Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS396503.roa
File: AS396503.roa (raw, json)
Hash identifier: Nw8RPdcdpNHAaNOnA++zkWzETj69hxPOTj7ghwfrshM=
Subject key identifier: FD:1D:4A:B1:46:B4:60:0E:BC:78:02:D8:A1:DC:29:59:0E:B1:12:0C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2587597210C0DC67AEAC5B67DE5062045E60CBC4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS396503.roa
Signing time: Tue 19 May 2026 04:03:19 +0000
ROA not before: Tue 19 May 2026 03:58:19 +0000
ROA not after: Tue 18 May 2027 04:03:19 +0000
asID: 396503
IP address blocks: 2a0f:9400:30::/44 maxlen: 48
2a0f:9400:31::/48 maxlen: 48
2a0f:9400:32::/48 maxlen: 48
2a0f:9400:7b00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:87:59:72:10:c0:dc:67:ae:ac:5b:67:de:50:62:04:5e:60:cb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 03:58:19 2026 GMT
Not After : May 18 04:03:19 2027 GMT
Subject: CN=FD1D4AB146B4600EBC7802D8A1DC29590EB1120C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:1c:62:39:7b:e7:74:e7:ec:6c:bf:40:5d:
8e:03:19:d1:92:d6:77:c0:0e:82:8b:b8:f4:23:f6:
8e:07:87:92:9a:64:dd:74:04:bc:cd:4f:99:b9:50:
64:64:1a:44:c4:9e:ff:24:46:4a:2e:c9:0f:f3:93:
6e:60:ed:80:2e:e1:d4:8e:24:09:7b:cb:f9:ca:de:
aa:39:b4:52:00:42:c3:c4:c8:22:99:40:9b:f6:4e:
79:ab:04:c8:b2:7c:09:f2:e3:bc:8f:50:e0:ea:8d:
2b:b2:c3:47:c3:5e:4f:e6:ca:78:86:61:32:78:0f:
13:e3:d8:ce:fc:23:fd:8b:44:92:81:15:35:1b:25:
75:a0:d2:ce:ef:e3:74:12:cf:b5:f2:0a:e6:32:ba:
6c:35:23:67:06:39:ec:0c:ff:ac:a3:02:cd:ac:b3:
f4:a0:f4:52:1a:12:de:f5:a7:23:20:b8:3a:b7:eb:
96:f1:f4:a3:fa:bc:09:08:46:1f:c0:7b:8a:2b:9f:
45:98:13:e6:de:5b:41:df:65:c4:3b:92:ed:e1:bf:
64:2b:a4:47:cc:ce:80:f2:93:80:4c:a0:ce:57:c2:
da:90:3d:e8:42:fc:7c:63:dd:b0:9c:4c:e9:30:ec:
2e:8a:20:8d:7b:ee:ff:8e:26:99:7a:d5:2e:d8:82:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:4A:B1:46:B4:60:0E:BC:78:02:D8:A1:DC:29:59:0E:B1:12:0C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS396503.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:30::/44
2a0f:9400:7b00::/40
Signature Algorithm: sha256WithRSAEncryption
8e:85:b0:9c:20:ca:40:54:f6:1e:c4:da:84:a1:5f:0f:14:3b:
0a:41:05:52:d7:b2:44:cf:54:16:be:c4:78:9e:eb:a7:16:2c:
cc:3e:cc:9f:33:15:59:26:e7:4f:12:1a:0e:5d:6c:02:cf:57:
f0:5e:ec:05:5e:c4:6e:61:20:7b:35:f7:de:c2:da:49:cf:05:
ff:8f:85:c4:92:5c:d6:a2:25:9f:47:d6:e7:81:50:d4:e7:20:
ef:4b:25:80:9d:9b:3f:19:ac:77:af:2a:90:71:90:d2:dc:96:
ae:d1:74:14:84:77:79:51:12:fd:05:e2:2e:49:d4:20:46:d8:
61:c5:64:2e:cc:2c:e7:66:23:73:f8:d4:a3:b2:70:1b:d4:09:
0b:b3:b0:23:f4:e5:37:79:22:3b:82:f1:27:1b:97:63:a4:2f:
2e:a7:a2:b7:35:88:cd:10:27:04:91:ab:be:62:64:c3:8d:b9:
0a:f8:b1:62:8d:00:e1:cc:96:e2:13:5c:22:68:cd:ac:87:1f:
ba:69:af:76:e7:61:8c:b3:33:ef:cd:82:51:3e:b4:97:68:cf:
c2:f6:0a:2b:65:e0:52:bd:19:34:08:a1:0a:79:0a:6f:e4:41:
8b:57:90:61:b6:f9:2f:d7:5e:c9:f5:3b:39:ff:8f:a0:58:85:
4d:91:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:44 2026 by rpki-client