Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44324.roa
File: AS44324.roa (raw, json)
Hash identifier: YAFy+M1bvFg20gLRaY6Ldpv+Jgp9NtjaRRF7PHXNxTs=
Subject key identifier: 9C:4E:E9:D3:9C:91:3E:E3:A6:44:89:B3:44:0B:87:21:BE:C5:AF:B5
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 76760D13D4F1B04F4E92B8666539D7474724B767
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44324.roa
Signing time: Thu 16 Jul 2026 11:29:42 +0000
ROA not before: Thu 16 Jul 2026 11:24:42 +0000
ROA not after: Thu 15 Jul 2027 11:29:42 +0000
asID: 44324
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:76:0d:13:d4:f1:b0:4f:4e:92:b8:66:65:39:d7:47:47:24:b7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 11:24:42 2026 GMT
Not After : Jul 15 11:29:42 2027 GMT
Subject: CN=9C4EE9D39C913EE3A64489B3440B8721BEC5AFB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:63:91:8f:d5:f8:36:eb:9d:76:9c:12:95:
c5:2e:4c:9c:d3:3a:69:b9:4a:c5:f5:2e:77:5e:3d:
94:d4:c3:32:4a:bb:08:ee:49:54:12:a7:77:8c:f2:
cb:66:c3:26:5c:08:81:fc:17:cd:c3:ea:ce:b9:72:
0c:a7:e9:0d:5b:d8:0e:73:56:6b:85:03:0a:5c:ca:
be:10:00:45:4c:83:5f:c2:3f:60:ac:8b:f5:a7:7c:
06:6b:e9:dc:2a:da:1d:4a:51:37:77:9f:b5:62:a7:
e9:f1:63:58:9b:43:4f:31:eb:73:5d:68:a2:9f:28:
99:f8:19:97:15:35:f3:42:9a:cf:11:9a:21:f7:83:
57:21:27:2f:e1:2f:b1:7c:f6:f5:0d:5c:94:fe:74:
38:74:5b:7e:07:5d:de:f4:d8:91:01:c8:0f:1e:9b:
e2:89:e5:e0:fb:37:db:46:a9:37:91:74:86:34:f6:
bc:69:c7:76:6f:77:03:54:8d:fd:8c:ee:91:fa:be:
8e:77:f3:9f:92:d5:f2:37:0b:c3:a2:9f:4e:19:e8:
ea:0d:22:e5:67:3f:3a:d7:7b:95:e9:c5:86:0f:cd:
08:47:b0:7e:4d:2a:6a:40:75:bc:e6:ca:e9:60:a7:
3f:3f:13:cc:c9:5c:f3:57:e8:37:85:6d:3f:ec:ca:
44:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4E:E9:D3:9C:91:3E:E3:A6:44:89:B3:44:0B:87:21:BE:C5:AF:B5
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44324.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
c5:c2:69:6a:e0:26:65:42:22:f4:18:84:28:ff:38:58:7a:2a:
3a:55:da:42:0c:c1:d0:f9:11:80:7d:af:a1:c4:00:8d:ee:ea:
0d:88:43:3a:af:6f:74:5c:cf:22:58:c3:ae:4c:2b:83:8d:55:
a3:58:64:59:11:59:48:a1:da:ff:1e:2c:26:94:4b:ee:b3:03:
49:6c:9f:c7:cd:a2:a6:b3:e3:76:76:e7:4b:47:a3:9d:70:85:
61:b0:34:79:d4:d9:ec:8e:f9:28:14:2e:b1:93:72:4b:19:4e:
b7:95:7a:81:00:04:22:ad:30:a1:f1:35:79:1f:ab:6c:11:c9:
a2:d4:ab:2f:13:71:21:56:43:ef:ee:44:21:82:f2:77:3a:a2:
fe:93:9c:1f:4d:bc:61:2e:5d:e4:aa:0b:69:4a:d2:1c:95:ca:
6e:3e:44:a7:23:b1:08:28:61:db:af:dc:8b:e8:27:c4:d9:57:
f5:9e:04:9d:39:b1:ed:cd:08:fc:8c:d2:d6:19:9c:70:08:db:
3d:2c:c2:bf:dd:04:db:87:36:af:4f:18:d9:57:75:d6:cf:3b:
96:4e:e7:64:fb:3a:34:f7:4b:1a:cc:6c:73:44:e0:5b:19:68:
9a:56:77:6b:1c:6b:2b:bb:9a:20:cd:0e:ef:0b:e4:ff:75:3d:
1a:04:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:56 2026 by rpki-client