Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: k/vQNwovMptPural+5+21aFQ2ZAhWoTj3H0LG3wORoU=
Subject key identifier: 25:D6:E8:BE:81:63:F4:B6:3D:58:FB:B1:07:96:C6:22:A1:47:73:09
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5F54541CBF2CCBE345100785714A9213D15BD2B7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
Signing time: Wed 29 Apr 2026 17:38:47 +0000
ROA not before: Wed 29 Apr 2026 17:33:47 +0000
ROA not after: Wed 28 Apr 2027 17:38:47 +0000
asID: 53356
IP address blocks: 45.148.76.0/22 maxlen: 22
2a0f:9400:5::/48 maxlen: 48
2a0f:9400:200::/48 maxlen: 48
2a0f:9400:fa0::/44 maxlen: 45
2a0f:9400:fb0::/44 maxlen: 44
2a0f:9400:6100::/48 maxlen: 48
2a0f:9400:6106::/48 maxlen: 48
2a0f:9400:6146::/48 maxlen: 48
2a0f:9400:6149::/48 maxlen: 48
2a0f:9400:614b::/48 maxlen: 48
2a0f:9400:6190::/44 maxlen: 44
2a0f:9400:6400::/40 maxlen: 40
2a0f:9400:6500::/40 maxlen: 40
2a0f:9400:6600::/40 maxlen: 40
2a0f:9400:6933::/48 maxlen: 48
2a0f:9400:6a00::/40 maxlen: 40
2a0f:9400:6c00::/40 maxlen: 44
2a0f:9400:6d00::/40 maxlen: 40
2a0f:9400:6e00::/40 maxlen: 40
2a0f:9400:7000::/40 maxlen: 48
2a0f:9400:738c::/48 maxlen: 48
2a0f:9400:7390::/44 maxlen: 48
2a0f:9400:770c::/48 maxlen: 48
2a0f:9400:7723::/48 maxlen: 48
2a0f:9400:7724::/48 maxlen: 48
2a0f:9400:7726::/48 maxlen: 48
2a0f:9400:7727::/48 maxlen: 48
2a0f:9400:7728::/48 maxlen: 48
2a0f:9400:772c::/48 maxlen: 48
2a0f:9400:772f::/48 maxlen: 48
2a0f:9400:8003::/48 maxlen: 48
2a0f:9400:8024::/48 maxlen: 48
2a0f:9400:8027::/48 maxlen: 48
2a0f:9400:802b::/48 maxlen: 48
2a0f:9401::/32 maxlen: 32
2a0f:9405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:54:54:1c:bf:2c:cb:e3:45:10:07:85:71:4a:92:13:d1:5b:d2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 29 17:33:47 2026 GMT
Not After : Apr 28 17:38:47 2027 GMT
Subject: CN=25D6E8BE8163F4B63D58FBB10796C622A1477309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:8c:e2:ff:2a:e6:62:ee:19:2f:7e:d7:50:
1d:b5:75:ec:1a:5f:0b:90:a4:76:a6:71:a9:e9:83:
02:78:b9:ea:17:50:77:86:87:d9:f1:6c:73:e1:19:
77:1f:6e:52:e9:22:8b:e8:b2:73:36:7b:8e:2d:9f:
56:8c:d4:39:c4:50:76:ce:93:9b:69:b4:af:93:49:
66:64:75:fa:ec:65:2f:86:43:13:b4:b9:19:60:8a:
fa:38:c7:06:7e:21:25:27:4f:90:0e:f4:44:93:f8:
fe:a9:1c:3e:08:7f:4d:7b:ca:b3:3f:bb:da:f9:ea:
c3:98:43:03:a6:c2:3e:bc:16:61:5b:66:0a:9b:81:
93:cf:36:98:49:47:5a:c7:15:91:e7:34:0d:46:dd:
c6:8e:a2:41:ff:2f:4e:66:23:36:ee:f4:2d:a2:2e:
0a:2e:a1:3a:ee:e0:8b:85:fb:1d:26:d7:4e:27:8b:
c2:3a:a3:8c:70:2f:a6:cc:fc:8a:f3:96:9e:72:4d:
b4:bd:ca:10:87:e7:08:64:75:ad:d5:d0:df:9f:bc:
ff:5b:db:a3:57:f5:dc:8c:fe:88:f3:2c:4a:0c:35:
35:5d:1e:4e:c9:d8:62:25:26:f0:fd:60:41:86:54:
a4:a3:15:b4:a2:32:e6:96:eb:6d:22:3d:99:27:ab:
80:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D6:E8:BE:81:63:F4:B6:3D:58:FB:B1:07:96:C6:22:A1:47:73:09
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.76.0/22
IPv6:
2a0f:9400:5::/48
2a0f:9400:200::/48
2a0f:9400:fa0::/43
2a0f:9400:6100::/48
2a0f:9400:6106::/48
2a0f:9400:6146::/48
2a0f:9400:6149::/48
2a0f:9400:614b::/48
2a0f:9400:6190::/44
