Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199277.roa
File: AS199277.roa (raw, json)
Hash identifier: P4Z094S44pDPtW4KhIibz0/cYztE/6r221rsjeuwWoE=
Subject key identifier: 42:1E:3B:23:B8:64:FB:6E:F7:4B:43:CE:2D:82:CD:72:AB:8A:7C:5F
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7515A75EFE77E64C82F59B8694132465EF3C8E42
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199277.roa
Signing time: Fri 17 Apr 2026 17:25:38 +0000
ROA not before: Fri 17 Apr 2026 17:20:38 +0000
ROA not after: Fri 16 Apr 2027 17:25:38 +0000
asID: 199277
IP address blocks: 2a0f:9400:6148::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:15:a7:5e:fe:77:e6:4c:82:f5:9b:86:94:13:24:65:ef:3c:8e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 17 17:20:38 2026 GMT
Not After : Apr 16 17:25:38 2027 GMT
Subject: CN=421E3B23B864FB6EF74B43CE2D82CD72AB8A7C5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:63:1b:a3:c9:3a:48:9a:f7:09:c5:b9:4b:
29:aa:6e:3d:c1:99:8c:5c:8a:42:98:88:d6:91:9d:
5b:34:d3:3d:31:f8:39:02:c2:1b:8c:89:62:d5:2a:
bb:cf:bb:69:ab:f3:7c:7d:b6:5e:c9:1a:5f:c7:76:
a0:67:3f:0b:1e:ce:ae:1c:44:d1:0a:f7:ae:e4:46:
f4:c1:e1:85:96:70:f9:40:03:34:38:84:6c:9c:bd:
6e:0e:37:4c:1a:06:58:46:65:2a:e2:84:f2:ce:c2:
52:fc:3f:59:f9:ba:a2:c6:cd:d7:9d:0b:2e:d7:38:
ea:b0:8d:6b:a4:68:f9:c8:80:12:15:9c:d0:14:39:
75:28:68:b7:d2:32:0c:40:ca:5b:cf:4e:20:09:af:
9c:1d:be:b2:b5:2b:bf:bf:9b:b1:08:f3:c9:5d:63:
99:7c:7c:56:66:7d:75:4f:81:b5:66:1e:79:d6:ec:
13:8d:80:72:d4:2c:0b:d2:93:bd:17:53:f8:5e:77:
89:42:df:93:38:e5:84:55:02:58:10:92:1e:0d:33:
62:5c:ff:15:7e:c4:7c:59:5d:cd:f3:c3:f0:8f:17:
91:6c:40:ea:92:e7:22:a5:46:51:63:f8:3a:5f:e2:
fb:c4:0b:23:aa:5c:dc:c3:bc:10:42:7a:07:89:a2:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1E:3B:23:B8:64:FB:6E:F7:4B:43:CE:2D:82:CD:72:AB:8A:7C:5F
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199277.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6148::/48
Signature Algorithm: sha256WithRSAEncryption
4a:0e:68:d4:fa:a6:6b:50:19:18:64:96:58:58:b3:bb:d0:11:
14:b9:1c:c2:53:9d:86:9c:f4:ff:f7:2a:1e:b5:02:02:a4:48:
7e:b8:08:40:39:15:ca:13:b3:3c:86:8e:d3:c0:27:ba:5e:65:
94:cc:34:90:0d:1e:1a:e6:2c:ea:f5:b7:8a:7a:22:5f:88:9e:
41:70:c5:03:ed:cc:09:0b:19:98:ca:1f:c6:99:dc:49:7b:19:
9c:d2:d1:7a:f5:a8:56:0b:a4:c8:5d:a2:f4:79:14:ea:a5:be:
b7:63:47:cf:6a:7c:b2:4e:b3:34:3b:a9:16:8d:39:14:ca:25:
91:b9:fe:53:30:e4:dc:1d:fc:ad:f6:aa:ec:b5:74:be:4a:54:
80:b0:d1:53:24:6b:95:15:83:9b:9a:ef:62:ab:50:0e:df:bc:
14:ce:5f:54:10:a2:63:6d:55:c8:74:58:d1:56:b5:d8:22:ab:
09:4d:dc:b1:98:6d:1f:ce:65:25:b2:7b:ca:8a:1d:50:21:66:
bc:b4:88:3c:65:22:90:3b:26:f2:99:20:23:99:4a:93:ce:1f:
b5:f3:1c:2e:83:80:32:8b:4f:fc:b0:88:d0:4a:32:4c:c2:bd:
43:03:8f:f0:52:9d:9c:97:f1:82:19:16:22:8f:de:51:69:bd:
ee:ca:80:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:12:59 2026 by rpki-client