Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS63473.roa
File: AS63473.roa (raw, json)
Hash identifier: 0KEfHle0aUplG7WjFBxKM5VQvxl9gpKiyW4NDeYtFTs=
Subject key identifier: 4D:4E:81:08:B3:BB:45:57:29:9F:67:1E:86:17:FA:DE:81:72:A9:CA
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 247D947800CC7BCA64EB7A8FCE4C8A4474DB9C81
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS63473.roa
Signing time: Sat 06 Jun 2026 23:12:13 +0000
ROA not before: Sat 06 Jun 2026 23:07:13 +0000
ROA not after: Sat 05 Jun 2027 23:12:13 +0000
asID: 63473
IP address blocks: 2a0f:9400:7389::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:7d:94:78:00:cc:7b:ca:64:eb:7a:8f:ce:4c:8a:44:74:db:9c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 6 23:07:13 2026 GMT
Not After : Jun 5 23:12:13 2027 GMT
Subject: CN=4D4E8108B3BB4557299F671E8617FADE8172A9CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:6f:af:00:27:8c:50:b3:f4:25:88:48:94:
2e:75:f4:9d:ba:19:3c:19:aa:3a:84:6d:80:01:23:
a5:57:85:1a:8a:8e:05:99:0d:5d:72:0c:41:93:45:
65:be:1d:bd:a2:84:1c:f1:01:41:ea:d1:40:ba:f8:
5a:25:1d:11:8c:0a:48:ad:8f:b3:a7:9f:4d:17:79:
2e:9b:3c:02:11:b1:43:17:5a:0f:91:7b:df:50:16:
8f:ba:bf:45:a5:1c:fe:fa:4e:86:c6:fc:2e:d2:39:
02:fb:43:fc:71:3e:9e:67:32:f1:08:53:e4:2b:c4:
46:c3:d6:de:07:41:6e:76:bb:e8:ee:21:4e:41:40:
7a:c9:3c:40:e3:28:c6:94:b3:1a:fb:01:b3:91:b7:
21:89:14:1c:9e:20:d3:be:38:1c:3c:3b:ef:0b:4b:
8e:f2:49:ea:70:2d:29:1e:8d:63:35:3f:e0:70:67:
68:f6:bb:96:fb:d3:77:a3:ac:63:96:f7:09:ed:36:
1b:06:97:46:55:b9:f9:4a:31:23:c5:92:df:d0:f7:
55:47:31:11:33:46:01:b8:8e:02:da:5a:79:e9:45:
46:b4:b2:d8:e2:dd:4f:25:8a:ef:a3:e7:3e:a5:58:
c3:06:38:ec:b4:6a:44:5a:5b:61:61:8d:62:1e:bc:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:81:08:B3:BB:45:57:29:9F:67:1E:86:17:FA:DE:81:72:A9:CA
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS63473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7389::/48
Signature Algorithm: sha256WithRSAEncryption
d2:58:78:85:85:d5:23:c4:1e:cd:ef:79:7c:7e:3d:dd:95:5a:
34:91:1c:40:8f:d8:82:31:3f:55:6b:99:9b:15:61:3d:88:93:
c9:2a:63:78:be:da:8e:98:06:44:c5:90:9d:06:e8:e7:8a:ec:
3a:22:d0:65:5d:15:ef:00:c6:16:c3:6a:06:04:87:6e:37:b1:
cc:34:8e:d4:1b:f2:1f:5b:53:88:8d:10:f1:25:c1:45:f9:e6:
b7:8b:81:37:c0:73:2c:53:73:5b:30:d1:b3:0a:70:cf:7a:1c:
9c:42:58:62:33:1d:be:83:96:08:c5:a6:ad:5c:43:13:2c:01:
11:78:d5:13:0e:51:80:be:74:e3:3a:c5:ed:34:5c:40:3d:e3:
fe:4e:60:e7:de:3e:7f:5d:68:5c:1f:0a:4d:a8:b0:f8:14:54:
e6:87:54:7d:d5:a3:40:43:a1:1f:ea:62:da:e8:50:eb:d1:5e:
0c:be:bf:2e:b8:f6:0b:df:d4:9c:88:da:93:0e:f2:28:7f:14:
12:cb:ce:3b:12:6b:65:f4:25:2a:2f:27:b0:e1:f8:bb:65:54:
0e:0a:15:45:3c:9f:61:47:b4:28:e1:56:9a:42:1b:98:bc:04:
e6:98:57:59:6f:41:40:12:f1:a2:d3:ec:54:60:08:89:82:db:
7f:84:34:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:06:18 2026 by rpki-client