This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: E1yFR+JTiqO90ltwRBQVgTvALMjmKOV24fmfbABBMrc=
Subject key identifier: BC:23:AF:18:B9:C3:FC:FD:AA:24:31:06:CE:25:E3:18:84:76:28:F1
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 528509BEF9B53C1BC3259E244DF29896776B7495
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
Signing time: Wed 10 Dec 2025 03:17:45 +0000
ROA not before: Wed 10 Dec 2025 03:12:45 +0000
ROA not after: Wed 09 Dec 2026 03:17:45 +0000
asID: 53356
IP address blocks: 45.148.76.0/22 maxlen: 22
2a0f:9400:5::/48 maxlen: 48
2a0f:9400:200::/48 maxlen: 48
2a0f:9400:fa0::/44 maxlen: 45
2a0f:9400:fb0::/44 maxlen: 44
2a0f:9400:6100::/48 maxlen: 48
2a0f:9400:6106::/48 maxlen: 48
2a0f:9400:6146::/48 maxlen: 48
2a0f:9400:6149::/48 maxlen: 48
2a0f:9400:614b::/48 maxlen: 48
2a0f:9400:6190::/44 maxlen: 44
2a0f:9400:6400::/40 maxlen: 40
2a0f:9400:6500::/40 maxlen: 40
2a0f:9400:6600::/40 maxlen: 40
2a0f:9400:6933::/48 maxlen: 48
2a0f:9400:6c00::/40 maxlen: 44
2a0f:9400:6d00::/40 maxlen: 40
2a0f:9400:6e00::/40 maxlen: 40
2a0f:9400:7000::/40 maxlen: 48
2a0f:9400:738c::/48 maxlen: 48
2a0f:9400:7390::/44 maxlen: 48
2a0f:9400:770c::/48 maxlen: 48
2a0f:9400:7723::/48 maxlen: 48
2a0f:9400:7724::/48 maxlen: 48
2a0f:9400:7726::/48 maxlen: 48
2a0f:9400:7727::/48 maxlen: 48
2a0f:9400:7728::/48 maxlen: 48
2a0f:9400:772c::/48 maxlen: 48
2a0f:9400:772f::/48 maxlen: 48
2a0f:9400:8003::/48 maxlen: 48
2a0f:9400:8024::/48 maxlen: 48
2a0f:9400:8027::/48 maxlen: 48
2a0f:9400:802b::/48 maxlen: 48
2a0f:9401::/32 maxlen: 32
2a0f:9405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 19:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:85:09:be:f9:b5:3c:1b:c3:25:9e:24:4d:f2:98:96:77:6b:74:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Dec 10 03:12:45 2025 GMT
Not After : Dec 9 03:17:45 2026 GMT
Subject: CN=BC23AF18B9C3FCFDAA243106CE25E318847628F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:62:9d:e9:21:4f:f8:f3:3c:66:0f:34:ad:
df:69:64:00:dc:36:e5:4e:36:17:af:0e:87:09:cb:
05:97:54:82:19:65:c3:a8:cd:cc:db:a4:e1:43:17:
a9:2d:30:b4:7d:8c:c9:c7:c2:e0:20:cd:7c:0b:47:
9a:af:b7:34:5d:69:e6:ed:1b:b9:80:cf:19:c6:51:
c2:ba:f0:f6:02:b2:82:b9:60:0c:ac:e6:de:13:c7:
f6:9a:66:52:75:ad:ee:ad:db:97:68:bb:ae:90:bb:
a4:c8:e1:72:24:61:c3:0a:62:d2:55:bb:05:18:1b:
b0:62:0d:4a:a9:3c:b1:d0:f9:b6:3f:63:28:59:e0:
91:d9:ad:11:b8:42:c3:de:65:2a:3d:3e:ff:51:df:
00:be:f7:55:75:e4:11:3d:83:85:50:6b:e7:bb:10:
5a:2b:cd:e8:b3:c0:c4:24:44:e4:d6:2c:d8:61:ae:
e9:e4:03:7b:a6:00:1d:83:06:72:d3:81:dd:00:f4:
a6:e3:93:79:6b:2f:03:82:2a:4a:52:8a:cf:ae:20:
b2:05:18:84:c6:79:cc:ea:4e:3c:7c:ec:00:ef:fa:
51:71:4f:a1:f6:19:2c:f2:2d:13:40:04:be:b0:db:
ac:92:ef:23:b2:98:69:2d:b1:ad:95:d7:37:dc:d2:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:23:AF:18:B9:C3:FC:FD:AA:24:31:06:CE:25:E3:18:84:76:28:F1
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.76.0/22
IPv6:
2a0f:9400:5::/48
2a0f:9400:200::/48
2a0f:9400:fa0::/43
2a0f:9400:6100::/48
2a0f:9400:6106::/48
2a0f:9400:6146::/48
2a0f:9400:6149::/48
2a0f:9400:614b::/48
2a0f:9400:6190::/44
2a0f:9400:6400::-2a0f:9400:66ff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:6933::/48
2a0f:9400:6c00::-2a0f:9400:6eff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7000::/40
2a0f:9400:738c::/48
2a0f:9400:7390::/44
2a0f:9400:770c::/48
2a0f:9400:7723::-2a0f:9400:7724:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7726::-2a0f:9400:7728:ffff:ffff:ffff:ffff:ffff
2a0f:9400:772c::/48
2a0f:9400:772f::/48
2a0f:9400:8003::/48
2a0f:9400:8024::/48
2a0f:9400:8027::/48
2a0f:9400:802b::/48
2a0f:9401::/32
2a0f:9405::/32
Signature Algorithm: sha256WithRSAEncryption
ba:c6:5e:e0:40:6b:ba:79:1e:f6:a9:52:5a:86:3a:58:ce:35:
46:6d:73:25:3c:d9:11:d8:25:9d:db:43:9f:f7:1a:91:85:7d:
39:3f:40:cc:a7:66:9e:a9:c3:a7:7d:13:3f:ca:17:16:0a:85:
a5:24:c3:45:78:92:d3:54:6e:63:ed:4e:4a:c3:30:1e:59:11:
0f:91:1d:03:0a:b1:f8:61:ba:d3:f8:4c:d2:3e:34:19:90:73:
f7:47:57:ec:1e:5a:fb:a2:62:cd:19:36:7d:de:0c:32:ac:34:
21:5d:ac:52:2b:b4:19:0e:1c:31:a6:d9:91:96:ad:45:60:7a:
a6:76:b1:de:96:82:7f:fb:44:df:17:9d:5c:4c:3d:49:53:a9:
98:72:93:9a:a3:bb:ef:6f:8c:74:c2:4d:c0:9c:74:64:45:5f:
70:19:e0:1c:a0:52:9c:13:73:46:5b:96:11:9f:19:de:4b:eb:
9d:d3:ae:0f:d9:67:f4:b5:0c:22:a6:a8:ad:ca:f3:02:88:09:
3c:38:38:7d:12:3e:8b:3f:3c:29:18:64:56:45:f4:77:cb:16:
9e:40:fb:a5:16:32:47:6d:9e:b7:e9:8e:5c:f0:1f:4a:34:d0:
64:c6:7d:c0:72:87:d6:f7:e1:04:5d:34:fe:3a:67:a3:cb:5d:
1c:c9:4e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:11:48 2025 by rpki-client