Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: 24CV0Owq1xKIl82Wx1rE6DMxjP0RJ5l1lQCDD+4o8iM=
Subject key identifier: D1:2C:6A:E3:70:FA:FD:67:BC:DF:4F:06:6A:9C:FD:89:BE:9C:0C:56
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2A1085F3AF34576B8A2DED4EFDB71CB7D6C760FC
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS26042.roa
Signing time: Wed 20 May 2026 19:16:22 +0000
ROA not before: Wed 20 May 2026 19:11:22 +0000
ROA not after: Wed 19 May 2027 19:16:22 +0000
asID: 26042
IP address blocks: 2a0f:9400:611f::/48 maxlen: 48
2a0f:9400:6939::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:10:85:f3:af:34:57:6b:8a:2d:ed:4e:fd:b7:1c:b7:d6:c7:60:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 20 19:11:22 2026 GMT
Not After : May 19 19:16:22 2027 GMT
Subject: CN=D12C6AE370FAFD67BCDF4F066A9CFD89BE9C0C56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:8b:90:a1:3d:ab:e6:be:0f:2d:df:c9:10:
4e:cc:ed:15:e8:46:4e:c2:44:94:59:3f:8f:1d:d2:
f0:51:cf:92:b1:c1:51:1a:86:9f:91:51:55:d4:37:
2d:41:8b:8d:97:4d:37:69:8a:97:d1:41:12:a2:f3:
50:0a:06:fe:27:4e:6a:6f:b3:3a:e4:e3:ba:ee:d5:
c0:a7:04:39:d4:da:d2:de:ea:46:db:41:78:03:af:
75:a1:84:53:f9:a5:05:2c:46:cc:74:f7:df:a0:f4:
ea:7c:06:c9:de:6e:62:91:f5:22:fe:ab:71:0b:32:
e4:5d:c8:56:89:ff:ae:b7:12:c6:9e:56:d2:41:e1:
2f:c2:49:58:59:11:7d:c6:1c:f7:cb:0f:0b:b9:95:
0f:ae:c1:3a:22:d1:75:f9:a8:53:f4:28:f1:25:75:
e0:03:0c:eb:d8:ef:38:08:79:d8:20:41:f1:17:3c:
d9:01:84:8e:15:66:b4:95:18:30:d2:a1:75:eb:d4:
b3:fe:23:33:f7:f3:76:34:1c:37:35:48:8a:30:d5:
3e:a6:fb:83:e7:37:ed:00:56:bb:f7:a7:37:72:1a:
5e:81:d1:a5:ef:3d:94:cc:3d:55:84:ad:82:04:11:
86:b8:2f:16:93:9f:76:0a:64:1a:7a:96:56:49:60:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2C:6A:E3:70:FA:FD:67:BC:DF:4F:06:6A:9C:FD:89:BE:9C:0C:56
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:611f::/48
2a0f:9400:6939::/48
Signature Algorithm: sha256WithRSAEncryption
08:4e:f0:62:a0:10:c4:8a:01:88:af:47:68:b0:08:0d:89:0c:
04:f8:41:bc:58:7a:a0:f1:98:fa:ec:e5:eb:bd:48:53:eb:06:
11:23:d0:c3:28:09:14:9f:50:54:f8:ac:40:58:31:be:ad:f2:
f7:18:35:ce:51:0a:c2:aa:7d:0d:20:16:a0:73:d1:dd:78:33:
86:2f:f6:f8:30:97:2e:94:4d:70:45:dc:cb:d9:ec:7f:da:06:
81:13:1f:8c:3a:8a:f4:9b:33:80:4b:0f:e0:d3:f9:d3:8c:49:
27:03:4c:b4:4a:5b:3b:1c:58:c9:6c:b8:65:77:18:d0:04:b7:
06:f7:ee:c8:b2:34:86:ce:cf:74:57:b7:5b:be:9a:02:ac:62:
ee:45:f5:59:93:5d:00:43:4c:08:9e:85:bc:13:7c:09:00:bf:
e9:e7:99:07:b2:5a:eb:5a:ba:58:2b:45:65:21:3d:c5:b1:c2:
c1:bb:86:72:8a:ad:11:21:08:47:79:0d:73:27:12:96:bb:3a:
08:b5:9c:10:c3:eb:fd:5c:32:29:00:1b:3c:84:1e:ae:d0:54:
f2:73:f7:7d:66:1b:29:2a:20:01:ba:c5:3f:c4:fb:0b:a5:fb:
1c:46:fb:b3:e2:54:d1:da:39:70:e9:3f:31:4d:9c:95:e3:6b:
b7:45:9a:ca
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUKhCF8680V2uKLe1O/bcct9bHYPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjA1MjAxOTExMjJaFw0yNzA1MTkxOTE2MjJaMDMxMTAvBgNV
BAMTKEQxMkM2QUUzNzBGQUZENjdCQ0RGNEYwNjZBOUNGRDg5QkU5QzBDNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/64uQoT2r5r4PLd/JEE7M7RXo
Rk7CRJRZP48d0vBRz5KxwVEahp+RUVXUNy1Bi42XTTdpipfRQRKi81AKBv4nTmpv
szrk47ru1cCnBDnU2tLe6kbbQXgDr3WhhFP5pQUsRsx099+g9Op8BsnebmKR9SL+
q3ELMuRdyFaJ/663EsaeVtJB4S/CSVhZEX3GHPfLDwu5lQ+uwToi0XX5qFP0KPEl
deADDOvY7zgIedggQfEXPNkBhI4VZrSVGDDSoXXr1LP+IzP383Y0HDc1SIow1T6m
+4PnN+0AVrv3pzdyGl6B0aXvPZTMPVWErYIEEYa4LxaTn3YKZBp6llZJYJE/AgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQU0Sxq43D6/We8308Gapz9ib6cDFYwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzI2MDQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsG
AQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg+UAGEfAwcAKg+UAGk5MA0GCSqGSIb3
DQEBCwUAA4IBAQAITvBioBDEigGIr0dosAgNiQwE+EG8WHqg8Zj67OXrvUhT6wYR
I9DDKAkUn1BU+KxAWDG+rfL3GDXOUQrCqn0NIBagc9HdeDOGL/b4MJculE1wRdzL
2ex/2gaBEx+MOor0mzOASw/g0/nTjEknA0y0Sls7HFjJbLhldxjQBLcG9+7IsjSG
zs90V7dbvpoCrGLuRfVZk10AQ0wInoW8E3wJAL/p55kHslrrWrpYK0VlIT3FscLB
u4Zyiq0RIQhHeQ1zJxKWuzoItZwQw+v9XDIpABs8hB6u0FTyc/d9ZhspKiABusU/
xPsLpfscRvuz4lTR2jlw6T8xTZyV42u3RZrK
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:04:49 2026 by rpki-client