Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS396982.roa
File: AS396982.roa (raw, json)
Hash identifier: DCHhmZMRI1HETiLPEDZxgr2cQwoqN+mxSR2/TaeciC0=
Subject key identifier: 16:A7:86:9C:24:CF:02:B2:EC:7F:3C:36:4B:DA:60:8C:FB:8B:DC:5C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2572B83741AC9217EF2C7E80DA8237E49B7D604A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS396982.roa
Signing time: Mon 04 May 2026 20:38:24 +0000
ROA not before: Mon 04 May 2026 20:33:24 +0000
ROA not after: Mon 03 May 2027 20:38:24 +0000
asID: 396982
IP address blocks: 2a0f:9400:7a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:72:b8:37:41:ac:92:17:ef:2c:7e:80:da:82:37:e4:9b:7d:60:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 4 20:33:24 2026 GMT
Not After : May 3 20:38:24 2027 GMT
Subject: CN=16A7869C24CF02B2EC7F3C364BDA608CFB8BDC5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:96:47:c4:9a:81:4d:f7:69:8d:cf:5a:fa:ea:
b9:50:6e:e6:2f:57:25:4f:e3:ff:03:aa:b7:d9:41:
e7:a3:93:a0:9f:73:90:8a:10:00:8a:f2:4f:a3:55:
6a:10:ed:5a:34:1a:d2:f5:df:ce:40:1a:f1:4e:5f:
67:6d:7c:88:0c:5b:93:81:37:1f:cb:4f:fd:d0:49:
8d:77:62:6a:d9:d6:6a:33:d7:ef:6e:3c:f5:f0:ff:
13:af:ec:35:6c:e1:c6:4c:16:f4:76:69:ac:b5:82:
8b:06:ba:6c:c0:20:a6:8d:fa:af:ca:8b:8c:1c:02:
48:e4:88:11:46:3c:40:ac:3b:27:17:e6:37:8c:c3:
09:25:18:2d:ee:69:fb:e1:06:0f:19:9d:8c:11:0e:
8e:a9:06:d2:d2:aa:e1:13:a7:48:ef:cf:0e:11:19:
d6:04:17:83:ab:2f:2c:ce:bd:34:cd:c6:e4:03:d6:
99:32:28:ee:30:de:57:41:bc:11:74:87:f2:39:4b:
45:c1:36:59:d2:95:75:7b:46:49:40:d2:5b:94:15:
60:ea:e8:f9:f7:4c:a4:60:fb:68:c3:1b:02:47:25:
85:ca:6d:de:f9:4d:69:25:ab:35:cd:89:03:f6:e2:
3d:58:00:b4:5a:cf:80:31:fb:e9:78:01:67:86:17:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A7:86:9C:24:CF:02:B2:EC:7F:3C:36:4B:DA:60:8C:FB:8B:DC:5C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS396982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7a00::/40
Signature Algorithm: sha256WithRSAEncryption
d6:f1:c5:e9:00:11:df:54:88:81:24:12:57:8f:12:83:e0:82:
c2:d7:73:8b:5b:68:ab:18:47:b5:b8:6d:b3:18:c7:64:c5:1f:
ae:e6:5d:93:c6:df:cd:2a:7d:6b:10:77:33:4a:26:26:df:4b:
4d:e9:77:fe:e0:45:ab:c6:2c:07:94:a6:bf:4c:01:15:ac:13:
34:f4:b0:f2:b8:ab:76:f3:67:99:42:67:a2:4f:75:01:32:bd:
2c:4d:9c:3e:5b:f9:05:43:db:7c:73:56:ef:a2:35:53:fc:fc:
d6:ca:46:50:db:ae:85:e0:5f:89:d6:e7:7e:0d:03:32:17:13:
54:14:ac:30:13:15:19:59:49:05:a4:8a:e6:ea:d3:b2:d4:ce:
08:1f:7a:6e:f9:9a:4d:75:6f:65:a5:37:75:95:67:92:5c:b0:
18:4a:01:2e:e7:76:b8:94:92:75:d8:11:ac:0f:01:50:f7:d1:
84:35:74:b2:21:48:f5:60:c4:ed:b8:7a:3c:99:78:eb:fc:9d:
62:b5:d6:f8:bc:41:17:6a:a0:92:56:75:e8:38:30:e6:82:47:
4b:a6:1a:e3:06:98:77:34:58:8b:31:06:26:65:3b:84:41:86:
93:1d:16:5b:ec:16:75:78:3d:c2:d2:0c:bc:f8:14:ee:78:69:
57:c7:04:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:11 2026 by rpki-client