Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS54133.roa
File: AS54133.roa (raw, json)
Hash identifier: KE9gIFXqQkUJ9gGOnEjm778dipuTLqZKnCwUfYfUwSA=
Subject key identifier: BB:4C:14:63:A2:C9:62:4B:A2:D3:7B:B6:AF:57:49:1B:EB:2D:A9:51
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6E80A91019AB84ACAD481276B2738B1C531E9E66
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS54133.roa
Signing time: Sat 09 May 2026 16:59:23 +0000
ROA not before: Sat 09 May 2026 16:54:23 +0000
ROA not after: Sat 08 May 2027 16:59:23 +0000
asID: 54133
IP address blocks: 2a0f:9400:6104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:80:a9:10:19:ab:84:ac:ad:48:12:76:b2:73:8b:1c:53:1e:9e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 9 16:54:23 2026 GMT
Not After : May 8 16:59:23 2027 GMT
Subject: CN=BB4C1463A2C9624BA2D37BB6AF57491BEB2DA951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:bb:0e:5e:5e:b3:fa:ea:dd:7c:2a:cd:62:
dc:82:70:32:7f:44:89:d7:c0:bc:eb:76:29:8a:ae:
fc:eb:54:a6:62:10:44:b3:4b:c2:6c:cf:a5:94:97:
30:73:d9:08:9b:29:a0:77:9e:dc:1e:1f:12:60:ef:
85:b7:df:2d:58:d7:9a:76:87:33:b1:46:1a:cd:52:
7b:cd:6f:5a:dd:d7:8b:0e:91:d3:e6:95:7e:b1:ea:
ac:16:3a:1b:0c:4d:8f:0d:02:5f:5a:ef:4c:30:d0:
f1:80:32:50:af:37:f9:73:6d:4e:94:e3:cd:de:f3:
1d:37:fb:f3:63:56:e3:11:6c:ee:93:35:0e:2e:6f:
04:73:67:e2:0d:58:e6:74:0e:5e:77:6d:aa:e8:b7:
fe:ce:38:71:18:5c:ae:c6:ca:14:1d:d5:44:24:bd:
80:2d:0d:f6:04:d7:73:1c:f6:1c:12:54:1f:7a:77:
0a:89:51:0a:64:f4:cd:e7:b0:70:15:bd:8f:82:49:
cd:cd:da:fc:91:75:47:9d:66:57:20:3e:53:8f:4e:
ea:1a:2d:76:7c:51:98:1a:1e:b1:cd:4a:01:d1:77:
a3:bc:62:3c:c7:42:fd:29:2a:fd:60:bf:4c:ad:1e:
57:d4:29:ac:25:22:2b:02:0b:4b:37:63:5b:dd:f3:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4C:14:63:A2:C9:62:4B:A2:D3:7B:B6:AF:57:49:1B:EB:2D:A9:51
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS54133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6104::/48
Signature Algorithm: sha256WithRSAEncryption
5b:af:8a:a4:1f:97:34:48:b5:6a:2e:e8:2b:f6:3f:09:9f:78:
99:9e:1c:cf:ff:74:84:70:49:04:a8:98:7d:88:2d:8b:4b:d6:
21:fa:8c:90:65:13:48:6d:01:6c:87:42:9b:6c:b8:a5:07:bd:
4e:97:fc:fc:8d:5b:95:db:ab:46:34:c2:65:f2:11:4a:68:8e:
6a:cb:eb:ae:28:33:ee:c7:af:68:15:64:96:0c:04:b5:68:c4:
b7:a6:18:62:71:47:a1:3a:4a:40:75:84:83:59:04:c0:2b:61:
3e:e2:10:ba:92:52:ca:37:5a:fe:fb:63:61:c4:c8:fd:80:69:
63:0c:cb:f7:44:d9:94:e2:23:a5:bf:48:51:c5:28:cb:bf:8d:
ca:b2:81:1e:c1:8b:9e:7b:d8:e0:2a:1c:e9:7f:02:81:91:98:
dd:88:14:28:2d:d4:9c:67:9b:fa:a0:fc:c0:e3:27:11:61:79:
f0:4e:0b:15:d4:e7:30:45:70:4b:32:f7:89:85:cb:f5:f6:b3:
2f:86:89:e5:d3:db:d6:41:4b:e4:e6:c4:35:0d:af:3f:04:84:
57:01:df:0f:1b:a5:22:1f:12:a7:16:77:7b:82:cf:40:66:88:
f2:73:f1:7e:97:f6:61:10:8e:32:11:b9:3c:72:91:51:93:2a:
6e:f9:fe:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:30:20 2026 by rpki-client