This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
File:                     AS53356.roa (raw, json)
Hash identifier:          E1yFR+JTiqO90ltwRBQVgTvALMjmKOV24fmfbABBMrc=
Subject key identifier:   BC:23:AF:18:B9:C3:FC:FD:AA:24:31:06:CE:25:E3:18:84:76:28:F1
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       528509BEF9B53C1BC3259E244DF29896776B7495
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
Signing time:             Wed 10 Dec 2025 03:17:45 +0000
ROA not before:           Wed 10 Dec 2025 03:12:45 +0000
ROA not after:            Wed 09 Dec 2026 03:17:45 +0000
asID:                     53356
IP address blocks:        45.148.76.0/22 maxlen: 22
                          2a0f:9400:5::/48 maxlen: 48
                          2a0f:9400:200::/48 maxlen: 48
                          2a0f:9400:fa0::/44 maxlen: 45
                          2a0f:9400:fb0::/44 maxlen: 44
                          2a0f:9400:6100::/48 maxlen: 48
                          2a0f:9400:6106::/48 maxlen: 48
                          2a0f:9400:6146::/48 maxlen: 48
                          2a0f:9400:6149::/48 maxlen: 48
                          2a0f:9400:614b::/48 maxlen: 48
                          2a0f:9400:6190::/44 maxlen: 44
                          2a0f:9400:6400::/40 maxlen: 40
                          2a0f:9400:6500::/40 maxlen: 40
                          2a0f:9400:6600::/40 maxlen: 40
                          2a0f:9400:6933::/48 maxlen: 48
                          2a0f:9400:6c00::/40 maxlen: 44
                          2a0f:9400:6d00::/40 maxlen: 40
                          2a0f:9400:6e00::/40 maxlen: 40
                          2a0f:9400:7000::/40 maxlen: 48
                          2a0f:9400:738c::/48 maxlen: 48
                          2a0f:9400:7390::/44 maxlen: 48
                          2a0f:9400:770c::/48 maxlen: 48
                          2a0f:9400:7723::/48 maxlen: 48
                          2a0f:9400:7724::/48 maxlen: 48
                          2a0f:9400:7726::/48 maxlen: 48
                          2a0f:9400:7727::/48 maxlen: 48
                          2a0f:9400:7728::/48 maxlen: 48
                          2a0f:9400:772c::/48 maxlen: 48
                          2a0f:9400:772f::/48 maxlen: 48
                          2a0f:9400:8003::/48 maxlen: 48
                          2a0f:9400:8024::/48 maxlen: 48
                          2a0f:9400:8027::/48 maxlen: 48
                          2a0f:9400:802b::/48 maxlen: 48
                          2a0f:9401::/32 maxlen: 32
                          2a0f:9405::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 19:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:85:09:be:f9:b5:3c:1b:c3:25:9e:24:4d:f2:98:96:77:6b:74:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Dec 10 03:12:45 2025 GMT
            Not After : Dec  9 03:17:45 2026 GMT
        Subject: CN=BC23AF18B9C3FCFDAA243106CE25E318847628F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:74:62:9d:e9:21:4f:f8:f3:3c:66:0f:34:ad:
                    df:69:64:00:dc:36:e5:4e:36:17:af:0e:87:09:cb:
                    05:97:54:82:19:65:c3:a8:cd:cc:db:a4:e1:43:17:
                    a9:2d:30:b4:7d:8c:c9:c7:c2:e0:20:cd:7c:0b:47:
