Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS402133.roa
File: AS402133.roa (raw, json)
Hash identifier: dh28bt18NFvyHNgeZb/Ywesi9Kmn5cLbqrhmNWHoHTY=
Subject key identifier: 86:39:2E:89:86:04:17:06:56:E9:D2:77:2F:CC:91:53:2C:41:B7:AC
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 11C69E1F1191FE5D993A2D7590F3C441E40124AB
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS402133.roa
Signing time: Fri 18 Sep 2026 13:37:42 +0000
ROA not before: Fri 18 Sep 2026 13:32:42 +0000
ROA not after: Fri 17 Sep 2027 13:37:42 +0000
asID: 402133
IP address blocks: 2a0f:9400:7900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c6:9e:1f:11:91:fe:5d:99:3a:2d:75:90:f3:c4:41:e4:01:24:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 18 13:32:42 2026 GMT
Not After : Sep 17 13:37:42 2027 GMT
Subject: CN=86392E898604170656E9D2772FCC91532C41B7AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:89:08:fd:d1:fa:fa:71:84:7d:ff:ab:b9:
d2:c5:31:98:b5:38:52:dd:8f:19:04:c5:da:19:68:
bc:17:4b:81:82:28:b2:d3:84:4e:0d:05:48:9f:ba:
52:3e:6e:70:23:7c:16:cd:37:4b:7a:3e:f1:d0:8f:
c3:69:aa:be:a4:ba:59:59:92:0c:71:3b:97:ba:5c:
54:b5:d0:cd:27:d4:d6:09:b3:10:81:30:57:35:34:
25:d9:80:68:09:81:99:a2:65:1e:74:c1:71:c5:c3:
61:21:56:6d:96:a5:c2:4c:6c:ec:19:d5:53:a6:76:
5f:e7:1c:8f:5f:45:55:10:14:9b:d9:a3:0d:e1:d5:
4a:e6:8a:f0:d7:1c:77:07:00:69:cb:f7:58:c7:1a:
46:5f:ee:92:e9:c5:0e:59:e4:e0:ae:45:75:6d:73:
ae:a1:31:01:dc:39:c1:7d:4e:99:b1:67:a3:57:54:
a6:ce:f9:79:b0:f0:d0:61:e4:2f:79:60:d5:93:63:
a3:4a:fb:ec:9e:38:77:16:2d:12:27:8d:9a:48:a7:
ae:7b:19:48:6e:64:f4:43:b2:2d:db:e3:86:36:17:
c9:a8:fd:bd:bc:db:7b:9d:90:f2:51:1f:89:79:47:
5b:64:53:e9:50:e8:de:ba:92:d8:6c:65:7a:17:25:
c2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:39:2E:89:86:04:17:06:56:E9:D2:77:2F:CC:91:53:2C:41:B7:AC
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS402133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7900::/40
Signature Algorithm: sha256WithRSAEncryption
58:2f:a3:d8:11:fa:98:1a:42:f5:76:47:af:47:a8:99:cc:15:
77:4c:08:39:88:82:30:83:48:e0:57:14:1b:e6:99:23:41:3a:
f5:b9:f9:1a:40:53:4b:f5:31:20:90:d5:30:54:6e:84:c2:00:
e8:68:a5:f3:76:e3:b1:3c:21:45:05:c7:f1:51:6c:f7:d5:61:
bf:b7:db:e4:23:bb:97:e6:04:ff:ff:dd:e6:56:6c:43:21:2d:
fe:a7:99:5b:ec:26:22:6c:71:ac:7e:5f:46:85:2b:a6:60:b2:
38:c8:e9:f8:00:42:81:cf:34:57:ec:2d:20:d1:63:3e:71:18:
44:33:36:36:19:43:58:f9:21:52:54:7b:34:f6:11:6f:15:bb:
33:28:17:c8:4a:51:42:17:c5:6c:90:c7:3f:c8:ab:4b:36:3e:
f0:5f:34:e0:f2:c8:57:7e:59:d6:50:26:11:77:d5:a2:dc:d6:
46:44:b1:4d:b6:c9:0b:92:f6:f4:43:52:de:87:36:8a:56:67:
4d:e3:fb:da:5a:de:c6:f8:42:2c:ac:09:85:d6:44:86:24:dc:
c1:2d:67:2b:f7:5f:58:1c:ad:be:03:f0:dc:36:9c:46:84:79:
bb:85:fc:62:94:c7:4b:04:e6:71:52:cc:80:2e:ce:48:17:f8:
fe:cb:bd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:30:29 2026 by rpki-client