Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197438.roa
File: AS197438.roa (raw, json)
Hash identifier: MwsBS5UwsGQUK+hOrN330zHikmadJplSlAC8MqW5Qpg=
Subject key identifier: A9:24:30:56:B8:E1:86:EF:80:47:3D:C2:40:14:9E:64:91:13:87:4E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 418D9DC0B328B89FAC41ADEF3DF1D0324DD7A2A1
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197438.roa
Signing time: Fri 06 Nov 2026 14:32:46 +0000
ROA not before: Fri 06 Nov 2026 14:27:46 +0000
ROA not after: Fri 05 Nov 2027 14:32:46 +0000
asID: 197438
IP address blocks: 2a0f:9400:611e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:8d:9d:c0:b3:28:b8:9f:ac:41:ad:ef:3d:f1:d0:32:4d:d7:a2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 6 14:27:46 2026 GMT
Not After : Nov 5 14:32:46 2027 GMT
Subject: CN=A9243056B8E186EF80473DC240149E649113874E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:43:9f:e1:7e:ef:d2:32:60:5d:16:77:d3:7f:
54:86:7d:6a:08:73:0b:29:55:56:ca:ed:ea:a1:a1:
7d:12:e0:34:2b:87:e4:76:ab:3e:10:c1:c7:f6:6c:
9a:d8:46:3d:33:b4:20:33:da:55:39:6c:9b:fd:6c:
da:dd:23:20:d4:f3:4c:be:81:8f:95:a4:93:68:4a:
1f:f3:06:67:dc:3e:ad:d0:05:f6:c2:c9:ce:5c:ef:
d0:4c:b6:ea:54:6e:e3:61:08:8e:c1:3b:bc:e8:0f:
52:7e:e3:70:8c:4d:b6:71:e9:e8:6f:9e:95:08:07:
c9:5c:b0:f0:1e:34:fe:79:77:81:09:fa:b7:99:27:
4c:b3:28:64:1d:80:1d:20:97:ee:72:47:b5:77:9f:
ad:be:de:dc:ae:f4:1a:96:d5:f8:2c:71:d1:41:16:
9e:90:8c:73:59:18:b6:fb:0f:bc:7b:b1:b0:00:09:
07:b6:15:52:35:d2:e7:ed:67:a4:1f:77:b3:c3:b9:
c9:6f:bd:9b:be:67:02:69:92:28:66:25:82:7e:56:
19:66:89:49:e1:c1:d7:a4:81:15:cc:7d:aa:42:b0:
dc:a6:c6:e1:27:4e:9e:18:ea:87:54:54:56:b4:73:
c5:7d:b2:f2:8e:f0:9e:a9:2f:70:b2:0f:b6:6f:df:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:24:30:56:B8:E1:86:EF:80:47:3D:C2:40:14:9E:64:91:13:87:4E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:611e::/48
Signature Algorithm: sha256WithRSAEncryption
5d:14:0e:fe:50:ef:5d:78:55:b7:23:d1:15:2c:0c:d0:88:2d:
ae:a4:d8:61:06:b3:c2:d1:9b:29:92:68:a9:07:c3:76:8c:00:
63:8f:5f:32:9b:bd:0f:dc:0f:83:be:bc:e6:11:a7:1b:c9:36:
5b:91:b4:df:b6:b7:1d:c8:56:20:8f:06:8b:d5:ad:78:21:c7:
e5:51:2b:08:b3:f1:59:bd:00:ee:51:46:54:d7:9a:48:13:69:
3c:79:15:a5:fd:d7:be:a4:c5:96:0f:4d:27:97:38:9a:22:4b:
9f:ba:2f:f5:01:c4:21:1e:4b:6c:bf:bd:14:26:0c:e6:ac:46:
ba:ac:0d:c6:e9:e7:f1:e4:e1:18:4a:fe:c7:f0:51:82:c6:e6:
60:75:15:b6:17:73:9f:aa:e1:40:05:7e:5c:47:c2:df:6b:9f:
4f:71:fc:93:f3:d6:67:4b:9a:9b:52:2f:1b:49:af:3f:39:1a:
44:76:07:cf:1e:d2:c2:9d:45:03:df:29:eb:1f:0b:e7:90:66:
b9:5d:16:e7:73:8f:6f:95:e8:d3:3d:0f:aa:78:e4:23:65:e2:
0b:e5:f1:31:d3:4e:f7:93:fb:14:99:f0:13:64:c3:aa:29:99:
87:bd:f7:9a:fd:dc:f3:fd:0e:e8:b1:d1:2a:d3:64:32:78:6b:
41:79:01:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 23:49:43 2026 by rpki-client