Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS60024.roa
File: AS60024.roa (raw, json)
Hash identifier: VgekzowFCFWPuMMqRKg9sLuvm1v3GM8RkiylofMdCVE=
Subject key identifier: 2C:E1:52:41:B3:74:41:C4:5A:83:2B:21:8C:47:7A:CA:E5:B6:87:09
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7F0309692F272B0A475B1EB56E4DE19308A28AC6
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS60024.roa
Signing time: Wed 09 Sep 2026 07:31:26 +0000
ROA not before: Wed 09 Sep 2026 07:26:26 +0000
ROA not after: Wed 08 Sep 2027 07:31:26 +0000
asID: 60024
IP address blocks: 2a0f:9403::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:03:09:69:2f:27:2b:0a:47:5b:1e:b5:6e:4d:e1:93:08:a2:8a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 9 07:26:26 2026 GMT
Not After : Sep 8 07:31:26 2027 GMT
Subject: CN=2CE15241B37441C45A832B218C477ACAE5B68709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:24:9b:9f:fa:c0:a9:c1:f1:94:02:87:cf:
c6:4d:c3:e1:2b:57:30:73:0c:3d:87:d7:ab:f3:6b:
42:50:bb:8e:be:9d:b3:0f:9e:96:9f:78:29:f2:ba:
95:c6:29:0c:fd:48:6b:4e:61:7b:4a:80:10:42:a3:
90:73:47:e5:e6:69:08:14:6d:8d:88:3a:c3:f8:f1:
9a:fc:64:c0:44:00:0d:10:c1:c7:1b:ef:e2:e8:90:
e2:6b:71:8c:c9:23:0e:d0:aa:3d:30:74:24:0a:ed:
b2:e3:24:77:a1:e9:0b:a0:1c:50:3e:e7:3c:e3:d3:
77:e8:99:e2:88:18:4a:26:55:8c:74:da:77:20:dd:
84:6d:92:83:b0:d3:7f:0d:d6:c3:57:7f:80:ec:91:
28:17:f2:93:1e:58:e2:bd:75:08:ba:e3:f2:37:63:
02:b2:a6:8a:f5:b2:39:5a:c2:93:6b:71:d1:a0:e9:
eb:fd:86:fc:05:72:d4:3f:9b:fe:03:63:3d:8d:d2:
57:1a:ec:ca:e5:bc:3f:fb:0f:5f:e2:34:a4:24:c3:
dc:70:8e:cc:f2:ae:6c:f7:d9:1c:a7:f2:20:6a:9b:
78:2a:b4:2d:ba:d7:dd:b8:dd:51:52:cd:a1:8c:32:
6b:96:29:ae:ed:47:91:88:18:e6:9a:0b:02:a7:ff:
36:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E1:52:41:B3:74:41:C4:5A:83:2B:21:8C:47:7A:CA:E5:B6:87:09
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS60024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9403::/36
Signature Algorithm: sha256WithRSAEncryption
1b:fb:00:9b:a5:ec:f0:7a:f7:16:5c:27:b0:d4:93:47:bd:e7:
64:65:a5:97:cf:67:94:9b:66:f9:66:e2:54:77:09:4e:d6:9a:
a5:91:61:92:4c:b1:dd:a9:72:e4:c1:e6:88:f9:84:4c:6a:d2:
56:99:bf:63:2c:57:12:bf:df:ca:07:89:4f:e1:b8:4b:e2:62:
71:4e:bf:bc:02:31:9e:36:da:f2:97:27:b5:21:51:af:85:b2:
80:16:4e:5a:e8:99:b8:26:eb:38:03:df:9e:00:34:5c:cd:18:
e6:f5:fe:95:6c:9d:ea:32:44:df:76:54:d5:dd:47:47:aa:d9:
35:ec:ad:0a:f8:38:56:f3:b5:3e:04:08:a4:e7:b1:7d:54:b8:
83:2c:b1:97:90:18:96:02:79:9f:02:84:c5:3a:bd:82:6f:04:
71:da:b0:c3:65:a6:dd:07:05:ea:11:69:b1:5b:a7:74:ca:d7:
c1:42:85:11:8f:23:2b:cb:ab:a9:f7:be:56:33:f9:37:f4:94:
34:09:2b:29:38:7a:44:cc:ad:a3:08:83:af:98:64:49:46:aa:
b7:97:e9:2b:84:fa:48:61:5c:a3:0e:05:ef:0d:5c:95:e2:a3:
71:ed:2f:a7:a5:06:1b:08:b0:26:eb:c6:57:af:1e:4f:02:7d:
bf:a3:7f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:27:32 2026 by rpki-client