Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS51087.roa
File: AS51087.roa (raw, json)
Hash identifier: AafpBhllF7gJeCf5mLbOXElcRo6HW/oCApaOwGR8n2k=
Subject key identifier: 7A:06:10:23:F3:61:4C:06:C9:C2:5E:09:61:AE:08:09:AB:ED:23:76
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5C3A05A600BE39C200CA673FA09E27569D912C33
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS51087.roa
Signing time: Tue 04 Aug 2026 01:30:12 +0000
ROA not before: Tue 04 Aug 2026 01:25:12 +0000
ROA not after: Tue 03 Aug 2027 01:30:12 +0000
asID: 51087
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:3a:05:a6:00:be:39:c2:00:ca:67:3f:a0:9e:27:56:9d:91:2c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 4 01:25:12 2026 GMT
Not After : Aug 3 01:30:12 2027 GMT
Subject: CN=7A061023F3614C06C9C25E0961AE0809ABED2376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:3c:a0:ad:5c:b0:af:cb:00:49:49:94:48:
e8:1c:a6:68:e3:6d:d3:b2:ce:7b:2c:95:32:4d:ed:
b2:e2:3f:2f:d7:ae:ce:46:64:56:6d:f6:af:ed:6c:
1b:a5:50:af:94:8a:4d:57:54:20:19:6c:1f:74:96:
f8:60:cb:d1:dc:0e:3b:c4:c3:42:27:3a:de:3e:f3:
5c:7a:4d:3e:bd:98:a0:4a:75:cd:b3:3d:5e:95:a0:
4e:f6:3e:06:75:a8:f1:ae:d1:31:84:72:02:c4:71:
9e:73:c7:7d:55:20:99:72:f0:dc:86:90:fb:c1:3e:
7e:80:f6:a5:b2:73:ab:2d:41:9c:f7:d3:73:2b:04:
87:b9:77:d5:ba:d3:3a:33:57:72:61:d4:2c:40:05:
e6:71:db:b7:e5:e1:92:b6:8d:6b:53:34:60:a9:32:
25:46:95:6a:87:75:de:c1:f1:a5:92:d7:57:fc:f3:
39:f5:a9:ce:20:30:89:69:c6:0e:ca:15:4a:78:5f:
06:95:ef:c1:5f:56:9a:92:e5:a9:d7:fc:3f:b5:7f:
77:74:40:68:43:d2:ea:e2:ac:e4:6f:fd:08:2b:17:
2a:8a:99:51:20:b3:8d:fd:ae:a8:69:3f:96:a3:80:
89:42:23:2b:fb:04:69:54:d4:a9:6f:be:1a:97:9c:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:06:10:23:F3:61:4C:06:C9:C2:5E:09:61:AE:08:09:AB:ED:23:76
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS51087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
cd:6f:1d:f0:71:df:00:3c:ad:fd:61:25:13:96:5d:3f:7a:fc:
d0:f7:1b:52:82:63:f8:86:38:1a:78:cf:ba:6b:f9:d2:a6:82:
6b:25:40:13:a7:2d:f6:bc:e6:94:69:7a:c7:16:cc:28:c0:a7:
c2:31:e1:90:3c:9a:7d:15:ca:46:17:8b:39:ba:a4:97:96:fe:
dd:14:a8:24:eb:1c:da:a1:01:fd:91:df:b9:b2:06:86:ac:94:
29:fc:8f:d6:83:2c:2b:87:5b:a6:ac:97:80:36:7a:c3:e2:36:
df:fa:bc:22:b0:56:d2:81:a2:cc:7b:22:17:ee:ea:ac:7a:da:
93:29:1d:e7:5a:00:3a:ba:6b:65:88:ea:51:f1:9c:8a:ee:6a:
79:23:71:e2:3b:84:ed:7f:7c:29:0c:e1:f5:fc:e8:ba:eb:c9:
8e:af:2a:16:29:86:5d:96:9f:cc:4b:15:7d:d3:67:14:64:f2:
4e:af:64:99:9b:e5:2b:97:82:e1:a1:0f:9f:2d:ac:97:20:76:
52:7c:7f:3b:b8:34:6d:fd:6d:a2:6c:a9:a4:64:42:ad:ef:1e:
c4:61:38:16:3b:fb:ea:de:bd:d5:ea:dd:6d:55:32:4d:17:73:
70:ca:f3:0f:6b:60:fa:da:5f:82:e7:b9:fd:e8:de:a9:43:7a:
9b:ef:19:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:41 2026 by rpki-client