Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: WeRikn2jkmXeJ4wLO+xCavKrHDKF/6ExH3LSL82DkLs=
Subject key identifier: E3:23:4A:FD:48:A6:35:7B:A1:D3:50:5E:8D:AA:A0:86:B9:21:80:09
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 27D447ACF9BCFFA8A36DBD760E0DFE8792581679
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS26042.roa
Signing time: Fri 13 Mar 2026 16:25:15 +0000
ROA not before: Fri 13 Mar 2026 16:20:15 +0000
ROA not after: Fri 12 Mar 2027 16:25:15 +0000
asID: 26042
IP address blocks: 2a0f:9400:611f::/48 maxlen: 48
2a0f:9400:6939::/48 maxlen: 48
2a0f:9400:7385::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d4:47:ac:f9:bc:ff:a8:a3:6d:bd:76:0e:0d:fe:87:92:58:16:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 13 16:20:15 2026 GMT
Not After : Mar 12 16:25:15 2027 GMT
Subject: CN=E3234AFD48A6357BA1D3505E8DAAA086B9218009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:9b:6f:69:aa:84:76:1e:26:73:9c:f4:02:
77:38:55:c7:81:6c:80:1c:ee:e4:7a:d7:ea:78:e8:
af:c6:e6:d8:01:20:a4:83:85:c4:fd:57:49:da:55:
1f:ba:1f:c8:74:22:c8:59:ea:b3:0a:22:7a:0e:0c:
5c:e2:cb:b5:f9:75:e6:ed:b6:30:82:35:1b:f1:87:
64:79:d5:02:3d:32:1e:89:32:88:f7:a9:ce:f2:16:
61:33:63:55:87:a3:bc:62:c8:c3:d3:c9:74:10:66:
d3:bf:34:d1:a8:92:b9:ff:0b:be:9d:1d:e8:21:ae:
f6:f3:30:58:31:e7:6f:e0:58:38:6c:63:95:4a:a8:
76:09:0a:92:7f:8b:92:ff:a2:13:b1:76:6c:5c:3e:
57:0a:0e:a9:5c:1a:41:42:47:64:fd:eb:b3:68:c8:
0f:50:31:f7:22:e4:54:3d:7f:6d:80:69:b9:7b:0c:
5a:d6:35:12:98:53:8b:f1:92:3e:27:14:bc:ef:fe:
80:46:5f:be:a9:10:f6:7b:d0:c8:27:f7:02:19:5c:
95:c9:e2:0d:ea:c7:cc:75:a8:70:20:9e:22:3e:45:
14:f9:d6:36:e4:a5:9f:bf:cc:8b:21:d4:0a:66:19:
29:b2:3c:e8:e4:e1:9c:03:65:32:2e:02:1c:f2:18:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:23:4A:FD:48:A6:35:7B:A1:D3:50:5E:8D:AA:A0:86:B9:21:80:09
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:611f::/48
2a0f:9400:6939::/48
2a0f:9400:7385::/48
Signature Algorithm: sha256WithRSAEncryption
cf:5f:94:79:28:7a:cd:c6:cb:26:4f:af:24:44:a9:ef:82:75:
46:20:86:49:90:5d:44:79:41:7f:c0:0e:fa:fd:2c:09:d9:64:
3e:cd:0a:b7:53:e2:a1:87:35:0c:b6:52:26:19:bc:69:4b:46:
14:b8:1c:5b:07:e7:90:ae:3f:19:13:36:a9:39:84:97:d4:64:
a6:0f:09:62:24:54:fd:2e:ee:e3:56:3f:96:dd:0f:56:3c:7d:
87:74:46:f5:37:c7:ca:7c:d0:55:d2:7c:49:02:69:f8:6c:3d:
c9:8c:16:f1:27:f8:64:40:70:a2:53:a8:21:91:75:d9:79:f3:
32:9f:c7:e7:5c:f7:0e:9e:7b:70:a3:68:25:ec:61:7c:30:85:
95:35:e4:06:29:e3:d1:c5:9f:3d:ba:b0:85:5d:f4:89:a3:d0:
6c:4a:04:11:4b:da:fd:04:91:1f:07:09:a4:85:22:bc:2d:29:
3d:69:69:fd:7f:85:33:94:4a:72:d3:c9:c1:9a:96:8d:3e:c5:
51:2e:51:09:5e:8b:94:63:b2:09:fe:40:ce:51:a1:d7:03:d4:
4a:a2:58:5e:36:22:28:b8:00:4a:e1:c6:b2:b4:15:50:68:51:
b8:0b:00:9c:53:7e:c1:c3:7f:08:bb:79:45:66:4d:19:a0:6b:
d6:5e:bd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:32:32 2026 by rpki-client