Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS58285.roa
File: AS58285.roa (raw, json)
Hash identifier: byswt4QnlLb8Nq8UVWjZzDhpyMcc5MNBTNfzy/ijPX0=
Subject key identifier: 4C:27:17:C7:33:D0:2D:24:53:AD:AD:6A:F8:4E:10:8D:AC:58:35:55
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 687703F0A192103CE24296C995ECD5CA19ADC2FA
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS58285.roa
Signing time: Mon 02 Feb 2026 18:02:45 +0000
ROA not before: Mon 02 Feb 2026 17:57:45 +0000
ROA not after: Mon 01 Feb 2027 18:02:45 +0000
asID: 58285
IP address blocks: 2a0f:9400:6300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:77:03:f0:a1:92:10:3c:e2:42:96:c9:95:ec:d5:ca:19:ad:c2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 2 17:57:45 2026 GMT
Not After : Feb 1 18:02:45 2027 GMT
Subject: CN=4C2717C733D02D2453ADAD6AF84E108DAC583555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:64:37:cf:0a:5d:43:77:27:83:37:b9:67:
88:94:04:29:ca:eb:c0:57:cd:ae:e9:32:7a:03:b8:
3d:f9:7c:1b:41:de:21:fa:cf:57:55:3b:b4:13:0e:
76:cf:fc:93:c1:de:a3:09:04:6f:62:67:33:4d:21:
eb:ee:68:64:94:6f:ad:09:db:c3:3e:d1:5d:11:9d:
67:92:c2:a0:6d:21:d5:d7:64:be:88:ce:a4:33:45:
b6:d6:5c:98:b7:40:37:13:0b:6c:ad:4c:ff:fe:0b:
db:b3:8a:b1:38:f6:2f:c5:2b:f3:35:55:03:c9:03:
f9:50:aa:e2:e8:6d:dd:fb:fb:a6:ae:7e:b1:64:ab:
15:fb:fa:e9:a3:d4:ed:d9:70:e8:24:81:1a:b7:a6:
bd:70:83:3c:66:a0:5f:6a:1b:63:87:70:bc:e5:c4:
7b:b6:0d:19:52:2a:79:b0:14:1f:ed:ee:9e:f1:a4:
84:66:78:a2:97:81:d2:18:a0:4f:c8:6c:39:57:d0:
f5:65:8c:ed:ef:ea:4f:fa:71:6a:91:16:7d:67:9b:
6d:85:af:56:d3:90:f1:b9:e7:59:e1:87:7d:7a:24:
b4:9c:12:51:87:c4:f5:f6:6c:da:a8:f4:ac:b4:c6:
ff:c2:80:39:a9:be:af:11:49:f5:be:cc:34:53:2a:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:27:17:C7:33:D0:2D:24:53:AD:AD:6A:F8:4E:10:8D:AC:58:35:55
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS58285.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6300::/40
Signature Algorithm: sha256WithRSAEncryption
01:a5:5a:07:7d:7f:24:fe:29:14:1f:dd:1a:32:e5:28:73:d9:
b9:2d:7e:03:4a:6a:47:00:fc:ef:d4:0e:d7:26:f8:46:03:bb:
7b:a7:8b:d3:1c:62:32:01:73:c2:9d:4b:56:87:7a:f0:d5:85:
db:4d:29:dd:d3:07:4e:42:e3:9e:7c:9f:9b:ea:e6:27:6a:bd:
16:3c:f1:bc:46:ec:4e:21:cb:d0:42:78:54:97:d9:9f:dc:57:
fe:ee:62:b3:8b:f8:51:05:99:77:1c:01:48:21:49:10:d0:b4:
cc:84:7b:9a:01:f6:40:2c:56:82:cd:e6:d5:42:e3:d1:a3:ec:
39:70:9a:6d:a2:63:6e:fa:83:ac:32:ac:a9:1f:17:61:a9:e9:
b8:7d:21:62:bf:d4:f6:c3:0f:99:f4:99:c6:f1:46:54:3e:d6:
95:2f:91:fa:9b:c5:9b:10:42:56:0f:fb:ca:25:3b:5e:bf:bd:
1a:bd:29:2b:07:86:ff:ae:87:17:5c:19:94:a5:69:08:ce:5b:
e8:a3:fe:ee:4c:67:0c:9f:4c:7c:ee:78:fa:c6:fc:d2:5d:d0:
b6:5d:bf:11:9c:d8:48:3d:85:04:59:04:b4:5c:d5:f6:9e:22:
90:19:6f:3b:bc:6b:9e:a7:3b:bb:be:38:3a:dc:09:9d:b3:52:
a3:1c:32:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:35:54 2026 by rpki-client