Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44992.roa
File: AS44992.roa (raw, json)
Hash identifier: YbFvcrdgM52GpEWOvw+n5oiKVlLaCfZOum/4Z2mckmY=
Subject key identifier: 7F:9C:9B:B6:92:EC:39:54:36:6A:EC:F9:3D:52:50:0D:92:C7:73:1E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3844216A5B6F3B4DCFEF2503FB63F9A736B35025
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44992.roa
Signing time: Tue 19 May 2026 04:03:19 +0000
ROA not before: Tue 19 May 2026 03:58:19 +0000
ROA not after: Tue 18 May 2027 04:03:19 +0000
asID: 44992
IP address blocks: 2a0f:9400:8005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:44:21:6a:5b:6f:3b:4d:cf:ef:25:03:fb:63:f9:a7:36:b3:50:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 03:58:19 2026 GMT
Not After : May 18 04:03:19 2027 GMT
Subject: CN=7F9C9BB692EC3954366AECF93D52500D92C7731E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ea:24:9b:5c:94:c4:0a:1a:73:f8:0d:03:5c:
60:a4:ca:d7:0f:0e:09:9a:8a:08:47:1d:eb:2d:61:
da:07:99:2f:43:5b:38:73:92:f8:5e:2e:e7:d9:29:
0b:fb:38:da:de:ad:b7:be:59:95:8e:84:1e:b7:61:
f7:ae:73:e6:de:08:b5:38:07:ff:d1:f4:b4:2a:e8:
d2:be:bc:a4:e7:6e:90:b1:10:76:c6:26:b7:10:8f:
00:84:9b:73:fc:d5:9d:d1:1f:21:32:6d:6c:f8:42:
00:be:37:04:2f:0d:18:e1:81:53:e1:71:c7:84:24:
ed:e9:c6:c6:f2:bc:42:5e:40:6a:88:ba:27:b8:a4:
51:cf:cc:c9:93:22:b2:ce:37:8c:cc:66:29:43:9f:
95:74:94:15:ed:a5:9d:26:b2:15:5d:43:77:33:f4:
8e:40:77:14:bd:75:a5:6b:ef:40:21:48:38:ca:e2:
fc:0d:c3:b0:08:1b:00:33:b4:85:cb:6a:75:26:26:
4e:c9:62:82:81:eb:ca:b9:f1:b3:bb:33:48:7f:14:
a2:d0:36:b7:ca:89:14:97:2c:34:a6:4e:4c:14:d4:
07:46:e6:8d:20:06:91:72:49:9e:cb:9a:87:ef:1c:
ec:a0:74:da:cf:82:1f:ac:92:fd:1d:e3:a9:6b:50:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9C:9B:B6:92:EC:39:54:36:6A:EC:F9:3D:52:50:0D:92:C7:73:1E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44992.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8005::/48
Signature Algorithm: sha256WithRSAEncryption
16:a9:0f:f7:1c:71:f9:79:07:d9:77:49:a7:8c:b1:4c:cc:94:
84:b7:67:1c:2a:3b:9a:61:bf:f0:ee:9f:51:3d:62:d5:4c:ba:
5c:bb:2b:bc:09:94:b4:94:0f:18:bb:84:8c:21:1e:fd:48:ed:
e8:1e:f8:14:fd:a4:ad:1d:c9:bd:0e:3d:7a:31:d9:3e:0e:68:
8c:94:99:33:52:1d:24:20:56:76:7a:ff:4a:39:ab:af:cd:74:
4a:ed:90:38:2f:ec:8a:8d:95:4b:d0:c6:f4:e2:5d:59:73:09:
80:98:94:ae:15:e7:ce:37:cc:ef:9c:6a:0a:1b:53:7f:24:5d:
e0:b6:f2:50:30:50:51:6d:77:c7:0b:bc:98:90:34:cc:d5:1e:
83:3b:69:9f:c3:26:7e:6b:e0:b8:f6:cc:ff:8c:b5:af:32:46:
b3:06:40:e7:39:26:6c:1d:82:e5:e9:a8:2c:60:33:ef:e4:0d:
4a:b6:8f:8d:6b:bd:5e:8c:25:2a:67:38:05:0e:90:9c:f6:d1:
39:38:4b:ff:55:87:7d:64:65:6f:90:4a:8f:a3:aa:74:d7:63:
26:63:83:90:34:d7:38:e6:3a:47:49:ee:05:65:e4:a8:20:c1:
39:65:a4:6b:83:9e:6d:dc:aa:7f:b9:d9:0d:5a:5f:69:b3:51:
1a:7d:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:22:59 2026 by rpki-client