This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
File:                     AS53356.roa (raw, json)
Hash identifier:          xdQY4Niy3kobuGS3iJA9Mm+6+MTyl41OWCSVZBfwH4k=
Subject key identifier:   22:3A:9A:73:48:09:09:61:15:CB:22:8D:16:EC:F6:21:38:1F:F7:8A
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       2CEE7A5D495D4395C7BCD819E44A6BC09601B636
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
Signing time:             Thu 04 Dec 2025 01:09:02 +0000
ROA not before:           Thu 04 Dec 2025 01:04:02 +0000
ROA not after:            Thu 03 Dec 2026 01:09:02 +0000
asID:                     53356
IP address blocks:        45.148.76.0/22 maxlen: 22
                          2a0f:9400:5::/48 maxlen: 48
                          2a0f:9400:200::/48 maxlen: 48
                          2a0f:9400:fa0::/44 maxlen: 45
                          2a0f:9400:fb0::/44 maxlen: 44
                          2a0f:9400:6100::/48 maxlen: 48
                          2a0f:9400:6106::/48 maxlen: 48
                          2a0f:9400:6146::/48 maxlen: 48
                          2a0f:9400:6149::/48 maxlen: 48
                          2a0f:9400:614b::/48 maxlen: 48
                          2a0f:9400:6190::/44 maxlen: 44
                          2a0f:9400:6400::/40 maxlen: 40
                          2a0f:9400:6500::/40 maxlen: 40
                          2a0f:9400:6600::/40 maxlen: 40
                          2a0f:9400:6900::/48 maxlen: 48
                          2a0f:9400:690f::/48 maxlen: 48
                          2a0f:9400:6933::/48 maxlen: 48
                          2a0f:9400:6c00::/40 maxlen: 44
                          2a0f:9400:6d00::/40 maxlen: 40
                          2a0f:9400:6e00::/40 maxlen: 40
                          2a0f:9400:7000::/40 maxlen: 48
                          2a0f:9400:738c::/48 maxlen: 48
                          2a0f:9400:7390::/44 maxlen: 48
                          2a0f:9400:770c::/48 maxlen: 48
                          2a0f:9400:7723::/48 maxlen: 48
                          2a0f:9400:7724::/48 maxlen: 48
                          2a0f:9400:7726::/48 maxlen: 48
                          2a0f:9400:7727::/48 maxlen: 48
                          2a0f:9400:7728::/48 maxlen: 48
                          2a0f:9400:772c::/48 maxlen: 48
                          2a0f:9400:772f::/48 maxlen: 48
                          2a0f:9400:8003::/48 maxlen: 48
                          2a0f:9400:8024::/48 maxlen: 48
                          2a0f:9400:8027::/48 maxlen: 48
                          2a0f:9400:802b::/48 maxlen: 48
                          2a0f:9401::/32 maxlen: 32
