Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48314.roa
File: AS48314.roa (raw, json)
Hash identifier: +do+usTR0asxk/ITZtkdZVexTymJzZorglrkswc4u40=
Subject key identifier: BE:32:01:8A:A1:11:26:B5:DB:39:CD:DB:15:E0:F1:01:01:40:A1:C1
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5E074E2FE576E47B0A2CAF769291A1BAD6AFD583
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48314.roa
Signing time: Sun 17 May 2026 02:38:32 +0000
ROA not before: Sun 17 May 2026 02:33:32 +0000
ROA not after: Sun 16 May 2027 02:38:32 +0000
asID: 48314
IP address blocks: 2a0f:9400:6102::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:07:4e:2f:e5:76:e4:7b:0a:2c:af:76:92:91:a1:ba:d6:af:d5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 17 02:33:32 2026 GMT
Not After : May 16 02:38:32 2027 GMT
Subject: CN=BE32018AA11126B5DB39CDDB15E0F1010140A1C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:65:c4:6a:cf:50:f5:fa:a2:1d:99:0a:23:
fe:f1:cc:e0:53:fa:06:8a:cc:ff:b1:ff:93:08:91:
25:9e:4d:8d:a8:b3:e5:e4:7a:10:d5:1f:53:c3:7e:
53:1c:69:46:c0:1d:3a:19:b5:c8:72:16:0e:bb:f0:
2f:5f:84:1d:96:40:02:81:6b:0a:f5:9c:d4:6a:ad:
87:78:c3:b4:0a:29:74:d9:f9:53:2b:02:82:0d:64:
45:06:a5:75:7d:d8:50:8f:df:4a:82:86:25:77:1f:
3c:fc:16:13:ec:1c:2a:80:30:fd:40:34:ee:6d:ad:
8d:c3:e9:38:62:b4:33:20:96:20:92:f6:d8:d7:95:
23:d8:6c:72:3d:cb:2b:19:75:a3:b3:ad:43:57:78:
16:05:48:40:65:0a:36:66:6f:81:b4:76:44:c4:77:
c3:8d:3c:fb:cd:a9:fb:f3:46:14:09:08:c1:db:0e:
76:ea:f9:23:6d:61:bb:8e:dc:9c:4b:86:61:00:e3:
e8:aa:f8:6e:56:84:f7:a4:a2:6a:48:04:71:a6:57:
e9:2c:44:a2:b7:f0:88:9a:10:81:26:ee:24:12:5a:
b5:9f:c4:40:f3:73:a3:b2:5a:77:15:da:fa:55:52:
70:ac:1a:cc:b7:b2:28:0b:7a:17:7a:dd:1f:8c:39:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:32:01:8A:A1:11:26:B5:DB:39:CD:DB:15:E0:F1:01:01:40:A1:C1
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6102::/48
Signature Algorithm: sha256WithRSAEncryption
13:b5:79:44:da:70:36:75:d4:c6:4d:35:04:b6:5e:4e:28:97:
10:67:ab:0b:c6:27:83:d7:63:08:de:1e:b0:ae:eb:d2:25:fa:
6c:a0:1a:2e:ce:35:95:fa:5a:74:08:97:6e:2b:e1:ca:9f:8e:
81:72:96:0c:9e:39:1d:0f:b2:70:36:6c:92:2a:eb:4b:49:ca:
3c:ed:9e:9f:e3:af:38:78:38:d0:8f:55:7c:4d:99:ca:9c:1f:
37:ca:f6:32:43:07:e0:fe:35:2d:02:a5:fb:21:5d:60:dd:6f:
be:32:a2:3a:a2:58:85:91:0c:5d:25:66:a7:4e:f0:15:0e:94:
70:6a:d4:13:05:fd:27:68:12:36:17:bf:78:c8:d5:8b:68:6b:
a5:ab:40:19:4e:eb:32:f5:6a:88:ce:13:0f:0f:1c:2f:5f:8a:
9d:01:18:15:05:64:8c:a7:12:58:c1:38:cc:f2:74:3f:e6:5b:
cc:ec:ac:b1:c7:7f:70:56:75:f7:c6:c2:df:70:49:67:82:05:
bf:8d:04:25:12:18:74:80:c5:f2:b4:fc:08:62:e5:8c:74:14:
87:56:38:bf:07:88:e3:49:20:29:ca:af:f7:4e:37:24:ef:ae:
77:cd:fa:71:76:43:1e:4f:b8:4e:94:c1:37:4c:cb:27:e1:d1:
7b:73:46:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:51 2026 by rpki-client