78:9e:ea:df:f6:15:d7:fe:3a:
42:42:48:eb:23:da:22:b5:9c:dd:d2:9e:b1:9b:d8:00:41:1a:
1f:0a:5b:85:11:55:ff:49:85:4a:e6:9e:50:8b:56:3b:7c:ae:
dd:e6:5b:00:0b:71:e9:fd:7b:5b:46:0c:6b:b8:5d:1a:cd:1b:
b1:7a:ea:07:f6:c7:e1:1b:b8:31:89:0f:d8:ae:36:0d:91:95:
5a:8c:e1:1e:b2:b9:2b:ff:9c:6a:c9:f6:42:39:08:8e:a2:1b:
58:25:c4:0c:19:90:ce:16:77:2b:ca:fa:5a:e6:52:1b:62:84:
20:3b:2c:02:ac:f0:c5:a0:d4:5b:27:b0:29:32:e6:44:9f:a5:
dc:b3:10:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:21:40 2026 by rpki-client