Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398379.roa
File: AS398379.roa (raw, json)
Hash identifier: WQvYWr/Ub9RZRnqIxY5rmr4QG7F5H0mZRc0BtEWT254=
Subject key identifier: 09:D2:95:CE:AA:73:EE:C2:F7:81:74:F9:A9:BC:7B:B4:0D:85:D4:95
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 250A539231129CF5D3B8210BA3982EE7CF2EB2DE
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398379.roa
Signing time: Fri 05 Jun 2026 22:24:35 +0000
ROA not before: Fri 05 Jun 2026 22:19:35 +0000
ROA not after: Fri 04 Jun 2027 22:24:35 +0000
asID: 398379
IP address blocks: 2a0f:9400:691f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:0a:53:92:31:12:9c:f5:d3:b8:21:0b:a3:98:2e:e7:cf:2e:b2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 5 22:19:35 2026 GMT
Not After : Jun 4 22:24:35 2027 GMT
Subject: CN=09D295CEAA73EEC2F78174F9A9BC7BB40D85D495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:c7:93:ac:e9:58:65:fa:13:39:9d:27:07:
ae:43:38:c1:cf:5a:db:39:c3:ba:28:1e:5b:dc:77:
dd:fb:67:1a:63:85:58:76:2d:f7:e4:99:9b:6c:37:
62:ab:29:aa:f9:5b:d6:4b:d0:eb:87:c2:59:a7:b0:
15:a7:94:a5:82:d2:54:bc:ae:2b:04:16:0d:16:03:
25:d2:59:4b:62:22:93:43:12:b8:b4:9a:84:05:0c:
9e:d4:1c:25:85:98:0c:69:02:58:f2:f3:7f:b3:55:
6b:c9:27:d3:c9:19:cc:c6:9d:c9:68:91:7a:ac:b6:
77:54:2b:cb:ce:dd:88:84:7c:2e:54:ef:84:e3:e8:
d2:89:5d:58:a9:75:5a:7d:30:b3:0e:8e:73:44:fb:
28:d8:f7:54:1f:bb:b9:96:cc:d6:9c:18:5f:77:de:
69:e7:68:c1:06:60:71:95:12:e7:1a:90:30:4b:19:
c5:d1:9b:4d:eb:b2:a3:74:fe:04:b1:e5:9f:90:28:
22:02:9b:5f:86:41:e3:cf:b5:76:2c:64:04:88:cf:
6a:1f:4b:5b:3c:b3:5a:99:2a:ec:26:94:6e:43:04:
1b:c6:ba:d2:ef:16:0c:65:ff:d3:2e:cf:c2:21:df:
f1:07:79:db:3a:1a:b8:94:6d:db:81:1d:4f:d0:16:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D2:95:CE:AA:73:EE:C2:F7:81:74:F9:A9:BC:7B:B4:0D:85:D4:95
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398379.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:691f::/48
Signature Algorithm: sha256WithRSAEncryption
cc:b6:12:44:94:5d:5a:84:9d:2d:49:59:24:70:d1:d1:ab:b3:
12:6d:ce:4b:50:70:0d:d8:bb:93:20:96:6d:9b:2f:54:36:e5:
da:73:c8:4c:29:84:cc:98:36:8f:87:8d:29:5a:11:6f:a2:82:
2a:7f:72:a6:90:c9:ea:3d:2b:ba:24:5c:7b:72:f6:85:d0:36:
38:95:5d:8a:c1:7d:6f:26:58:a3:13:05:32:5b:91:e6:75:1a:
ca:de:b1:9a:0e:34:43:65:50:86:72:59:70:a8:6a:64:b6:10:
5b:77:d0:eb:04:25:88:20:31:5c:ef:cb:b1:1c:87:fe:44:59:
3a:6f:e0:7b:f4:3b:df:02:c2:13:1d:05:88:be:21:fd:12:42:
a1:a6:10:9e:1a:19:e8:8a:91:7c:0f:47:16:da:af:ba:ee:e8:
4e:a7:18:ad:e3:0f:06:2a:91:db:b9:48:82:32:fa:fb:f1:36:
86:46:c9:18:c4:d9:94:e5:38:3d:5b:df:15:44:99:91:11:0c:
5b:db:f1:9b:14:cf:b3:58:10:4a:b0:07:40:87:87:e9:7a:29:
47:a5:14:b5:de:04:b8:f4:e6:35:64:83:59:6f:51:df:6d:94:
05:1e:fe:b2:14:3f:f5:a9:2c:4c:3d:54:7d:6d:01:f1:30:a6:
5a:1d:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:04:37 2026 by rpki-client