Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS40929.roa
File: AS40929.roa (raw, json)
Hash identifier: J7VFlHpktzdrF8NW8sukXPIcTt4rj3eAsfQdsncGVR4=
Subject key identifier: EF:CC:B8:4D:88:6D:E4:BE:4E:18:78:87:1C:D7:8A:BF:DA:F2:96:55
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6A6D115C5D4C309799EE336AE62E442695FBD552
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS40929.roa
Signing time: Fri 31 Oct 2025 17:11:33 +0000
ROA not before: Fri 31 Oct 2025 17:06:33 +0000
ROA not after: Fri 30 Oct 2026 17:11:33 +0000
asID: 40929
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:6d:11:5c:5d:4c:30:97:99:ee:33:6a:e6:2e:44:26:95:fb:d5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 31 17:06:33 2025 GMT
Not After : Oct 30 17:11:33 2026 GMT
Subject: CN=EFCCB84D886DE4BE4E1878871CD78ABFDAF29655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:9a:19:26:59:7c:04:5f:d2:e5:e2:54:b5:
55:a3:8a:9c:c9:de:f7:75:31:08:25:88:3c:29:77:
00:f1:fb:fd:dd:ed:93:c5:98:6d:2a:74:27:1f:3e:
90:23:e1:93:96:c8:0f:72:f6:92:0b:9f:85:2c:c4:
1b:66:16:cf:d3:c1:53:c3:82:d7:15:0e:76:24:8b:
4f:56:db:3a:3c:9e:1f:d2:01:c3:43:dd:20:e0:7b:
5a:90:97:cc:60:e8:1f:5f:32:8a:69:c7:55:87:5c:
8b:da:90:2a:36:29:3d:29:a5:1c:8e:77:26:d8:38:
4f:7a:0f:49:21:14:d5:f2:ef:28:1f:61:81:be:7b:
e9:e8:04:27:33:de:db:92:78:14:e3:a1:9c:b9:95:
99:ad:a5:0f:8c:fb:e7:f8:76:cc:67:60:93:d5:33:
d2:ff:ec:31:a8:fd:f1:95:38:f3:dd:43:cb:8a:dd:
fa:1a:39:f6:24:3f:61:63:7f:03:bf:0c:28:58:23:
d3:50:b8:de:d7:42:3d:eb:87:49:27:74:63:d9:d5:
f4:d0:00:bc:2f:23:e4:c5:98:ec:0d:a8:5c:2d:61:
b1:7c:d2:8e:f9:ce:7a:26:2a:b2:6e:d5:84:f9:86:
55:b0:f0:fc:46:91:4a:33:74:29:b2:9d:54:3f:78:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CC:B8:4D:88:6D:E4:BE:4E:18:78:87:1C:D7:8A:BF:DA:F2:96:55
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS40929.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
27:4b:cf:c1:c3:fb:60:a0:a0:9a:bf:7d:d4:06:85:0d:9f:fe:
2f:78:ff:7d:a1:e2:40:98:33:f8:42:a7:93:58:33:1a:cd:d7:
05:a3:ba:67:c7:3c:93:51:47:38:91:af:ee:da:b1:fa:d3:50:
ed:91:9f:6c:b2:c6:4a:7b:9b:c8:54:3c:ce:2e:69:d3:9b:19:
d7:f2:dd:29:a1:57:40:ac:b3:de:0e:db:51:21:77:48:94:22:
8d:16:95:41:9b:ae:1f:88:46:97:3f:6f:3a:8b:ef:c9:50:0f:
6a:26:a8:ca:8a:d3:53:a5:02:c5:c8:96:ad:e8:df:69:ba:68:
00:60:a8:00:10:41:ae:a1:27:88:7e:26:9f:2b:ed:5c:df:b4:
b0:3e:a2:08:bc:c7:50:3e:75:a0:1e:8c:49:4d:8f:1d:10:51:
6b:8e:43:53:4e:b1:87:c5:27:b1:ea:bc:41:b2:23:12:16:20:
11:89:28:be:09:28:79:64:bf:9b:a7:cc:4c:c4:41:91:1f:8e:
c6:11:5f:66:55:b7:ad:69:6e:af:5c:9c:3e:1a:46:9a:ac:27:
2c:97:21:a4:4d:bf:72:0a:1b:1d:ab:d6:c9:6b:5a:d9:02:a0:
6d:d3:a0:52:60:39:47:9f:2e:48:19:47:13:76:46:fe:f2:15:
3b:68:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:15:09 2025 by rpki-client