                          2a0f:9405::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ee:7a:5d:49:5d:43:95:c7:bc:d8:19:e4:4a:6b:c0:96:01:b6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Dec  4 01:04:02 2025 GMT
            Not After : Dec  3 01:09:02 2026 GMT
        Subject: CN=223A9A734809096115CB228D16ECF621381FF78A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:88:51:53:6d:6c:c2:5d:d5:8a:73:6d:ba:
                    13:1e:b5:9f:cd:43:9c:85:de:03:04:4f:8d:cb:ec:
                    3c:de:ea:75:15:fd:73:df:78:ef:0c:48:60:c9:81:
                    63:b5:3e:0e:43:cb:6c:bc:c9:e3:be:4f:ac:10:87:
                    ce:11:ed:6f:13:f1:8d:ec:9d:99:32:50:7b:bf:3c:
                    6b:5c:25:00:30:f8:47:5d:44:eb:52:50:c1:ce:5e:
                    25:e1:59:3a:3c:f4:d4:3a:76:10:45:67:9c:cc:0e:
                    3a:d0:6f:cc:66:5c:54:fc:e3:53:fb:69:2b:82:cd:
                    23:c4:75:74:70:a7:67:87:4c:d7:ee:61:64:18:10:
                    e9:f9:d0:e1:d6:fa:02:cc:6d:22:12:4f:7f:35:d6:
                    b4:14:3c:df:45:31:6a:f6:f4:f3:15:cf:65:54:aa:
                    3b:8c:7e:39:d3:61:3a:47:a8:a7:a7:bc:d7:82:10:
                    32:f7:e5:c2:fa:a8:27:73:31:7f:95:6f:8d:3a:3b:
                    92:fb:d4:fa:39:07:e7:4e:ef:e8:9d:68:27:9f:5e:
                    14:35:aa:d0:da:5b:52:b0:38:3b:22:59:54:9c:8e:
                    dc:7d:00:da:ab:c7:ea:3c:4c:66:9b:f1:5e:be:c1:
                    cf:4d:0a:38:58:e9:56:52:e5:a5:ca:d9:a0:43:72:
                    88:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3A:9A:73:48:09:09:61:15:CB:22:8D:16:EC:F6:21:38:1F:F7:8A
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.76.0/22
                IPv6:
                  2a0f:9400:5::/48
                  2a0f:9400:200::/48
                  2a0f:9400:fa0::/43
                  2a0f:9400:6100::/48
                  2a0f:9400:6106::/48
                  2a0f:9400:6146::/48
                  2a0f:9400:6149::/48
                  2a0f:9400:614b::/48
                  2a0f:9400:6190::/44
                  2a0f:9400:6400::-2a0f:9400:66ff:ffff:ffff:ffff:ffff:ffff
                  2a0f:9400:6900::/48
                  2a0f:9400:690f::/48
                  2a0f:9400:6933::/48
                  2a0f:9400:6c00::-2a0f:9400:6eff:ffff:ffff:ffff:ffff:ffff
                  2a0f:9400:7000::/40
                  2a0f:9400:738c::/48
                  2a0f:9400:7390::/44
                  2a0f:9400:770c::/48
                  2a0f:9400:7723::-2a0f:9400:7724:ffff:ffff:ffff:ffff:ffff
                  2a0f:9400:7726::-2a0f:9400:7728:ffff:ffff:ffff:ffff:ffff
                  2a0f:9400:772c::/48
                  2a0f:9400:772f::/48
                  2a0f:9400:8003::/48
                  2a0f:9400:8024::/48
                  2a0f:9400:8027::/48
                  2a0f:9400:802b::/48
