Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS140915.roa
File: AS140915.roa (raw, json)
Hash identifier: Kuw7ob7wtAMzimYp1zsLfFi+u7pd/G2oyYDUsuaJJFM=
Subject key identifier: 26:FF:E9:27:BF:D0:14:4F:1A:7F:0C:C1:FF:5B:FD:41:3E:5D:1E:E0
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 40C5558D19682844A41D892150E0A13F8D3A882B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS140915.roa
Signing time: Wed 15 Jul 2026 14:29:40 +0000
ROA not before: Wed 15 Jul 2026 14:24:40 +0000
ROA not after: Wed 14 Jul 2027 14:29:40 +0000
asID: 140915
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c5:55:8d:19:68:28:44:a4:1d:89:21:50:e0:a1:3f:8d:3a:88:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 15 14:24:40 2026 GMT
Not After : Jul 14 14:29:40 2027 GMT
Subject: CN=26FFE927BFD0144F1A7F0CC1FF5BFD413E5D1EE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:85:7e:41:17:33:f2:e1:29:7c:0d:23:84:
34:9b:4d:f7:5a:64:fc:59:bd:03:66:2d:21:79:b6:
e8:2a:4a:70:ae:27:85:94:d3:c9:e4:04:4b:a7:5c:
ec:94:81:5d:20:6a:1e:c3:59:a3:e5:96:13:5b:d1:
e1:6e:ca:d8:f7:6b:18:c8:37:c8:82:d6:e3:16:8d:
d2:bb:56:0c:9e:b9:8d:80:88:a5:c7:5c:43:ee:90:
f2:80:d6:89:25:0f:af:c8:aa:f1:4e:5b:b1:50:dc:
88:d4:01:a8:bc:bf:21:d8:4b:7d:e7:e8:d7:37:3c:
ff:58:96:4f:01:cf:97:9f:6a:9d:60:7b:f6:79:27:
f2:77:56:9d:58:78:38:8b:06:ad:2a:8a:c3:f7:d1:
85:41:04:f4:c7:b0:59:95:54:9d:84:eb:25:8b:7d:
39:06:b8:8d:f4:37:b9:8d:73:80:3a:6f:4d:c3:6d:
90:ba:94:96:a3:34:62:bf:3b:ab:08:5f:48:65:9d:
28:a9:96:39:fb:8f:6b:f2:76:45:8d:da:e8:42:d1:
b5:77:9f:c5:61:b5:5b:7c:89:92:6b:75:64:02:69:
da:db:2b:4e:6c:45:ab:33:3b:48:e0:58:6d:5c:12:
0f:3f:a3:b8:b0:8d:bf:f4:f6:d5:8d:16:11:12:fb:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FF:E9:27:BF:D0:14:4F:1A:7F:0C:C1:FF:5B:FD:41:3E:5D:1E:E0
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS140915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
c0:36:11:c0:44:80:96:b8:ff:83:2a:cd:58:d2:ea:d2:86:ad:
47:c3:e4:eb:cd:f3:d3:a9:32:02:21:26:5a:41:27:eb:6c:6d:
f1:78:58:82:0c:5b:30:c1:f8:de:cb:50:7f:1b:1c:e4:1e:ce:
1b:d7:5d:02:0f:38:9d:48:ac:4d:c0:77:26:8c:6f:aa:c5:44:
c7:1c:88:06:10:85:97:f4:ea:ef:44:aa:90:98:b1:2d:a7:90:
1f:19:3a:77:24:d7:28:eb:dc:69:cc:7d:a7:6a:a4:18:6e:4c:
13:02:90:68:f4:ff:2c:3d:75:02:b1:89:5f:be:25:7c:fc:80:
f5:db:db:ff:58:35:13:30:a5:14:6e:af:98:fe:04:23:ae:54:
87:ec:91:d8:c1:82:de:5c:77:7d:1e:d8:e4:98:63:45:e3:59:
6a:38:21:4d:3f:48:bc:58:7f:ec:02:0f:a2:ad:35:3f:df:ad:
4b:23:52:db:0d:25:d9:04:86:a5:09:85:ec:ef:d8:64:16:26:
94:37:17:f7:9c:86:09:c1:0c:25:56:f0:c8:7f:38:05:1c:c7:
67:08:62:08:12:87:e3:df:32:5a:5c:de:0c:3f:16:82:31:01:
98:f3:69:61:dc:74:44:6e:e3:10:4e:55:d0:99:98:c9:3a:1c:
14:f7:97:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:18:37 2026 by rpki-client