Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150506.roa
File: AS150506.roa (raw, json)
Hash identifier: YSwdUfTkvDOrDIoDnEIx10VlgCUrc4MmeBobOIcAkoo=
Subject key identifier: 9B:B3:BF:7C:7D:14:6D:ED:CE:C1:AF:A2:FD:34:BA:C3:23:EE:B6:FD
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 15EAB5BF60A62C48FC8CDA6F028228ECFD291986
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150506.roa
Signing time: Sat 28 Feb 2026 13:19:42 +0000
ROA not before: Sat 28 Feb 2026 13:14:42 +0000
ROA not after: Sat 27 Feb 2027 13:19:42 +0000
asID: 150506
IP address blocks: 2a0f:9400:691c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ea:b5:bf:60:a6:2c:48:fc:8c:da:6f:02:82:28:ec:fd:29:19:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 28 13:14:42 2026 GMT
Not After : Feb 27 13:19:42 2027 GMT
Subject: CN=9BB3BF7C7D146DEDCEC1AFA2FD34BAC323EEB6FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:e9:9e:ef:80:bd:6e:ca:cd:df:0d:9a:06:
5c:56:50:11:16:08:fb:6b:a4:c1:8b:5f:1e:8e:ed:
45:a3:e4:23:71:be:ce:70:c5:30:81:95:e1:68:e8:
ce:03:19:bb:64:84:b3:2c:a7:62:d0:1a:24:08:63:
cc:52:81:e4:6d:36:63:12:65:1a:0b:2c:93:33:b2:
96:f3:0b:50:14:a3:19:f9:da:bf:47:6a:55:a1:ce:
51:f4:88:ce:e5:63:4f:8f:0e:1e:04:45:75:ab:fd:
b9:b8:c6:e4:7d:1f:ca:ea:d4:10:3b:8b:52:aa:e8:
e3:cb:4f:0a:bd:d3:18:0f:88:63:ee:3c:26:51:a6:
91:d3:d7:84:ec:d1:31:4f:f0:8c:64:97:c6:f6:76:
fa:13:0f:48:ba:2f:8f:a0:ad:43:de:03:07:b1:e1:
5b:67:d1:f4:cd:98:7d:c9:b1:e0:86:10:26:a9:5b:
e7:c3:be:09:89:13:85:28:8f:f0:38:04:3f:58:32:
59:5d:35:54:3b:e1:76:9e:4b:d0:4b:3c:73:7e:61:
59:2a:4d:82:28:ed:28:f3:6d:3a:78:d5:f2:f4:bc:
d8:f1:ec:88:44:5e:04:7d:d8:48:43:61:62:ee:eb:
2e:80:89:7f:b2:e6:7a:5b:bd:c8:9b:a1:02:5b:f7:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B3:BF:7C:7D:14:6D:ED:CE:C1:AF:A2:FD:34:BA:C3:23:EE:B6:FD
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150506.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:691c::/48
Signature Algorithm: sha256WithRSAEncryption
a3:fb:8a:53:a3:7f:a8:f7:00:dc:95:84:f7:d9:04:4a:05:9d:
c7:d1:8d:86:9f:18:1b:e2:b3:85:4f:f6:7f:be:9c:b4:ce:67:
84:ba:aa:77:c1:51:32:05:cb:42:4c:a3:84:58:d3:92:13:39:
24:c7:ba:cf:89:0c:46:fe:c8:8e:a5:2e:03:7a:5d:4e:40:64:
21:c3:6c:a3:db:03:5e:e5:fb:2b:1f:e6:5f:31:21:26:80:13:
d3:82:11:95:ac:c1:7b:e7:16:dc:95:ad:bc:a7:43:bf:0d:ea:
72:d0:fd:53:d2:7f:d9:d0:fc:9d:34:7b:8c:fb:0b:2a:46:f6:
a2:06:82:9d:9d:ad:09:34:44:f6:c5:04:00:49:8c:7e:34:aa:
df:87:e0:ba:69:37:f8:44:da:97:10:47:87:98:69:dc:1d:39:
8e:3e:c1:2d:a5:ae:c2:c8:3f:ee:92:74:8c:8e:c2:b2:a4:97:
cb:55:91:c9:0b:9a:aa:d0:c3:a2:8f:e9:92:32:d2:da:1c:58:
ed:75:14:dd:68:83:59:38:ac:fa:87:21:1d:68:09:70:15:89:
54:cc:b5:5f:35:58:f6:be:4d:a7:58:4f:ca:5f:ba:5b:cd:64:
e1:f4:88:54:6a:4b:03:a9:f2:05:71:35:91:68:63:08:ea:fe:
a5:f7:2a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:59:36 2026 by rpki-client