                    9a:af:b7:34:5d:69:e6:ed:1b:b9:80:cf:19:c6:51:
                    c2:ba:f0:f6:02:b2:82:b9:60:0c:ac:e6:de:13:c7:
                    f6:9a:66:52:75:ad:ee:ad:db:97:68:bb:ae:90:bb:
                    a4:c8:e1:72:24:61:c3:0a:62:d2:55:bb:05:18:1b:
                    b0:62:0d:4a:a9:3c:b1:d0:f9:b6:3f:63:28:59:e0:
                    91:d9:ad:11:b8:42:c3:de:65:2a:3d:3e:ff:51:df:
                    00:be:f7:55:75:e4:11:3d:83:85:50:6b:e7:bb:10:
                    5a:2b:cd:e8:b3:c0:c4:24:44:e4:d6:2c:d8:61:ae:
                    e9:e4:03:7b:a6:00:1d:83:06:72:d3:81:dd:00:f4:
                    a6:e3:93:79:6b:2f:03:82:2a:4a:52:8a:cf:ae:20:
                    b2:05:18:84:c6:79:cc:ea:4e:3c:7c:ec:00:ef:fa:
                    51:71:4f:a1:f6:19:2c:f2:2d:13:40:04:be:b0:db:
                    ac:92:ef:23:b2:98:69:2d:b1:ad:95:d7:37:dc:d2:
                    bf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:23:AF:18:B9:C3:FC:FD:AA:24:31:06:CE:25:E3:18:84:76:28:F1
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.76.0/22
                IPv6:
                  2a0f:9400:5::/48
                  2a0f:9400:200::/48
                  2a0f:9400:fa0::/43
                  2a0f:9400:6100::/48
                  2a0f:9400:6106::/48
                  2a0f:9400:6146::/48
                  2a0f:9400:6149::/48
                  2a0f:9400:614b::/48
                  2a0f:9400:6190::/44
                  2a0f:9400:6400::-2a0f:9400:66ff:ffff:ffff:ffff:ffff:ffff
                  2a0f:9400:6933::/48
                  2a0f:9400:6c00::-2a0f:9400:6eff:ffff:ffff:ffff:ffff:ffff
                  2a0f:9400:7000::/40
                  2a0f:9400:738c::/48
                  2a0f:9400:7390::/44
                  2a0f:9400:770c::/48
                  2a0f:9400:7723::-2a0f:9400:7724:ffff:ffff:ffff:ffff:ffff
                  2a0f:9400:7726::-2a0f:9400:7728:ffff:ffff:ffff:ffff:ffff
                  2a0f:9400:772c::/48
                  2a0f:9400:772f::/48
                  2a0f:9400:8003::/48
                  2a0f:9400:8024::/48
                  2a0f:9400:8027::/48
                  2a0f:9400:802b::/48
                  2a0f:9401::/32
                  2a0f:9405::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:c6:5e:e0:40:6b:ba:79:1e:f6:a9:52:5a:86:3a:58:ce:35:
         46:6d:73:25:3c:d9:11:d8:25:9d:db:43:9f:f7:1a:91:85:7d:
         39:3f:40:cc:a7:66:9e:a9:c3:a7:7d:13:3f:ca:17:16:0a:85:
         a5:24:c3:45:78:92:d3:54:6e:63:ed:4e:4a:c3:30:1e:59:11:
         0f:91:1d:03:0a:b1:f8:61:ba:d3:f8:4c:d2:3e:34:19:90:73:
         f7:47:57:ec:1e:5a:fb:a2:62:cd:19:36:7d:de:0c:32:ac:34:
         21:5d:ac:52:2b:b4:19:0e:1c:31:a6:d9:91:96:ad:45:60:7a:
         a6:76:b1:de:96:82:7f:fb:44:df:17:9d:5c:4c:3d:49:53:a9:
         98:72:93:9a:a3:bb:ef:6f:8c:74:c2:4d:c0:9c:74:64:45:5f:
         70:19:e0:1c:a0:52:9c:13:73:46:5b:96:11:9f:19:de:4b:eb:
         9d:d3:ae:0f:d9:67:f4:b5:0c:22:a6:a8:ad:ca:f3:02:88:09:
         3c:38:38:7d:12:3e:8b:3f:3c:29:18:64:56:45:f4:77:cb:16:
         9e:40:fb:a5:16:32:47:6d:9e:b7:e9:8e:5c:f0:1f:4a:34:d0:
         64:c6:7d:c0:72:87:d6:f7:e1:04:5d:34:fe:3a:67:a3:cb:5d:
         1c:c9:4e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:11:48 2025 by rpki-client