Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398395.roa
File: AS398395.roa (raw, json)
Hash identifier: wm/U12aETfWDvEgkgxuprQTGmrF6QW3zEyqMEyjNxiE=
Subject key identifier: 23:42:3A:21:16:A2:E0:74:D3:61:CD:0B:E5:A7:61:18:E2:1E:AE:06
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7664114B68166ED8ADB869C482719E178A1B72B7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398395.roa
Signing time: Tue 19 May 2026 04:03:24 +0000
ROA not before: Tue 19 May 2026 03:58:24 +0000
ROA not after: Tue 18 May 2027 04:03:24 +0000
asID: 398395
IP address blocks: 2a0f:9400:610c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:64:11:4b:68:16:6e:d8:ad:b8:69:c4:82:71:9e:17:8a:1b:72:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 03:58:24 2026 GMT
Not After : May 18 04:03:24 2027 GMT
Subject: CN=23423A2116A2E074D361CD0BE5A76118E21EAE06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:95:73:b8:64:bb:ab:da:d7:d3:5c:7d:1d:
9e:7f:91:3c:a7:20:31:8f:d3:e9:47:9a:23:fc:33:
1e:73:4c:66:c0:dd:62:c3:53:85:4f:e3:9b:bc:9f:
79:30:3a:7a:7f:b6:1a:51:cb:cf:21:75:ba:d2:5e:
e3:db:0c:17:43:42:59:88:80:ff:23:28:46:1d:7b:
80:ef:ca:cf:7b:38:90:ec:6a:6b:b8:68:12:b4:02:
54:f2:60:47:a7:11:09:2b:39:2e:5f:da:2b:f2:fb:
ac:9b:f7:ad:d1:09:c6:50:ae:51:fa:1a:90:b9:96:
46:c6:fa:ff:54:28:3d:f0:fb:14:95:94:91:9f:d4:
ff:42:99:6c:2e:84:bd:bf:5f:27:f9:fa:de:6e:11:
27:f3:e2:6a:77:d6:fc:d9:b2:d6:e7:c1:8e:95:36:
b7:56:45:98:9b:68:4f:c4:21:3c:f0:ec:d0:9c:fb:
89:1c:ad:33:4f:e0:77:b9:94:a6:61:ca:56:23:4c:
0d:1a:fa:4a:3e:c5:eb:45:c1:4b:76:6f:bb:2b:66:
af:a1:51:31:58:08:6d:58:e8:cb:28:21:7f:8b:dd:
61:7b:2e:87:8c:f4:6b:f8:3d:3b:55:59:78:5c:db:
8b:4e:9b:32:e8:54:4d:cf:32:6c:48:d9:52:bf:c6:
dd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:42:3A:21:16:A2:E0:74:D3:61:CD:0B:E5:A7:61:18:E2:1E:AE:06
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398395.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610c::/48
Signature Algorithm: sha256WithRSAEncryption
7f:aa:ed:2d:5b:3d:ff:82:ba:29:dd:d2:da:a6:e1:74:0b:2e:
b5:42:94:c0:4b:d2:bb:d1:26:15:12:90:75:de:8c:d4:8f:79:
ea:94:59:52:f9:b5:e7:3c:02:09:c6:4f:8e:5d:08:4b:2b:25:
0f:b3:fb:17:4c:56:a8:f2:61:d2:25:ad:48:74:ce:b2:d4:98:
15:a0:4b:0a:9f:83:6f:6e:8b:f4:02:d7:77:8e:3d:2b:75:ad:
e8:bc:2f:a5:f8:50:7f:1e:5f:b3:a5:58:db:f8:ef:21:be:6a:
64:5f:8d:61:22:97:80:e1:45:db:0f:c3:63:fc:a2:e2:5b:ad:
5b:04:49:1a:ea:39:be:f9:ac:10:14:17:5e:e5:4a:39:2a:9e:
93:ec:e8:f4:4a:84:3c:39:7a:3a:9d:94:e7:a6:03:9c:52:a3:
ee:d1:7c:1b:92:47:36:11:d3:65:0e:4c:54:9d:16:86:68:3e:
55:66:5f:1b:e6:da:68:b7:bc:38:03:f5:18:00:70:96:c1:2c:
17:fa:9e:d5:d9:72:2b:38:1a:80:8d:80:95:38:2e:a4:ae:79:
2b:83:57:2e:73:9b:d4:d8:3a:52:92:8e:cb:cd:46:e2:1a:96:
9c:34:3f:1e:48:81:d2:1a:b5:12:dd:3d:6c:63:5b:43:0e:1b:
33:65:0f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:23:52 2026 by rpki-client