Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48741.roa
File: AS48741.roa (raw, json)
Hash identifier: n5k1WS9tLKS7X+jCE/yxadUniEXJQW+vmiW+XJlsNYc=
Subject key identifier: 16:AA:79:92:76:15:37:4C:18:A2:E9:60:78:CD:42:1B:1B:63:12:A8
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4805CBD84F1D747D203EE7C654FCC2884C0BAE0F
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48741.roa
Signing time: Thu 29 Jan 2026 22:06:56 +0000
ROA not before: Thu 29 Jan 2026 22:01:56 +0000
ROA not after: Thu 28 Jan 2027 22:06:56 +0000
asID: 48741
IP address blocks: 2a0f:9400:6210::/48 maxlen: 48
2a0f:9400:6225::/48 maxlen: 48
2a0f:9400:6228::/48 maxlen: 48
2a0f:9400:6230::/47 maxlen: 48
2a0f:9400:6249::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:05:cb:d8:4f:1d:74:7d:20:3e:e7:c6:54:fc:c2:88:4c:0b:ae:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jan 29 22:01:56 2026 GMT
Not After : Jan 28 22:06:56 2027 GMT
Subject: CN=16AA79927615374C18A2E96078CD421B1B6312A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:57:f5:5f:a9:13:b4:ee:e6:3d:24:3c:bd:3f:
b4:70:35:62:69:fa:58:48:b2:85:82:fb:90:6f:2a:
40:3b:69:0c:4f:98:d4:23:78:30:4d:68:54:b4:75:
3a:63:60:7b:c1:9b:e4:41:ce:8f:fe:76:ea:f3:cb:
87:c6:a8:28:27:fa:bd:b2:46:95:b4:5c:e4:69:57:
e3:da:c3:5e:94:cd:64:b4:ae:6b:76:87:ac:b6:16:
ff:79:a5:84:4f:47:e2:76:da:20:56:e6:d7:82:0b:
b1:d3:05:27:f9:3d:57:f4:82:ba:58:7c:0b:00:70:
7c:8a:50:4e:58:9d:d6:fb:3d:6f:64:2e:e2:ec:ca:
d8:6a:f5:c1:79:7f:90:2a:d5:b2:d3:3a:f0:ec:5f:
b2:b0:f3:c7:90:0c:4c:e1:5b:2b:3e:e5:d0:15:d3:
52:2a:60:55:3e:ab:54:35:03:01:b6:f6:7a:a4:57:
bc:f6:07:1c:05:45:85:44:4a:f4:9b:a7:c2:3c:ed:
ee:ac:b4:91:2b:2a:7c:69:ca:f4:8b:3d:0a:54:20:
df:f6:bf:02:ab:33:7f:ef:29:12:d8:59:35:04:3a:
9b:ac:45:3d:bc:2b:31:76:7b:e4:f2:16:64:ce:d6:
d7:1e:19:ae:24:bf:1c:88:78:3b:32:52:a3:95:31:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AA:79:92:76:15:37:4C:18:A2:E9:60:78:CD:42:1B:1B:63:12:A8
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6210::/48
2a0f:9400:6225::/48
2a0f:9400:6228::/48
2a0f:9400:6230::/47
2a0f:9400:6249::/48
Signature Algorithm: sha256WithRSAEncryption
53:39:b5:45:88:26:a3:6d:32:77:51:12:90:9e:99:83:b5:ce:
91:6f:3d:32:91:76:cd:4b:b9:b2:3d:bf:25:ce:b5:44:11:76:
0d:80:e3:11:8a:14:75:0c:52:24:6a:23:db:96:9d:8d:13:21:
76:86:49:41:1e:7d:62:a0:dd:7a:42:f2:48:15:35:02:15:17:
1a:62:b9:1c:1f:07:5c:6d:8f:e8:6e:92:ba:b5:df:ab:29:e3:
d3:91:6e:b5:19:9d:39:53:c0:e9:44:48:e0:03:d9:2c:fb:21:
37:d8:0e:ef:11:4b:54:9e:f4:fb:9d:be:0b:ef:9f:7d:f1:dd:
f2:af:8f:9b:af:ec:ee:c5:c9:8b:ae:70:6e:19:8e:6c:1d:98:
fa:80:92:f8:96:7d:a9:75:e4:b6:76:44:fa:67:72:55:9b:b6:
57:fb:dc:83:c7:23:d7:49:2d:15:c8:d3:56:a4:14:0c:22:83:
74:3a:87:ce:45:6d:43:15:1e:11:b8:5d:5a:7f:d3:46:76:f5:
d7:44:5c:86:0a:a3:c3:e8:91:9a:c3:a7:bd:30:0e:e8:f4:67:
71:4c:a3:c2:70:76:f9:a8:d0:b5:a4:be:b8:25:49:d2:3f:47:
9a:83:d0:fe:e3:59:a4:9d:bc:3e:d6:91:ed:c3:85:5c:c5:5b:
17:03:d7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:59:48 2026 by rpki-client