
Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS149476.roa
File: AS149476.roa (raw, json)
Hash identifier: JZUT06Ixd1BlpLPpU/I3fJAjjSbfyrpTXVkFC+ihueg=
Subject key identifier: CC:8C:90:03:7D:00:0F:6A:F3:4D:CD:EE:69:D4:1F:A3:B1:C7:DA:3A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6BB0C4E61FBC536912B38EC61961B0C73D34514D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS149476.roa
Signing time: Sat 18 Oct 2025 09:14:31 +0000
ROA not before: Sat 18 Oct 2025 09:09:31 +0000
ROA not after: Sat 17 Oct 2026 09:14:31 +0000
asID: 149476
IP address blocks: 2a0f:9400:693a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b0:c4:e6:1f:bc:53:69:12:b3:8e:c6:19:61:b0:c7:3d:34:51:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 18 09:09:31 2025 GMT
Not After : Oct 17 09:14:31 2026 GMT
Subject: CN=CC8C90037D000F6AF34DCDEE69D41FA3B1C7DA3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:fc:88:31:82:09:07:75:57:1e:88:0e:c1:
91:bd:69:96:a7:7b:19:60:d7:a7:3c:c0:56:e6:c0:
38:d6:29:3f:dc:6b:3a:d1:00:b1:96:ce:9d:4b:51:
a3:12:89:c2:49:9f:a3:cd:b1:21:13:68:66:ab:d1:
94:4e:8b:1d:c7:fb:ba:4b:d2:d6:90:31:26:46:27:
c9:17:ac:21:97:e8:34:c4:bc:c0:83:82:07:60:d2:
b8:5e:e2:17:e8:1b:87:3a:9a:6f:35:2d:ae:6e:b3:
72:cd:e5:1e:08:94:05:04:e6:a4:9b:b3:ff:b9:2d:
68:1e:7c:ce:41:ec:2d:7d:aa:3f:c2:95:3e:ac:2d:
d5:2e:48:0d:d3:10:5c:9c:54:13:6d:cb:a3:77:cf:
21:bc:e3:3e:0f:92:6a:e5:84:5a:ba:c8:9d:26:c4:
03:f7:5f:ce:e1:53:dc:4d:0c:8a:44:50:4a:ef:d8:
5a:60:63:fa:bd:0b:3e:d1:e6:7c:cd:f2:8a:0e:b7:
fd:1a:94:a2:fc:ba:5b:6a:40:e6:d4:c8:50:54:ec:
4f:01:17:a0:76:95:d9:04:fd:9f:5b:45:e5:a1:cd:
6c:7e:fc:98:62:aa:b7:8c:db:58:61:6f:a7:d1:5e:
5b:bd:af:2f:e1:4a:ef:30:45:82:ec:6c:51:e5:9e:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8C:90:03:7D:00:0F:6A:F3:4D:CD:EE:69:D4:1F:A3:B1:C7:DA:3A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS149476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:693a::/48
Signature Algorithm: sha256WithRSAEncryption
40:4d:3b:01:0f:48:50:1d:4a:49:30:3b:a8:e5:cd:7a:cf:89:
66:3f:ee:0f:03:4d:43:8e:64:3a:74:3e:5b:0e:f2:ad:86:4e:
3a:e3:0b:4f:e4:d5:4f:46:57:0b:d9:db:6c:7a:f3:79:04:c7:
5c:fe:00:b8:0f:12:3d:d6:66:32:99:06:43:7c:85:6e:8d:5e:
87:95:21:53:3a:5f:d8:d3:9b:02:70:63:a9:0b:e2:d9:e4:66:
9b:33:8a:cc:d8:d2:a7:a0:3d:b1:59:c5:bb:b3:d1:a6:e0:0a:
79:c9:9f:b3:85:9a:eb:ea:55:fa:ad:85:b9:2d:1c:dc:85:2a:
2f:2c:bc:ab:50:01:32:f9:34:96:60:da:15:0b:af:08:c6:b7:
78:c7:96:57:b3:dd:bf:b6:68:99:8c:90:b7:6a:b7:29:25:3c:
48:21:b5:66:29:de:5c:d7:9a:b7:80:ae:53:72:a5:3a:cd:5d:
49:61:2e:91:47:74:d7:7d:12:a9:c9:2a:b1:2d:0c:fb:2a:83:
0b:43:31:32:66:2d:b7:de:da:26:5c:82:76:9d:26:ec:d4:8c:
64:17:6a:b8:84:9a:f4:a3:1d:e6:c3:7b:e9:18:89:d9:62:07:
a9:8d:24:9a:eb:8f:a7:d4:3e:33:13:b6:52:97:80:ab:29:7a:
7c:78:cb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:34:07 2025 by rpki-client