Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS40929.roa
File: AS40929.roa (raw, json)
Hash identifier: wduzpOKLqqJFcB0Wm+eEIREY3NdqMzJtNPs+qSdBHWc=
Subject key identifier: C6:DE:50:48:B5:0D:87:51:0F:81:BA:01:CC:D0:8A:9B:7C:38:38:ED
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 250B7749F2A3AD665051D08CCCE550A304B2DA1E
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS40929.roa
Signing time: Fri 02 Oct 2026 17:31:54 +0000
ROA not before: Fri 02 Oct 2026 17:26:54 +0000
ROA not after: Fri 01 Oct 2027 17:31:54 +0000
asID: 40929
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:0b:77:49:f2:a3:ad:66:50:51:d0:8c:cc:e5:50:a3:04:b2:da:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 2 17:26:54 2026 GMT
Not After : Oct 1 17:31:54 2027 GMT
Subject: CN=C6DE5048B50D87510F81BA01CCD08A9B7C3838ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:70:95:d4:99:7b:97:44:c4:f8:4e:50:1b:
9f:e9:8d:38:00:37:d9:2a:21:51:67:bc:0c:bc:4a:
b3:a9:7f:f2:da:9b:bf:7c:cf:5b:c7:8b:7c:22:b2:
e8:b4:6b:b9:a5:6a:7d:89:4d:8f:e5:b5:d3:25:46:
f4:c8:8e:ca:90:1e:6a:5e:66:7f:49:e1:29:ba:8c:
ea:dd:2c:53:15:a1:b0:89:97:4a:5c:b5:48:de:13:
4c:47:a1:c3:ee:38:06:af:5e:9a:20:96:8a:63:b8:
c5:2d:d9:a5:fc:05:e1:1b:d7:bf:7a:2f:73:15:fd:
9b:85:2a:b5:7e:d8:6e:62:23:67:ab:3a:53:f8:dc:
b5:a2:dd:6c:ab:3c:93:25:b9:3b:34:7d:fa:39:2f:
2d:cf:80:4e:be:04:18:5d:6b:50:e6:d8:de:c8:6a:
87:6b:d4:f0:21:36:3c:b0:15:7c:0e:34:61:ab:f4:
49:c3:80:31:e9:58:45:ad:36:09:cf:de:91:68:a5:
4d:78:b0:43:57:94:30:53:4b:58:d9:35:dd:50:8a:
55:a3:a2:0e:0d:db:13:5e:9e:a5:9c:3c:b6:66:10:
49:0b:5b:6f:d9:b0:73:14:cd:0b:2c:f1:55:1f:cc:
42:2b:00:13:26:40:e5:9a:09:71:5e:36:b2:40:dd:
9b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DE:50:48:B5:0D:87:51:0F:81:BA:01:CC:D0:8A:9B:7C:38:38:ED
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS40929.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
00:46:73:69:6c:7c:ba:bd:ba:6e:2e:c4:83:38:8c:37:75:d6:
48:a0:73:8e:b1:c7:8d:80:dc:bd:c7:a9:6a:d5:50:e1:3e:69:
92:5c:44:94:b1:92:a8:bd:3e:b0:d5:4d:f2:09:86:f7:91:a6:
fa:a7:2b:5c:6d:51:c9:49:e2:36:34:b0:d1:9c:cc:5d:81:99:
fc:d7:a9:94:d0:22:20:0e:8d:8b:fa:48:04:e1:8a:75:34:25:
72:a6:a3:42:7d:02:0a:bf:41:0a:36:4d:d4:59:5f:52:a4:60:
1c:94:cd:8e:8b:63:56:04:dd:81:c9:7b:01:f1:6f:cb:9c:df:
5b:d1:77:fc:d4:9c:48:08:0e:7d:75:d5:1d:99:0b:01:fa:ad:
bc:46:0f:c8:58:9f:60:05:71:35:6e:d0:7a:39:5c:d5:2e:c8:
b1:50:ad:1a:83:91:bb:6a:53:1c:62:70:08:54:87:3d:63:1a:
6d:f4:bc:0f:6d:82:7f:67:5c:04:5c:b0:2b:0e:57:c0:94:16:
f8:c9:8d:2f:f6:05:a4:e6:32:95:ec:31:37:48:ad:d6:77:b1:
5a:fb:f9:05:9c:91:82:af:a5:72:45:3d:94:57:87:fd:b0:e3:
6e:1e:40:51:fe:20:46:36:b3:38:49:bc:88:ea:0f:2f:b9:30:
c7:2b:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:26:43 2026 by rpki-client