Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: cI5yZxlUkDOEvjfjJ/oGeuz2piWenINGibfXDUD+B74=
Subject key identifier: 23:46:44:CF:6C:28:8D:BE:63:1A:42:30:76:B7:08:CC:C1:5E:85:F8
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 131BE19173F1A41A813CE58DE80BB018DD37441B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
Signing time: Tue 24 Feb 2026 07:47:58 +0000
ROA not before: Tue 24 Feb 2026 07:42:58 +0000
ROA not after: Tue 23 Feb 2027 07:47:58 +0000
asID: 53356
IP address blocks: 45.148.76.0/22 maxlen: 22
2a0f:9400:5::/48 maxlen: 48
2a0f:9400:200::/48 maxlen: 48
2a0f:9400:fa0::/44 maxlen: 45
2a0f:9400:fb0::/44 maxlen: 44
2a0f:9400:6100::/48 maxlen: 48
2a0f:9400:6106::/48 maxlen: 48
2a0f:9400:6146::/48 maxlen: 48
2a0f:9400:6149::/48 maxlen: 48
2a0f:9400:614b::/48 maxlen: 48
2a0f:9400:6190::/44 maxlen: 44
2a0f:9400:6400::/40 maxlen: 40
2a0f:9400:6500::/40 maxlen: 40
2a0f:9400:6600::/40 maxlen: 40
2a0f:9400:6800::/40 maxlen: 48
2a0f:9400:6933::/48 maxlen: 48
2a0f:9400:6c00::/40 maxlen: 44
2a0f:9400:6d00::/40 maxlen: 40
2a0f:9400:6e00::/40 maxlen: 40
2a0f:9400:7000::/40 maxlen: 48
2a0f:9400:738c::/48 maxlen: 48
2a0f:9400:7390::/44 maxlen: 48
2a0f:9400:770c::/48 maxlen: 48
2a0f:9400:7723::/48 maxlen: 48
2a0f:9400:7724::/48 maxlen: 48
2a0f:9400:7726::/48 maxlen: 48
2a0f:9400:7727::/48 maxlen: 48
2a0f:9400:7728::/48 maxlen: 48
2a0f:9400:772c::/48 maxlen: 48
2a0f:9400:772f::/48 maxlen: 48
2a0f:9400:8003::/48 maxlen: 48
2a0f:9400:8024::/48 maxlen: 48
2a0f:9400:8027::/48 maxlen: 48
2a0f:9400:802b::/48 maxlen: 48
2a0f:9401::/32 maxlen: 32
2a0f:9405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:1b:e1:91:73:f1:a4:1a:81:3c:e5:8d:e8:0b:b0:18:dd:37:44:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 24 07:42:58 2026 GMT
Not After : Feb 23 07:47:58 2027 GMT
Subject: CN=234644CF6C288DBE631A423076B708CCC15E85F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:09:81:7d:7d:29:74:71:04:17:47:60:a9:3a:
ba:b6:0c:64:bb:f5:11:e3:2e:fa:b9:19:71:b0:04:
c3:0f:1c:f5:91:9f:e1:5b:85:80:6d:08:51:ea:a4:
15:73:db:08:2d:ee:7a:64:a7:0f:1d:4a:09:5d:70:
e8:36:37:70:dd:0e:ab:66:dd:ff:94:e5:bb:62:93:
65:fe:52:7f:9c:8d:b8:5f:2b:52:fc:d1:dd:45:99:
ef:86:8b:e0:5e:e7:cb:f0:62:3b:f5:bb:8c:e7:76:
ad:99:92:a8:70:98:6b:58:e1:44:f2:71:41:d8:9e:
b9:75:79:50:c0:c7:93:cf:84:f7:81:ed:8e:04:35:
6c:66:23:9d:9c:fa:d5:e2:5c:49:ce:27:e4:7a:78:
51:60:f2:83:9e:51:c9:3a:89:cb:4b:e4:14:cc:82:
18:bf:f5:45:c4:6a:ec:1b:4e:1c:80:84:5e:f3:ca:
72:e6:a1:d9:0e:a4:fe:15:a8:07:71:b8:f2:b8:7c:
64:4e:a3:aa:e0:ae:b2:e1:9d:64:fa:a3:4d:e2:3d:
f5:61:13:92:b2:6f:af:ed:26:e1:8c:64:40:78:de:
3f:ed:5a:a9:fe:64:69:98:bf:1f:e5:43:ef:f6:d2:
38:3c:2d:75:a7:c2:f3:70:09:1c:da:fe:03:07:d4:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:46:44:CF:6C:28:8D:BE:63:1A:42:30:76:B7:08:CC:C1:5E:85:F8
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.76.0/22
IPv6:
2a0f:9400:5::/48
2a0f:9400:200::/48
2a0f:9400:fa0::/43
2a0f:9400:6100::/48
2a0f:9400:6106::/48
2a0f:9400:6146::/48
2a0f:9400:6149::/48
2a0f:9400:614b::/48
2a0f:9400:6190::/44
2a0f:9400:6400::-2a0f:9400:66ff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:6800::/40
2a0f:9400:6933::/48
2a0f:9400:6c00::-2a0f:9400:6eff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7000::/40
2a0f:9400:738c::/48
2a0f:9400:7390::/44
2a0f:9400:770c::/48
2a0f:9400:7723::-2a0f:9400:7724:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7726::-2a0f:9400:7728:ffff:ffff:ffff:ffff:ffff
2a0f:9400:772c::/48
2a0f:9400:772f::/48
2a0f:9400:8003::/48
2a0f:9400:8024::/48
2a0f:9400:8027::/48
2a0f:9400:802b::/48
2a0f:9401::/32
2a0f:9405::/32
Signature Algorithm: sha256WithRSAEncryption
69:29:ef:ed:f2:7c:9b:b7:93:28:bc:71:b2:c7:78:c7:56:40:
be:b4:8f:f4:35:b9:9a:7a:3f:e0:92:9b:8b:05:65:38:1c:a5:
35:11:9d:45:94:8e:80:a4:60:41:9e:b4:ca:57:48:29:0a:bd:
9e:67:25:89:a0:b7:44:3e:21:6e:87:df:c3:e7:cc:4c:38:fe:
f6:e6:ee:bf:40:5c:20:1b:2b:d3:f4:e2:a0:6b:d1:f2:4a:7a:
50:e4:ed:96:8a:f4:81:08:5d:bd:f8:c5:09:dd:43:55:df:9c:
6e:dc:2a:f5:19:e3:52:91:02:dc:ee:6a:83:f5:f2:3e:e3:01:
73:97:7c:ae:4e:75:53:62:96:c8:62:c8:15:cf:2f:47:ea:09:
6b:df:89:4d:15:f9:09:2d:6f:98:4d:a3:12:32:90:fb:ce:16:
b3:b7:cd:26:97:24:4a:d4:db:69:85:78:88:bc:d8:7c:89:d4:
1b:18:5d:38:79:0f:3e:1f:2a:df:4d:fe:bc:2a:2a:f7:87:70:
e2:e0:8b:10:43:d1:71:6b:5e:0d:50:63:e4:39:9d:5a:f5:e3:
98:38:5e:e1:b3:ab:d4:71:2c:65:fc:3a:24:dd:6a:0f:b9:29:
cd:06:5d:19:5d:25:80:8f:50:3c:b4:57:52:1a:bb:1f:bb:f0:
c3:e0:7d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:59:41 2026 by rpki-client