2a0f:9400:6400::-2a0f:9400:66ff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:6933::/48
2a0f:9400:6a00::/40
2a0f:9400:6c00::-2a0f:9400:6eff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7000::/40
2a0f:9400:738c::/48
2a0f:9400:7390::/44
2a0f:9400:770c::/48
2a0f:9400:7723::-2a0f:9400:7724:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7726::-2a0f:9400:7728:ffff:ffff:ffff:ffff:ffff
2a0f:9400:772c::/48
2a0f:9400:772f::/48
2a0f:9400:8003::/48
2a0f:9400:8024::/48
2a0f:9400:8027::/48
2a0f:9400:802b::/48
2a0f:9401::/32
2a0f:9405::/32
Signature Algorithm: sha256WithRSAEncryption
aa:63:8f:a7:ff:45:f3:b0:df:fc:a2:5a:de:56:e1:2c:36:05:
ea:0a:84:4e:87:da:d3:96:bd:d1:bb:b2:49:91:03:83:4f:e6:
c7:a1:78:e2:fa:2b:4d:26:ab:2d:79:18:c4:f3:62:67:ad:73:
4c:a6:71:c5:0a:5f:e4:2e:28:4a:5b:b5:00:7d:5c:b5:57:26:
a6:de:d5:ab:54:3b:53:8a:fe:74:d6:e3:ce:2c:0d:61:e5:2c:
ba:41:a1:2f:15:84:14:93:fd:96:88:54:d1:ba:31:58:22:9a:
f1:24:f4:47:dc:5c:43:22:f4:78:f0:e5:42:8d:e9:47:b1:4b:
57:c5:9a:ba:7f:3a:f5:09:46:81:d5:ac:88:4b:3b:a1:06:53:
92:56:b2:7e:53:44:97:3d:2f:4a:a3:8d:08:2e:7b:00:96:47:
16:87:b9:f2:39:48:04:ea:aa:e4:82:a4:c6:bc:75:8d:c5:8a:
e5:57:7d:07:23:0a:91:af:52:04:b6:cd:4f:f3:34:81:55:b6:
7b:a2:1e:53:91:81:09:fc:80:27:ed:5f:28:51:c3:0e:a0:32:
b8:9a:e2:ff:41:7d:89:b7:d4:d6:76:42:e8:7f:3a:ce:b1:e6:
39:65:d8:18:5d:0c:4f:16:a2:bf:8c:8d:91:29:f8:9b:90:8e:
d0:3c:61:fc
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIUX1RUHL8sy+NFEAeFcUqSE9Fb0rcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjA0MjkxNzMzNDdaFw0yNzA0MjgxNzM4NDdaMDMxMTAvBgNV
BAMTKDI1RDZFOEJFODE2M0Y0QjYzRDU4RkJCMTA3OTZDNjIyQTE0NzczMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZ4zi/yrmYu4ZL37XUB21dewa
XwuQpHamcanpgwJ4ueoXUHeGh9nxbHPhGXcfblLpIovosnM2e44tn1aM1DnEUHbO
k5tptK+TSWZkdfrsZS+GQxO0uRlgivo4xwZ+ISUnT5AO9EST+P6pHD4If017yrM/
u9r56sOYQwOmwj68FmFbZgqbgZPPNphJR1rHFZHnNA1G3caOokH/L05mIzbu9C2i
LgouoTru4IuF+x0m104ni8I6o4xwL6bM/Irzlp5yTbS9yhCH5whkda3V0N+fvP9b
26NX9dyM/ojzLEoMNTVdHk7J2GIlJvD9YEGGVKSjFbSiMuaW620iPZknq4BtAgMB
AAGjggLsMIIC6DAdBgNVHQ4EFgQUJdbovoFj9LY9WPuxB5bGIqFHcwkwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzUzMzU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBRAYI
KwYBBQUHAQcBAf8EggEzMIIBLzAMBAIAATAGAwQCLZRMMIIBHQQCAAIwggEVAwcA
Kg+UAAAFAwcAKg+UAAIAAwcFKg+UAA+gAwcAKg+UAGEAAwcAKg+UAGEGAwcAKg+U
AGFGAwcAKg+UAGFJAwcAKg+UAGFLAwcEKg+UAGGQMBADBgIqD5QAZAMGACoPlABm
AwcAKg+UAGkzAwYAKg+UAGowEAMGAioPlABsAwYAKg+UAG4DBgAqD5QAcAMHACoP
lABzjAMHBCoPlABzkAMHACoPlAB3DDASAwcAKg+UAHcjAwcAKg+UAHckMBIDBwEq
D5QAdyYDBwAqD5QAdygDBwAqD5QAdywDBwAqD5QAdy8DBwAqD5QAgAMDBwAqD5QA
gCQDBwAqD5QAgCcDBwAqD5QAgCsDBQAqD5QBAwUAKg+UBTANBgkqhkiG9w0BAQsF
AAOCAQEAqmOPp/9F87Df/KJa3lbhLDYF6gqETofa05a90buySZEDg0/mx6F44vor
TSarLXkYxPNiZ61zTKZxxQpf5C4oSlu1AH1ctVcmpt7Vq1Q7U4r+dNbjziwNYeUs
ukGhLxWEFJP9lohU0boxWCKa8ST0R9xcQyL0ePDlQo3pR7FLV8Waun869QlGgdWs
iEs7oQZTklayflNElz0vSqONCC57AJZHFoe58jlIBOqq5IKkxrx1jcWK5Vd9ByMK
ka9SBLbNT/M0gVW2e6IeU5GBCfyAJ+1fKFHDDqAyuJri/0F9ibfU1nZC6H86zrHm
OWXYGF0MTxaiv4yNkSn4m5CO0Dxh/A==
-----END CERTIFICATE-----
Generated at Tue May 12 22:30:20 2026 by rpki-client