Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: GG/eOYew3GQ8mdQAlb0XikkAmb4Euth6dsP+wPhWlz8=
Subject key identifier: 47:D7:2D:37:4A:F6:FD:3F:FD:55:9C:9A:13:56:9E:83:04:9E:06:92
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4275A27E66A75FACF20EFBC84031345B281E33D7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61138.roa
Signing time: Tue 19 May 2026 04:03:21 +0000
ROA not before: Tue 19 May 2026 03:58:21 +0000
ROA not after: Tue 18 May 2027 04:03:21 +0000
asID: 61138
IP address blocks: 2a0f:9400:7350::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:75:a2:7e:66:a7:5f:ac:f2:0e:fb:c8:40:31:34:5b:28:1e:33:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 03:58:21 2026 GMT
Not After : May 18 04:03:21 2027 GMT
Subject: CN=47D72D374AF6FD3FFD559C9A13569E83049E0692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:f4:7d:84:dc:aa:2b:c3:38:44:b5:df:89:
1a:f6:0d:c6:1b:c4:f4:69:98:5f:9b:43:f2:ba:9c:
5e:29:b0:d4:7e:b6:1d:86:09:f3:72:3a:45:74:a9:
1b:28:62:42:7e:27:3e:4f:de:07:21:9d:1d:14:c2:
2f:86:1d:7e:f9:ca:18:88:57:dd:5c:ff:d6:c0:32:
76:60:32:d7:29:23:b3:39:c8:e0:bd:2f:75:ce:e7:
1a:5c:1d:6a:33:13:04:e3:c8:1e:e7:bc:d8:ab:d3:
fc:74:4b:50:af:82:84:eb:f3:28:ed:04:3d:2f:40:
3e:b1:00:f1:78:8e:62:56:0c:b3:3f:64:de:bb:37:
5f:17:92:e1:7a:a6:02:4e:1c:c6:88:c5:e8:a3:d1:
1a:86:29:99:26:b5:2d:de:6f:ba:63:3b:f7:56:dc:
6d:ec:32:75:15:36:9b:95:81:a7:0e:fd:39:e8:cd:
eb:ab:0c:22:86:dd:1a:d9:db:54:67:5e:d3:fe:a5:
1e:a7:de:d0:1d:8a:ad:f3:c9:6a:1c:16:cb:02:93:
d2:8f:31:20:bb:0a:6a:f2:51:94:27:be:e4:c6:8a:
47:04:6a:7a:e2:30:0f:b1:93:c6:08:64:88:c6:4d:
c3:de:b9:f4:83:e8:fc:3f:69:65:60:28:ca:9d:8c:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D7:2D:37:4A:F6:FD:3F:FD:55:9C:9A:13:56:9E:83:04:9E:06:92
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7350::/44
Signature Algorithm: sha256WithRSAEncryption
10:ab:cd:5e:d5:93:a2:94:41:20:54:35:98:97:45:45:4e:b9:
9c:7e:05:4c:c8:96:2b:bc:b9:92:70:1a:52:2e:b0:5b:9b:1e:
41:64:a2:46:f9:e3:d4:dc:58:93:12:20:34:c3:2f:d7:e2:7b:
29:24:05:92:36:ee:dc:f5:90:03:3f:76:0e:2f:ae:52:dd:2c:
3f:2c:63:e5:da:8f:e1:72:eb:8a:7a:68:18:b9:a4:f7:00:2d:
14:b7:64:00:1a:9b:57:3a:b9:60:d8:ed:7b:c2:b4:9d:a4:26:
48:f7:62:a2:cf:70:12:bc:bb:6a:d1:8a:ba:f3:a9:b3:e9:2c:
f3:a6:1f:cb:67:9e:f8:53:bf:f2:91:02:59:d1:0e:af:90:71:
37:bb:c6:6c:92:bf:69:8d:08:c9:b9:5e:88:9d:f3:70:ef:af:
5c:b9:82:b1:92:7d:12:50:1f:0b:1d:b6:6b:2e:00:fb:40:7d:
3e:52:b7:2e:43:c0:5e:b4:7d:81:a4:85:99:97:79:f9:67:45:
c1:7d:bd:7f:69:15:83:63:e0:a8:c4:96:c4:d5:29:f2:41:86:
06:9d:db:de:ea:8f:dd:d6:07:4c:93:dc:79:47:43:d1:11:c7:
e2:bf:6f:aa:dc:15:ce:81:34:13:f1:08:81:8d:b1:fe:4c:b7:
f0:c9:90:08
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUQnWifmanX6zyDvvIQDE0WygeM9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjA1MTkwMzU4MjFaFw0yNzA1MTgwNDAzMjFaMDMxMTAvBgNV
BAMTKDQ3RDcyRDM3NEFGNkZEM0ZGRDU1OUM5QTEzNTY5RTgzMDQ5RTA2OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfhPR9hNyqK8M4RLXfiRr2DcYb
xPRpmF+bQ/K6nF4psNR+th2GCfNyOkV0qRsoYkJ+Jz5P3gchnR0Uwi+GHX75yhiI
V91c/9bAMnZgMtcpI7M5yOC9L3XO5xpcHWozEwTjyB7nvNir0/x0S1CvgoTr8yjt
BD0vQD6xAPF4jmJWDLM/ZN67N18XkuF6pgJOHMaIxeij0RqGKZkmtS3eb7pjO/dW
3G3sMnUVNpuVgacO/TnozeurDCKG3RrZ21RnXtP+pR6n3tAdiq3zyWocFssCk9KP
MSC7CmryUZQnvuTGikcEanriMA+xk8YIZIjGTcPeufSD6Pw/aWVgKMqdjCLnAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUR9ctN0r2/T/9VZyaE1aegwSeBpIwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzYxMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg+UAHNQMA0GCSqGSIb3DQEBCwUAA4IB
AQAQq81e1ZOilEEgVDWYl0VFTrmcfgVMyJYrvLmScBpSLrBbmx5BZKJG+ePU3FiT
EiA0wy/X4nspJAWSNu7c9ZADP3YOL65S3Sw/LGPl2o/hcuuKemgYuaT3AC0Ut2QA
GptXOrlg2O17wrSdpCZI92Kiz3ASvLtq0Yq686mz6Szzph/LZ574U7/ykQJZ0Q6v
kHE3u8Zskr9pjQjJuV6InfNw769cuYKxkn0SUB8LHbZrLgD7QH0+UrcuQ8BetH2B
pIWZl3n5Z0XBfb1/aRWDY+CoxJbE1SnyQYYGndve6o/d1gdMk9x5R0PREcfiv2+q
3BXOgTQT8QiBjbH+TLfwyZAI
-----END CERTIFICATE-----
Generated at Sat Jun 6 09:23:58 2026 by rpki-client