Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150645.roa
File: AS150645.roa (raw, json)
Hash identifier: w+YbqIboQiPtiPEaqO60qUfxZzuoWAzNj12DIMtDwq4=
Subject key identifier: 8A:CC:78:96:B3:3A:47:8F:ED:5F:8A:50:94:2A:40:D7:DA:BA:E3:B5
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 562308FA521F739DB21CDBC129942576E25AFE4C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150645.roa
Signing time: Sat 28 Feb 2026 13:19:42 +0000
ROA not before: Sat 28 Feb 2026 13:14:42 +0000
ROA not after: Sat 27 Feb 2027 13:19:42 +0000
asID: 150645
IP address blocks: 2a0f:9400:691d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:23:08:fa:52:1f:73:9d:b2:1c:db:c1:29:94:25:76:e2:5a:fe:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 28 13:14:42 2026 GMT
Not After : Feb 27 13:19:42 2027 GMT
Subject: CN=8ACC7896B33A478FED5F8A50942A40D7DABAE3B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:23:56:54:68:52:59:7a:7e:b7:40:1a:5f:
37:e6:d3:41:43:96:9a:35:2b:10:2f:c4:8a:95:9a:
a5:0f:02:5a:95:9f:86:fd:76:98:92:b0:72:d0:ee:
de:d6:0a:eb:73:e2:92:f3:3f:48:ae:40:bb:b6:6d:
09:9b:f8:ac:e0:9f:e3:8a:bd:47:65:2a:43:4f:26:
ac:c4:8c:42:54:f8:19:47:28:d3:63:e9:35:10:53:
fc:22:c0:83:6f:9c:6b:f5:63:1f:95:5f:34:ec:7a:
8e:6f:28:9c:3e:1f:12:b3:2f:0b:1e:bb:03:07:61:
b7:b9:d7:c7:14:3b:69:76:ad:da:b0:45:e4:d1:ac:
62:5c:f2:8a:a9:32:5c:5f:33:c8:f6:f1:58:e8:57:
75:56:91:ec:46:e6:af:54:e9:04:81:91:9c:42:02:
8e:ee:99:5c:76:28:51:87:6e:61:38:bb:f0:fe:4b:
2c:c9:33:1c:ef:8b:5e:66:b0:2e:8c:bc:02:ed:12:
2d:88:42:df:30:ce:97:c7:d8:69:20:ea:68:7d:28:
ec:9c:33:de:4e:07:00:f8:4a:06:1a:c5:fa:80:ee:
b1:11:dc:c2:d0:5e:96:a4:df:cf:8f:48:f2:c5:87:
3d:21:db:f9:f1:b6:df:77:4e:68:8b:1d:63:77:9f:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CC:78:96:B3:3A:47:8F:ED:5F:8A:50:94:2A:40:D7:DA:BA:E3:B5
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150645.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:691d::/48
Signature Algorithm: sha256WithRSAEncryption
33:43:69:85:b6:42:e1:48:3d:3f:6d:68:17:7b:96:78:79:31:
a0:7a:44:e8:cf:5a:36:cc:e6:28:1c:9a:3f:f0:8b:38:95:a0:
a0:10:53:95:21:f4:c9:d9:10:4f:15:b8:61:d6:92:76:f6:52:
68:03:f1:3f:63:a7:bd:f4:99:60:ed:06:66:43:cb:44:0d:37:
65:6e:25:79:f7:ef:a1:96:95:29:59:87:da:0f:88:0d:6f:fb:
7f:16:f6:5a:6b:01:a0:e8:b7:e5:18:ee:70:80:5e:75:9f:6f:
b1:bc:89:4e:5e:8f:f8:88:5f:98:48:d7:1a:67:57:de:5c:41:
1e:45:c1:e8:e3:e1:3c:72:14:45:93:e1:83:de:a7:e4:0a:00:
22:ad:e8:be:05:2f:88:a7:be:96:89:66:1b:65:5b:7f:b2:68:
8a:16:3d:f6:9f:e8:9f:29:73:64:68:62:8d:38:db:e0:8e:2a:
78:aa:49:3c:fb:f7:3f:a2:97:2d:59:9c:d0:df:06:3e:4b:82:
ac:39:3f:96:ee:a5:db:88:ec:da:58:15:54:68:cb:a9:dc:d9:
17:b1:0f:00:0a:13:0f:10:5a:af:64:63:db:df:e3:7f:a3:3b:
a9:9b:46:76:f2:ba:cf:26:68:cc:9d:f2:f6:99:94:51:01:e5:
fb:1c:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:12:52 2026 by rpki-client