Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS59893.roa
File: AS59893.roa (raw, json)
Hash identifier: 4X4UUCCo8abmhNl2adSXb2cCVOCj9dUBDbTTUJp5kso=
Subject key identifier: 16:4E:52:CA:C1:15:22:7F:6B:D5:66:38:60:B4:7D:44:7C:47:CE:B3
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 33D0ECCC1B978393FF84002038A55D0EE0EB2ED7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS59893.roa
Signing time: Tue 19 May 2026 04:03:23 +0000
ROA not before: Tue 19 May 2026 03:58:23 +0000
ROA not after: Tue 18 May 2027 04:03:23 +0000
asID: 59893
IP address blocks: 2a0f:9400:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d0:ec:cc:1b:97:83:93:ff:84:00:20:38:a5:5d:0e:e0:eb:2e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 03:58:23 2026 GMT
Not After : May 18 04:03:23 2027 GMT
Subject: CN=164E52CAC115227F6BD5663860B47D447C47CEB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:49:31:f4:29:80:54:7f:b2:25:eb:7d:19:
77:8c:75:f6:cb:8a:c4:be:2b:a6:0a:78:a0:60:2b:
3f:c0:bf:cf:01:dc:71:98:d4:3b:63:05:73:f0:f6:
66:6e:8b:fc:94:0c:f6:32:ed:8e:c1:7a:0b:02:a6:
53:38:ac:a7:80:9b:c0:b6:8a:22:b1:88:33:12:bf:
e8:11:27:46:3f:d9:3a:0b:7b:3a:5f:84:36:91:e7:
36:e3:7c:25:3d:ed:b8:c4:f6:35:bd:50:27:57:b7:
76:ce:39:fa:20:b3:50:15:f3:de:b6:ea:cc:7b:f0:
5f:e9:93:56:98:22:d6:80:0f:22:d1:03:86:e4:68:
41:e3:56:9e:6a:5b:89:c1:7e:e2:5c:56:96:f9:6a:
12:03:21:82:bf:fa:69:4f:8d:cf:19:32:7a:bc:41:
55:da:09:ee:c0:a7:1d:08:c3:a2:ad:c8:b6:73:95:
21:34:2c:35:89:e5:f5:84:6f:bb:a6:22:c4:71:6d:
ae:33:a6:30:be:ac:e4:3e:f9:a6:f7:a8:ce:ed:18:
56:41:dc:2e:e1:3a:66:3e:ea:4c:fa:48:ac:3d:4b:
50:62:ac:31:0a:94:49:f0:b3:77:06:14:86:c8:38:
56:a8:82:10:4a:96:90:f0:49:19:b7:ce:4e:8f:97:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4E:52:CA:C1:15:22:7F:6B:D5:66:38:60:B4:7D:44:7C:47:CE:B3
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS59893.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:100::/44
Signature Algorithm: sha256WithRSAEncryption
5c:f1:7c:26:c1:c3:0c:37:18:c8:80:75:d8:69:73:8a:4f:5f:
c5:76:f1:b1:45:2b:07:b8:34:1f:8d:23:ee:ab:dc:f6:be:d2:
3b:27:bb:5a:c4:6d:d8:83:f7:27:58:71:2a:57:fe:19:f0:de:
1f:13:b7:ef:ab:1b:7e:88:8c:f7:41:58:63:f2:07:62:09:d4:
58:59:59:64:1c:b2:c0:e3:ba:ec:34:c5:e6:98:98:cc:0d:ca:
23:04:d1:dc:e9:89:f8:71:45:7d:26:76:af:13:eb:fc:62:6f:
b6:d3:9e:32:25:eb:bb:e1:af:40:e5:1f:4d:fc:7e:f7:e8:47:
e8:0a:84:af:1e:ee:29:7c:cb:1a:f7:16:1d:f6:e7:6a:aa:a3:
34:77:37:8f:1c:ae:fb:02:6e:e7:f6:ab:d1:84:21:0b:36:21:
92:95:be:7b:ae:71:ae:c0:de:c8:44:0c:e4:87:f1:1d:67:02:
13:e8:c0:38:fb:99:61:87:95:75:80:b9:f5:4f:cf:76:45:4f:
b3:c1:5e:31:0a:72:29:05:b4:a6:c5:36:3e:36:f8:b2:10:53:
0a:de:d4:be:25:b3:10:d0:1d:6c:12:fb:b9:90:79:e2:d3:97:
79:dd:dc:89:d1:3b:2b:1c:f0:1a:7c:1c:7f:40:e5:d7:cb:94:
d1:99:ca:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:04:21 2026 by rpki-client