Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44908.roa
File: AS44908.roa (raw, json)
Hash identifier: 8NK625mjw4IHlQkH4qzF3IhWWNLDILRtzD4sfEsY7Tk=
Subject key identifier: 05:56:52:25:5F:27:03:6B:EE:9E:8C:C2:C9:E4:4B:8C:33:4C:4A:1D
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 76E20B46CB9E3D7D5713C81985A13FD1867601F1
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44908.roa
Signing time: Tue 04 Aug 2026 15:30:14 +0000
ROA not before: Tue 04 Aug 2026 15:25:14 +0000
ROA not after: Tue 03 Aug 2027 15:30:14 +0000
asID: 44908
IP address blocks: 2a0f:9400:6908::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e2:0b:46:cb:9e:3d:7d:57:13:c8:19:85:a1:3f:d1:86:76:01:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 4 15:25:14 2026 GMT
Not After : Aug 3 15:30:14 2027 GMT
Subject: CN=055652255F27036BEE9E8CC2C9E44B8C334C4A1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:4b:20:5f:9b:d1:7a:9e:b9:7b:96:98:70:
3d:74:f9:ee:49:49:c9:8b:fc:44:8f:e4:ba:f3:4a:
1c:7e:fa:ce:36:f7:80:5a:cb:1e:18:ac:0d:76:49:
c7:15:f7:c3:52:cd:c0:b8:63:50:90:af:1c:41:0d:
13:5d:17:d7:a8:fc:f2:31:6a:bd:2e:df:1c:02:40:
28:44:9d:ed:f3:c9:c8:ca:56:7c:0b:af:3c:81:9a:
06:26:ca:1b:a2:36:9d:ae:d4:f1:ea:ff:0a:05:34:
2d:cd:25:f2:10:01:e1:77:83:01:37:e9:d2:2d:ea:
5f:6d:02:83:ed:8b:db:d8:82:40:f0:5e:cb:d0:a1:
83:cf:61:98:60:cc:f4:53:d2:a3:5b:51:26:8a:83:
45:32:a8:17:ba:7a:8f:d1:c6:1f:60:10:1c:e7:1a:
38:e3:47:01:e7:7c:ec:9e:28:4a:69:36:47:30:70:
6b:e8:98:d0:04:ae:0a:56:0f:15:f5:33:51:7f:74:
18:73:85:4d:0b:fa:be:2e:0f:93:f8:8a:1b:2d:2d:
7b:2e:8a:6e:8a:be:32:96:95:27:24:44:41:42:f0:
37:f5:30:62:db:7a:1d:81:7f:a2:cb:f2:ab:8f:7f:
a6:84:b9:b0:82:03:8b:73:59:84:df:32:31:96:7d:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:56:52:25:5F:27:03:6B:EE:9E:8C:C2:C9:E4:4B:8C:33:4C:4A:1D
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44908.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6908::/48
Signature Algorithm: sha256WithRSAEncryption
22:3c:49:3a:ff:4b:f5:31:51:5c:a1:34:99:37:ce:95:f8:34:
a1:c4:04:a7:db:cd:c7:2b:b3:8f:0d:ba:80:3a:aa:da:ae:63:
b5:be:42:09:19:12:d6:1a:1e:a1:ed:a1:5b:a3:3b:32:0a:de:
b6:ae:3a:f3:ac:62:fc:c3:ae:98:90:8f:07:c5:2f:7a:88:43:
e7:74:dd:8a:a0:52:0b:42:42:89:13:52:6e:e5:1a:d3:a4:e8:
b6:ae:f5:df:74:e6:64:d4:8f:ae:b2:ee:b3:9a:ca:c0:b9:e5:
79:e4:44:45:9f:f5:eb:83:93:c4:bb:e0:1d:59:7d:e8:2e:a0:
16:b8:96:43:15:66:4a:50:b0:c4:34:4e:51:d6:2b:59:6c:a4:
23:3f:1a:2a:31:f3:8a:80:52:f2:fe:0e:74:33:75:ac:66:3d:
6f:1d:9b:de:20:55:32:18:ba:e9:87:e9:99:79:dd:23:f5:06:
74:dd:b9:46:fb:92:49:42:c5:4a:26:68:0d:17:a1:7d:a5:2b:
89:ec:06:8c:44:4c:6a:7b:a7:17:17:28:65:07:f8:03:54:22:
70:b7:84:33:64:4a:36:5d:d2:06:51:df:5c:72:30:1a:30:c7:
5a:27:28:7a:c1:2c:75:ae:80:15:07:52:06:80:8d:1f:41:29:
25:e8:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:11:57 2026 by rpki-client