Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS19318.roa
File: AS19318.roa (raw, json)
Hash identifier: 99YmZJofqA3tIoQ15Pqr8E87TriXiM5/eMKAFUAFldw=
Subject key identifier: BA:49:F3:DA:E2:FF:DE:17:D3:E4:7C:66:08:80:86:70:5D:13:1D:A4
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 476B6155DB8665B22569FBC0A06B1C14100F0749
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS19318.roa
Signing time: Fri 31 Oct 2025 00:19:58 +0000
ROA not before: Fri 31 Oct 2025 00:14:58 +0000
ROA not after: Fri 30 Oct 2026 00:19:58 +0000
asID: 19318
IP address blocks: 2a0f:9400:7e03::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:6b:61:55:db:86:65:b2:25:69:fb:c0:a0:6b:1c:14:10:0f:07:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 31 00:14:58 2025 GMT
Not After : Oct 30 00:19:58 2026 GMT
Subject: CN=BA49F3DAE2FFDE17D3E47C66088086705D131DA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:a3:94:b4:7b:0a:4c:ed:dc:77:78:ce:be:
e0:9b:cc:98:93:68:6f:cf:fc:e1:c2:c7:c4:2c:7a:
6e:4e:fb:1e:5e:84:11:03:b6:7d:9b:95:54:fe:3b:
0e:9d:70:ee:61:2b:4d:45:3e:ec:18:d8:55:4e:9d:
8b:10:9f:ba:b1:b6:27:21:e0:db:e4:32:dd:bd:11:
eb:20:5e:0a:ce:26:6b:7c:fd:2d:60:1c:3f:4d:4b:
1e:75:56:35:07:72:06:de:fd:92:e8:2a:e3:36:96:
1a:0b:6c:f8:49:48:21:9b:44:0c:c3:28:f5:3a:8b:
2b:ec:90:8f:49:3b:87:88:ef:dc:39:ec:ca:bb:56:
aa:7e:ce:a7:a9:9c:1f:51:d6:a7:79:69:aa:40:6f:
35:e2:06:9c:de:e6:af:a0:f7:33:d5:35:d1:a4:63:
aa:77:4f:9a:98:ff:e8:6f:0d:7a:36:1c:7b:ac:13:
52:96:24:fd:5a:34:65:56:01:b9:c3:02:84:9e:3c:
a4:81:85:85:83:2e:21:8b:82:38:f5:aa:c0:25:5c:
d7:e0:de:d0:f0:e2:d7:14:d5:f3:ea:7f:a0:3f:5a:
33:76:52:55:7f:dc:9a:4d:2c:59:ce:ca:c4:92:37:
d8:56:01:2e:17:60:37:3f:4d:69:e1:51:ef:b6:01:
b2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:49:F3:DA:E2:FF:DE:17:D3:E4:7C:66:08:80:86:70:5D:13:1D:A4
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS19318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e03::/48
Signature Algorithm: sha256WithRSAEncryption
25:9a:a7:84:69:93:ed:c1:bd:52:ed:06:f9:99:1b:78:11:9c:
5f:8c:8c:4a:ac:27:5d:2f:ee:be:5b:0a:fe:00:2f:8f:94:d8:
16:97:df:b6:cd:c7:0d:11:e5:ad:21:bf:d1:a9:bf:dd:1e:23:
ff:76:32:6a:b0:5d:2f:03:95:7b:28:5a:fe:20:68:a1:e6:14:
95:b6:48:18:8d:f0:d8:0b:dd:32:da:76:2c:b1:30:5d:fc:64:
4c:f8:ef:27:dd:ab:fa:df:22:48:6d:7e:97:d8:68:cf:b7:01:
91:0a:7a:c1:68:78:05:a8:22:cb:71:69:ea:a7:70:d4:54:db:
fe:17:91:0a:81:09:bd:a1:59:21:9d:89:a7:6a:21:42:b0:49:
0c:48:14:ef:f6:19:38:42:3b:9e:f1:14:b6:bd:f7:cd:90:48:
9b:58:fc:a1:b7:5e:bc:7c:86:76:b6:8a:e0:fb:73:c2:20:a6:
a5:7f:44:90:5a:e7:8c:aa:e8:a8:12:67:35:57:3a:be:fa:8c:
b2:42:c0:02:c5:ef:17:2b:dd:42:7b:23:8a:e3:de:49:97:97:
52:b6:61:37:b1:2d:9a:61:ca:78:5b:03:eb:5e:14:a0:8b:85:
1f:de:33:50:52:67:39:b8:8f:c5:cc:26:e0:5f:57:a4:15:a7:
fd:a6:41:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:56:25 2025 by rpki-client