Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: hgEcgNi/knxd0hiCco/ZYSmGM/o4Zm60DRUfzhBAWSo=
Subject key identifier: 59:88:E0:27:02:02:0D:6A:84:21:11:E3:E7:5E:C3:A4:D1:15:0D:54
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 144254665143596EF0CD0B44A0EC4E29E9009E5E
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
Signing time: Sun 19 Jul 2026 19:48:49 +0000
ROA not before: Sun 19 Jul 2026 19:43:49 +0000
ROA not after: Sun 18 Jul 2027 19:48:49 +0000
asID: 20473
IP address blocks: 2a0f:9400:610e::/48 maxlen: 48
2a0f:9400:6166::/48 maxlen: 48
2a0f:9400:6167::/48 maxlen: 48
2a0f:9400:690a::/48 maxlen: 48
2a0f:9400:690b::/48 maxlen: 48
2a0f:9400:693e::/48 maxlen: 48
2a0f:9400:738c::/48 maxlen: 48
2a0f:9400:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:42:54:66:51:43:59:6e:f0:cd:0b:44:a0:ec:4e:29:e9:00:9e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 19 19:43:49 2026 GMT
Not After : Jul 18 19:48:49 2027 GMT
Subject: CN=5988E02702020D6A842111E3E75EC3A4D1150D54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:ae:60:f3:d3:97:f4:52:a0:fd:69:8b:11:
f2:e5:13:70:55:a9:89:3b:fe:4b:b7:a4:03:08:17:
41:f8:00:be:82:f9:74:59:f1:cf:ef:8e:6b:1e:fa:
0a:72:5e:8b:95:ad:59:6c:bb:1e:32:a0:fa:07:a1:
7e:bd:4d:90:20:31:4e:37:56:8c:7e:de:68:e5:6c:
10:e1:56:26:b9:b4:ee:56:72:4e:ee:13:9c:cc:a7:
30:05:0e:53:30:2a:2f:79:3a:f3:01:95:b9:b9:7c:
13:0f:a3:ea:7e:b2:b7:4d:f8:03:16:79:8f:ee:44:
0c:fa:dc:d5:f6:4a:a7:fc:f8:f4:92:6f:bf:2b:fc:
da:f3:b2:a3:2f:34:36:3f:2f:47:c4:49:c6:e8:24:
bb:93:2a:eb:41:07:11:7a:f2:27:7d:52:3b:77:54:
2f:9f:ba:0b:56:24:f6:c4:39:a7:a2:74:83:75:82:
b0:76:27:21:f6:49:7b:97:d5:79:81:1f:49:dd:30:
f2:62:c4:6e:ef:0b:2f:29:32:4c:4a:57:ae:6c:4b:
14:e1:31:88:13:27:d3:d1:06:00:9d:ca:cf:d6:e8:
e4:3b:34:7b:5e:f3:79:f2:ea:24:c4:8e:81:4b:39:
b3:dd:ba:c8:f2:15:21:fb:f3:d1:90:47:01:21:31:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:88:E0:27:02:02:0D:6A:84:21:11:E3:E7:5E:C3:A4:D1:15:0D:54
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610e::/48
2a0f:9400:6166::/47
2a0f:9400:690a::/47
2a0f:9400:693e::/48
2a0f:9400:738c::/48
2a0f:9400:8020::/48
Signature Algorithm: sha256WithRSAEncryption
3e:f1:56:be:5f:97:12:18:5f:e9:d7:31:d2:0f:a1:6f:29:55:
94:5a:2f:a7:41:98:47:9e:c3:12:e7:22:78:f4:bc:43:fa:3e:
64:aa:92:19:c7:45:cf:33:dd:d8:75:be:f1:36:64:52:6e:c6:
5d:70:92:18:e0:a2:60:4e:86:fc:6a:6d:c7:79:f9:fb:c2:0a:
c6:13:e4:9d:fc:e2:cd:87:5d:08:d3:0f:1a:5b:d3:78:d9:50:
cb:ed:7f:e2:b2:c3:dd:9d:50:0a:23:fe:9a:28:12:12:0a:f6:
27:56:14:f1:e3:85:a9:60:a8:08:4a:ce:c6:b4:2f:44:ad:b0:
c8:46:b2:82:31:b2:f8:b4:a1:14:1f:fb:e6:66:0d:33:1b:15:
32:90:46:76:2d:c8:a7:fc:94:fd:79:f0:4f:ce:a7:4b:bd:17:
46:ac:f6:14:ba:93:a7:e9:b4:b3:cd:34:4d:b5:5d:ae:37:bc:
ce:71:a0:94:f5:e5:ef:67:df:a1:5e:c8:e4:75:1c:d5:82:9c:
a6:da:1c:83:0d:df:70:7e:f8:b2:d7:47:e1:99:23:35:7a:7d:
b8:08:3d:e9:8c:9f:cc:d5:9f:79:83:cc:de:60:43:fa:e6:62:
74:34:f2:9a:8b:cc:70:3e:0c:52:35:1a:1d:04:db:fc:7e:82:
41:59:8f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:41:47 2026 by rpki-client