                  2a0f:9401::/32
                  2a0f:9405::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:c0:39:6d:02:bc:0e:73:f8:89:4a:d9:a9:db:85:30:c5:16:
         c9:d0:6b:0c:e8:95:de:fc:eb:40:85:ac:da:7e:27:e1:b9:1d:
         fd:a8:36:e0:3d:26:71:9a:29:f8:55:03:af:fe:7c:43:c6:86:
         31:87:0e:7f:bc:7f:ba:5b:50:33:ed:2b:51:f9:1b:bb:c8:a4:
         0b:38:7b:f8:da:36:4c:b8:3a:55:8b:a1:db:01:3d:77:d6:00:
         45:39:52:f0:9f:19:52:1e:b3:7a:d8:a9:a7:f0:d4:1c:a4:79:
         a7:e6:64:f0:23:40:ba:8b:cc:ed:83:07:fb:a2:de:fa:0a:9a:
         7d:c6:3e:9e:c7:c0:89:e8:65:29:1a:89:3b:6d:21:7b:f4:85:
         4a:32:f9:21:fe:ce:7d:4d:f0:06:07:fd:43:fe:e3:f4:1d:91:
         a6:47:00:f4:87:ce:03:18:c3:b7:d9:a0:30:ca:58:8e:2a:a2:
         47:89:97:e5:de:0d:24:d1:95:3d:93:d4:68:17:0b:58:c9:b9:
         50:9e:f1:a6:60:1d:48:2b:0d:bc:ee:ec:81:8a:da:1d:25:14:
         8b:3b:7f:3a:d0:16:4f:db:72:a1:eb:a2:1a:f0:8f:20:4f:9c:
         a8:93:1f:6c:78:4f:db:f9:33:d0:3d:4b:82:2f:2a:29:e1:33:
         ab:39:73:ff
-----BEGIN CERTIFICATE-----
MIIF7DCCBNSgAwIBAgIULO56XUldQ5XHvNgZ5EprwJYBtjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTEyMDQwMTA0MDJaFw0yNjEyMDMwMTA5MDJaMDMxMTAvBgNV
BAMTKDIyM0E5QTczNDgwOTA5NjExNUNCMjI4RDE2RUNGNjIxMzgxRkY3OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWIhRU21swl3VinNtuhMetZ/N
Q5yF3gMET43L7Dze6nUV/XPfeO8MSGDJgWO1Pg5Dy2y8yeO+T6wQh84R7W8T8Y3s
nZkyUHu/PGtcJQAw+EddROtSUMHOXiXhWTo89NQ6dhBFZ5zMDjrQb8xmXFT841P7
aSuCzSPEdXRwp2eHTNfuYWQYEOn50OHW+gLMbSIST3811rQUPN9FMWr29PMVz2VU
qjuMfjnTYTpHqKenvNeCEDL35cL6qCdzMX+Vb406O5L71Po5B+dO7+idaCefXhQ1
qtDaW1KwODsiWVScjtx9ANqrx+o8TGab8V6+wc9NCjhY6VZS5aXK2aBDcogrAgMB
AAGjggL2MIIC8jAdBgNVHQ4EFgQUIjqac0gJCWEVyyKNFuz2ITgf94owHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzUzMzU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBTgYI
KwYBBQUHAQcBAf8EggE9MIIBOTAMBAIAATAGAwQCLZRMMIIBJwQCAAIwggEfAwcA
Kg+UAAAFAwcAKg+UAAIAAwcFKg+UAA+gAwcAKg+UAGEAAwcAKg+UAGEGAwcAKg+U
AGFGAwcAKg+UAGFJAwcAKg+UAGFLAwcEKg+UAGGQMBADBgIqD5QAZAMGACoPlABm
AwcAKg+UAGkAAwcAKg+UAGkPAwcAKg+UAGkzMBADBgIqD5QAbAMGACoPlABuAwYA
Kg+UAHADBwAqD5QAc4wDBwQqD5QAc5ADBwAqD5QAdwwwEgMHACoPlAB3IwMHACoP
lAB3JDASAwcBKg+UAHcmAwcAKg+UAHcoAwcAKg+UAHcsAwcAKg+UAHcvAwcAKg+U
AIADAwcAKg+UAIAkAwcAKg+UAIAnAwcAKg+UAIArAwUAKg+UAQMFACoPlAUwDQYJ
KoZIhvcNAQELBQADggEBAADAOW0CvA5z+IlK2anbhTDFFsnQawzold7860CFrNp+
J+G5Hf2oNuA9JnGaKfhVA6/+fEPGhjGHDn+8f7pbUDPtK1H5G7vIpAs4e/jaNky4
OlWLodsBPXfWAEU5UvCfGVIes3rYqafw1BykeafmZPAjQLqLzO2DB/ui3voKmn3G
Pp7HwInoZSkaiTttIXv0hUoy+SH+zn1N8AYH/UP+4/QdkaZHAPSHzgMYw7fZoDDK
WI4qokeJl+XeDSTRlT2T1GgXC1jJuVCe8aZgHUgrDbzu7IGK2h0lFIs7fzrQFk/b
cqHrohrwjyBPnKiTH2x4T9v5M9A9S4IvKinhM6s5c/8=
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:05:29 2025 by rpki-client