Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: v8ecHlxKQ/9stB/n9C12S7GWoZF+l4/AoJCfEm+NERg=
Subject key identifier: E7:2F:BF:BD:16:07:87:B5:21:30:13:3E:88:A8:E6:C9:AE:C6:64:98
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 34D0F054BF6145386FC80D0BA0B62DEA9D000C1D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS31898.roa
Signing time: Thu 28 May 2026 02:55:57 +0000
ROA not before: Thu 28 May 2026 02:50:57 +0000
ROA not after: Thu 27 May 2027 02:55:57 +0000
asID: 31898
IP address blocks: 2a0f:9400:614d::/48 maxlen: 48
2a0f:9400:7389::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d0:f0:54:bf:61:45:38:6f:c8:0d:0b:a0:b6:2d:ea:9d:00:0c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 28 02:50:57 2026 GMT
Not After : May 27 02:55:57 2027 GMT
Subject: CN=E72FBFBD160787B52130133E88A8E6C9AEC66498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:c6:f2:8c:a0:29:42:57:92:42:b9:19:ff:
c0:a8:1f:c0:ea:25:64:32:3f:b0:81:07:8e:a9:a0:
1e:6f:d0:1b:e3:5e:93:ab:69:81:00:a8:94:79:7f:
ca:1b:81:44:d7:c5:a6:7f:2d:84:77:c5:6c:3b:f5:
15:72:07:11:e2:ac:4f:ae:c9:6c:bf:ff:b6:3d:a1:
3f:54:2f:ec:81:d5:b5:7d:be:18:51:e7:c0:e9:68:
31:ff:72:f5:96:29:32:5f:91:1c:04:98:75:f4:8f:
7f:a0:dc:ef:e6:b7:06:bf:61:7c:18:cc:3b:b1:5b:
4c:78:8a:ca:9d:49:31:56:ac:44:36:74:13:02:00:
00:86:18:a7:8b:2f:5f:51:7d:b9:35:b6:f4:86:e5:
64:f1:89:74:06:8f:94:79:62:fc:ef:9d:5e:91:31:
01:41:92:95:51:28:3e:a6:3d:3a:54:92:24:45:b1:
10:2a:05:fb:77:11:d9:6a:5d:38:00:6b:53:c3:72:
d0:fa:93:38:a2:e5:fd:7b:d9:27:76:cc:aa:00:62:
32:46:33:05:51:ba:62:3c:a4:93:19:76:3a:30:93:
0f:27:84:ff:01:c5:a1:c5:1a:fa:24:ee:47:3b:df:
69:b7:1a:8f:44:6e:1f:e8:66:4f:32:b1:77:b3:b6:
c8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2F:BF:BD:16:07:87:B5:21:30:13:3E:88:A8:E6:C9:AE:C6:64:98
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:614d::/48
2a0f:9400:7389::/48
Signature Algorithm: sha256WithRSAEncryption
0d:28:ce:89:89:f3:df:d9:6d:44:ed:e4:32:30:1e:34:f6:26:
42:ca:6d:99:a0:fe:e4:9c:a6:38:c7:97:76:8b:1e:3c:17:36:
e0:91:d9:28:4c:1c:fc:c3:01:7e:14:54:c6:c9:da:6b:6f:59:
97:d0:56:2b:c1:3c:c4:ca:1d:70:bd:97:18:cd:08:c6:10:6c:
e8:5d:21:5f:ce:15:4c:b0:fd:03:e4:f7:28:a2:8b:74:63:82:
af:22:1e:0f:d5:e1:e5:2d:62:ae:f7:56:7c:79:f4:bb:83:f8:
9f:d6:52:b5:d5:4c:e3:40:11:7d:26:11:52:aa:7b:93:df:02:
0f:9a:c6:f3:33:20:5e:8e:cd:27:92:0b:1b:cb:03:9e:4c:3e:
58:47:21:da:9d:5f:82:b1:4f:eb:44:47:c5:81:10:25:1d:6e:
7b:4d:7f:d5:9e:37:19:bd:96:a1:6e:cc:bb:40:d6:4f:07:3b:
57:c0:ae:16:99:45:63:fa:ce:3b:f6:41:c7:17:c2:ab:08:fe:
bf:ec:3e:3a:29:a1:64:f3:3e:2e:32:3e:80:d4:f2:88:e0:fa:
4c:d8:d8:a0:7e:17:aa:eb:ce:07:76:a3:d8:02:78:66:38:9d:
64:cb:d8:bf:07:83:d0:2c:fc:be:89:c4:c6:72:90:40:4d:c4:
a3:d6:6c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:23:53 2026 by rpki-client