Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41255.roa
File: AS41255.roa (raw, json)
Hash identifier: 1W+ZU/zPH88+xF0II0vHnBTCNOTb6zxpHsTIhLsg1yk=
Subject key identifier: 53:0F:37:F1:3A:4F:EA:6A:D2:21:A6:36:9A:25:94:79:BF:10:AE:A7
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 062C0622B7997BC36331A4A1E712911FFBAEF230
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41255.roa
Signing time: Tue 19 May 2026 04:03:25 +0000
ROA not before: Tue 19 May 2026 03:58:25 +0000
ROA not after: Tue 18 May 2027 04:03:25 +0000
asID: 41255
IP address blocks: 2a0f:9400:8016::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:2c:06:22:b7:99:7b:c3:63:31:a4:a1:e7:12:91:1f:fb:ae:f2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 03:58:25 2026 GMT
Not After : May 18 04:03:25 2027 GMT
Subject: CN=530F37F13A4FEA6AD221A6369A259479BF10AEA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:c6:8a:79:7e:c4:2e:d9:51:36:df:05:29:
dd:c6:02:e8:66:f2:1e:4d:fb:d7:23:9c:77:a7:36:
3f:66:e8:fd:ea:e7:54:76:7f:95:82:0e:11:45:bc:
b4:f5:87:2c:e1:54:64:2b:b7:32:0b:ee:fe:30:56:
74:9f:3c:bb:04:c5:ab:ca:69:7c:3f:0f:bc:84:48:
f7:2f:db:c5:a6:44:a6:79:88:a1:ab:67:37:d8:6b:
23:10:25:97:1e:27:fa:d6:30:46:cb:a6:a0:32:a8:
c0:ad:46:a6:03:5c:a5:05:81:d1:eb:41:88:e6:83:
e7:14:64:bd:8d:54:1a:6a:2f:f7:25:d0:8e:08:f9:
29:fe:02:1e:09:72:db:34:79:fc:b9:5f:16:cc:00:
d3:7b:b2:ff:09:b3:a9:da:63:2c:4f:3c:a3:6d:2e:
09:da:57:4f:7e:fe:57:5d:11:05:0a:f2:57:e2:81:
72:27:87:86:76:cf:82:91:4f:88:3c:49:1f:2b:63:
0a:2b:6f:8b:dd:4e:ee:87:36:fc:57:36:aa:9a:b4:
7f:4b:a2:8c:7e:58:08:b7:99:9e:d3:47:05:91:4e:
37:6f:6d:20:6a:3f:c5:b9:da:be:fb:92:65:95:f0:
c0:31:58:20:0f:e6:7f:57:a0:bb:30:b2:ef:0c:96:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0F:37:F1:3A:4F:EA:6A:D2:21:A6:36:9A:25:94:79:BF:10:AE:A7
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41255.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8016::/48
Signature Algorithm: sha256WithRSAEncryption
c6:2c:30:1e:34:3a:fb:1f:4c:c2:cf:d7:29:21:62:7a:47:59:
db:9e:39:b7:9e:5b:29:d9:9a:0c:75:f7:ef:1f:79:ea:a3:31:
28:09:dd:92:94:c8:21:65:12:6e:0d:8c:3b:fe:e8:17:be:88:
e0:24:64:94:88:f3:6e:76:3b:39:ad:63:92:2d:f7:84:fd:12:
be:68:c6:e3:06:d3:90:00:66:23:d3:e4:b1:aa:eb:8c:38:e8:
29:28:44:f2:95:6d:3f:ed:c2:c1:87:6f:df:79:de:d3:ab:8b:
56:81:57:52:df:d1:75:8f:f4:a3:e5:99:83:93:35:43:6c:ae:
8f:09:b0:48:cb:db:9a:b7:58:04:b1:50:9f:5c:50:30:4b:8d:
67:33:24:fe:a4:8f:b1:88:51:fc:45:eb:2b:d7:a0:eb:19:26:
58:41:20:3b:9b:cf:20:5c:49:d7:76:4b:3c:5b:ce:bb:d7:24:
0f:b8:82:45:61:47:07:74:e7:80:62:ea:69:c2:8e:73:b6:95:
e7:0c:e9:45:aa:a4:bb:03:c8:ce:49:c1:6e:4b:84:70:f8:de:
7c:8a:1b:4b:b1:23:a1:35:a9:8c:d0:c0:de:60:23:c2:78:96:
76:1c:ef:01:45:cc:76:75:8c:db:67:f8:57:fa:5f:9a:73:0e:
a0:97:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:23:24 2026 by rpki-client