Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS38173.roa
File: AS38173.roa (raw, json)
Hash identifier: NiBZQayICSVQzdlSv7UoJtSGGc3tt9d4xMLmZ86WeRE=
Subject key identifier: F8:BE:70:E9:AD:E2:9D:4C:55:04:00:CC:41:E5:9B:81:A3:0B:BC:94
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3F5992B4D35D58C167BC14B8249B5BE61E43DAB9
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS38173.roa
Signing time: Tue 19 May 2026 04:03:19 +0000
ROA not before: Tue 19 May 2026 03:58:19 +0000
ROA not after: Tue 18 May 2027 04:03:19 +0000
asID: 38173
IP address blocks: 2a0f:9400:8022::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:59:92:b4:d3:5d:58:c1:67:bc:14:b8:24:9b:5b:e6:1e:43:da:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 03:58:19 2026 GMT
Not After : May 18 04:03:19 2027 GMT
Subject: CN=F8BE70E9ADE29D4C550400CC41E59B81A30BBC94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:3e:19:89:9c:bd:ad:72:7f:5d:c3:b4:50:
a2:1e:77:d1:a6:66:6a:a7:92:aa:a8:27:0c:f9:4a:
49:b2:89:ed:6d:af:27:0a:79:c0:92:88:d1:c4:30:
4a:4c:d3:67:e7:71:90:47:89:ec:67:5a:a5:b7:e8:
07:16:8b:77:25:44:f5:3f:7e:7f:7a:e4:a0:54:49:
7c:5a:72:89:84:01:cb:1a:f2:34:22:ad:0d:5e:9b:
c7:75:59:74:52:25:17:d5:bf:e9:a9:0e:36:4e:ba:
2e:da:07:6f:2e:23:28:aa:13:79:a5:88:cf:d2:ca:
4c:a4:6d:9d:88:0d:9c:0b:57:b6:a2:81:e2:f0:c7:
fb:fc:9b:29:3f:ff:f2:a8:76:76:3d:b6:17:36:e5:
c2:c3:86:a5:6c:a2:b8:e7:e0:62:8a:aa:f0:a3:5e:
e5:80:4a:a1:b1:8a:4b:85:e9:fc:6e:d9:da:5f:af:
be:bb:99:33:58:62:92:70:92:ed:fd:e3:c0:df:89:
ee:f0:d3:ed:24:9f:9a:19:84:3c:1e:dc:1d:ad:99:
03:91:6f:21:df:1b:37:3a:5f:9e:d8:fe:c1:e2:f6:
2a:87:73:2f:8b:e3:fa:ae:f1:8e:7c:d0:56:ea:e8:
c4:72:8b:47:56:6b:bc:08:93:41:b8:04:db:14:6f:
0c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BE:70:E9:AD:E2:9D:4C:55:04:00:CC:41:E5:9B:81:A3:0B:BC:94
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS38173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8022::/48
Signature Algorithm: sha256WithRSAEncryption
70:a0:07:8a:d3:7c:39:f6:77:e7:0e:a1:d2:c4:af:61:1a:18:
70:b1:73:fe:d5:87:07:6a:e3:55:13:7c:c8:69:0f:c8:80:28:
f8:eb:fc:bf:9b:d7:af:c7:c2:7c:4b:93:6f:32:88:97:10:56:
e7:a8:e5:a6:15:df:4c:33:f8:49:f4:f6:a8:40:9b:03:b5:fa:
25:cf:24:72:cf:dc:6c:9d:9c:4d:91:d8:60:4b:ad:19:3c:27:
35:14:bf:2c:47:8e:51:e3:c0:a4:47:da:04:fb:17:69:a2:4e:
00:d7:32:a4:27:e9:99:ae:5d:c8:c7:fd:df:70:23:cd:65:2d:
91:76:d9:1a:f2:56:8c:35:33:ba:c2:1b:30:30:62:51:16:8d:
b1:6d:f8:0e:d9:89:f9:75:41:f5:9c:c9:87:a7:bf:42:47:08:
0a:02:1e:2c:ad:32:02:c5:94:d3:c7:59:21:fd:20:05:88:83:
d8:82:39:44:03:a9:8a:9d:cb:4c:8b:d0:f0:de:dc:3b:26:87:
31:dc:fa:2d:7c:e1:fd:da:8a:1d:2d:53:f4:3d:12:c5:d2:5f:
91:08:d8:71:db:b9:c5:c7:e1:67:e4:32:64:98:43:60:86:db:
8d:64:44:e9:9f:40:b8:df:1e:68:3f:54:db:25:ce:ea:4c:76:
fb:6d:bc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:40 2026 by rpki-client