Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS35661.roa
File: AS35661.roa (raw, json)
Hash identifier: 4teToylx1oLyxdyXYDwADIgLyKd00th0cm3zixBKYCA=
Subject key identifier: A0:46:80:49:E6:17:8D:9B:84:94:D1:1F:4D:47:F7:A6:DF:49:AB:FA
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 46EFB4102D477DBCC72234118984A6BDD56A72D9
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS35661.roa
Signing time: Fri 18 Sep 2026 07:05:57 +0000
ROA not before: Fri 18 Sep 2026 07:00:57 +0000
ROA not after: Fri 17 Sep 2027 07:05:57 +0000
asID: 35661
IP address blocks: 2a0f:9400:738b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ef:b4:10:2d:47:7d:bc:c7:22:34:11:89:84:a6:bd:d5:6a:72:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 18 07:00:57 2026 GMT
Not After : Sep 17 07:05:57 2027 GMT
Subject: CN=A0468049E6178D9B8494D11F4D47F7A6DF49ABFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:83:81:fc:02:02:83:1b:04:5a:57:77:3b:
6d:2b:f2:76:3d:75:57:35:8a:30:0c:2f:06:c2:4e:
04:bf:4e:42:29:dd:f5:d6:d4:97:c1:b1:08:a0:8a:
eb:8a:19:44:77:5b:82:bd:0a:9a:7a:34:37:1e:35:
ab:04:95:95:26:d6:90:cf:c6:e4:33:dd:a9:43:e5:
07:53:61:90:31:89:d0:1a:fb:35:48:cd:fc:6c:8a:
db:77:b9:d0:43:fc:6e:1b:b1:34:71:2f:6f:1a:a9:
09:97:56:4c:14:d1:6e:4b:0e:ae:09:dc:c1:d8:f8:
75:0f:75:85:73:4f:74:46:86:47:01:a9:e0:10:bb:
6f:7f:7b:a7:75:c0:00:b7:c8:21:80:fc:ee:7e:16:
f0:34:74:f3:2a:12:48:12:ce:43:22:19:06:eb:47:
54:c8:c0:6c:42:7e:d7:b0:24:cb:e0:58:41:da:d9:
7d:40:0d:3e:26:36:d2:35:e8:16:04:10:57:f9:99:
0f:a6:3f:5e:e0:8f:e3:f2:34:f8:f3:d0:81:78:a8:
c1:3f:ea:5a:5e:45:1b:a9:69:08:41:69:e4:50:34:
2f:d6:cf:86:e0:dd:71:25:c7:dd:0f:ff:18:c9:e1:
39:a9:67:32:57:a6:ce:23:78:4a:4e:6f:52:31:08:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:46:80:49:E6:17:8D:9B:84:94:D1:1F:4D:47:F7:A6:DF:49:AB:FA
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS35661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:738b::/48
Signature Algorithm: sha256WithRSAEncryption
69:e1:46:c5:54:b4:cb:32:18:8f:95:45:4c:1e:56:40:6d:d3:
b1:4a:a2:06:f5:de:66:65:b3:bc:c4:fb:87:90:26:32:87:c5:
4a:df:3a:bf:f5:0f:9c:a2:6b:49:78:fc:9b:0c:10:31:01:b6:
ad:dd:51:3d:a4:05:73:d6:76:9a:36:f6:35:20:4b:4b:16:24:
8a:b3:d8:b9:25:92:ec:32:e5:33:11:84:35:1b:27:37:bc:4c:
99:b4:00:b7:79:01:8f:17:90:bf:91:64:7c:0f:f8:f3:be:8f:
90:35:76:2f:d1:5a:ed:82:0e:f3:51:fa:03:00:1c:f7:f6:1c:
0e:7d:f2:d5:b7:62:69:38:27:bc:3c:05:9e:fd:54:37:3c:75:
6e:3f:3f:ef:12:23:36:af:c6:bd:e0:4b:e4:5d:ad:67:2b:21:
4f:ef:ad:0a:97:4b:c4:fe:2d:4d:f0:0a:46:8a:6c:f3:5d:a1:
dd:e0:91:4b:b5:74:b9:1b:2b:01:7e:68:ad:32:c5:87:8b:fa:
8d:6d:e8:d5:82:a7:8f:81:4f:7b:62:0e:ce:28:0b:60:c1:08:
81:e3:81:a3:ac:fc:06:da:9d:8c:da:a6:16:bf:15:3a:ae:5a:
0c:7a:a1:00:d7:93:f9:80:a3:a4:c6:ed:97:0d:1e:66:ac:45:
c1:d4:81:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:30:31 2026 by rpki-client