Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: NjUTKJD/oS0i42rYOovozNYT79B3V6d7L5uAjjCwwCQ=
Subject key identifier: 98:68:95:22:84:A4:EC:F5:35:2B:38:5F:32:DF:D4:9B:A1:89:29:B4
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 62B6EB4E57BE2E42534E925EFD17571541B5A8A8
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
Signing time: Thu 26 Mar 2026 08:21:41 +0000
ROA not before: Thu 26 Mar 2026 08:16:41 +0000
ROA not after: Thu 25 Mar 2027 08:21:41 +0000
asID: 53356
IP address blocks: 45.148.76.0/22 maxlen: 22
2a0f:9400:5::/48 maxlen: 48
2a0f:9400:200::/48 maxlen: 48
2a0f:9400:fa0::/44 maxlen: 45
2a0f:9400:fb0::/44 maxlen: 44
2a0f:9400:6100::/48 maxlen: 48
2a0f:9400:6106::/48 maxlen: 48
2a0f:9400:6146::/48 maxlen: 48
2a0f:9400:6149::/48 maxlen: 48
2a0f:9400:614b::/48 maxlen: 48
2a0f:9400:6190::/44 maxlen: 44
2a0f:9400:6400::/40 maxlen: 40
2a0f:9400:6500::/40 maxlen: 40
2a0f:9400:6600::/40 maxlen: 40
2a0f:9400:6933::/48 maxlen: 48
2a0f:9400:6c00::/40 maxlen: 44
2a0f:9400:6d00::/40 maxlen: 40
2a0f:9400:6e00::/40 maxlen: 40
2a0f:9400:7000::/40 maxlen: 48
2a0f:9400:738c::/48 maxlen: 48
2a0f:9400:7390::/44 maxlen: 48
2a0f:9400:770c::/48 maxlen: 48
2a0f:9400:7723::/48 maxlen: 48
2a0f:9400:7724::/48 maxlen: 48
2a0f:9400:7726::/48 maxlen: 48
2a0f:9400:7727::/48 maxlen: 48
2a0f:9400:7728::/48 maxlen: 48
2a0f:9400:772c::/48 maxlen: 48
2a0f:9400:772f::/48 maxlen: 48
2a0f:9400:8003::/48 maxlen: 48
2a0f:9400:8024::/48 maxlen: 48
2a0f:9400:8027::/48 maxlen: 48
2a0f:9400:802b::/48 maxlen: 48
2a0f:9401::/32 maxlen: 32
2a0f:9405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b6:eb:4e:57:be:2e:42:53:4e:92:5e:fd:17:57:15:41:b5:a8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 26 08:16:41 2026 GMT
Not After : Mar 25 08:21:41 2027 GMT
Subject: CN=9868952284A4ECF5352B385F32DFD49BA18929B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:65:6e:00:66:cd:eb:6c:6c:d4:fd:c6:0c:
8d:66:c4:3e:5c:97:e0:6a:00:a3:2a:13:ba:c1:c6:
8b:d3:85:78:dc:1c:46:2b:93:af:d4:63:d9:c5:c7:
31:e1:3d:ca:d8:73:fd:ba:fe:56:d3:34:c6:4b:4c:
ff:6b:f1:21:6f:a7:00:49:97:6d:e3:9d:7a:0c:8a:
65:f7:a1:87:be:3b:9b:55:8b:9c:5a:be:09:b8:87:
78:ee:ee:49:79:3b:16:dd:3b:d1:63:c7:95:7b:7a:
a0:8a:74:1e:67:3e:a8:ef:53:82:d9:cf:cb:29:8a:
7e:19:49:26:9a:2f:b3:3c:16:e9:47:00:b0:b7:ab:
c6:ed:a2:94:fa:7a:9f:37:97:d7:6e:68:05:1f:6a:
77:5a:f9:79:91:c2:fa:34:01:ec:17:05:d1:c8:8c:
c5:b5:90:a4:d9:48:d8:73:4a:ba:a2:ff:d4:01:da:
ac:30:b8:3f:42:e8:d8:ee:8d:76:54:ce:49:da:8b:
64:58:6c:83:da:1e:ce:8c:e1:4e:3d:0b:0e:05:8d:
f3:3f:0d:95:48:66:79:d7:83:71:cb:ff:5f:7a:af:
c2:c1:34:78:22:0c:40:66:6f:76:88:20:5b:cc:08:
f4:98:0e:5f:de:7c:bd:9c:a1:e4:e2:6c:fb:f8:21:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:68:95:22:84:A4:EC:F5:35:2B:38:5F:32:DF:D4:9B:A1:89:29:B4
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.76.0/22
IPv6:
2a0f:9400:5::/48
2a0f:9400:200::/48
2a0f:9400:fa0::/43
2a0f:9400:6100::/48
2a0f:9400:6106::/48
2a0f:9400:6146::/48
2a0f:9400:6149::/48
2a0f:9400:614b::/48
2a0f:9400:6190::/44
2a0f:9400:6400::-2a0f:9400:66ff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:6933::/48
2a0f:9400:6c00::-2a0f:9400:6eff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7000::/40
2a0f:9400:738c::/48
2a0f:9400:7390::/44
2a0f:9400:770c::/48
2a0f:9400:7723::-2a0f:9400:7724:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7726::-2a0f:9400:7728:ffff:ffff:ffff:ffff:ffff
2a0f:9400:772c::/48
2a0f:9400:772f::/48
2a0f:9400:8003::/48
2a0f:9400:8024::/48
2a0f:9400:8027::/48
2a0f:9400:802b::/48
2a0f:9401::/32
2a0f:9405::/32
Signature Algorithm: sha256WithRSAEncryption
8e:1e:75:b4:08:61:b8:2e:f1:e3:aa:ac:dd:8b:da:f6:50:f4:
a8:e9:21:5d:14:3e:65:b0:00:7c:44:61:de:3f:e8:d0:8c:53:
e6:07:82:01:0a:de:85:23:c6:4d:da:9b:f3:40:76:a3:ec:5c:
4d:36:c8:e2:4c:b8:b5:e4:bf:ce:94:1a:08:2d:8c:3d:ea:16:
a7:2e:06:7f:1a:51:57:79:23:9d:b3:76:37:4e:9e:4b:e7:41:
c0:c2:a9:19:8d:16:32:25:0b:4c:dd:a1:be:64:2d:1c:b9:f2:
69:8a:9f:35:17:b5:72:1f:35:2a:86:3c:2e:1e:b1:1f:a2:e2:
bb:ce:ce:6c:98:db:fa:e8:3e:5c:84:94:3c:ef:9f:db:e6:65:
b6:d1:db:af:b7:00:8b:c4:94:ed:46:02:46:68:81:b4:70:79:
7a:74:3f:53:89:29:75:d1:a0:0a:2b:0e:ba:5d:b9:bb:63:31:
73:0f:fc:8f:86:3a:d1:e5:31:ee:01:bb:25:8d:db:34:91:f3:
f6:70:e6:62:b0:f3:19:fd:47:9a:2e:1b:8a:8c:43:08:f6:98:
b0:3b:a6:9f:6f:aa:ee:9a:4d:1e:ea:b0:e5:b1:ea:e8:db:3b:
f4:2c:60:f8:2a:4e:b5:07:75:7b:4e:48:09:cf:c6:89:45:eb:
e4:87:b5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:09:09 2026 by rpki-client