Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: gmvM/2XxlaxmhdYRiilZU+qUtj/LEPIqQqs6CZOyJ0Q=
Subject key identifier: A5:80:FE:3A:F5:6D:7D:9E:92:E7:2A:45:61:59:58:6A:10:7C:75:95
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6EC6F0107BF8E686E85A6BDCE018D57A6CA7937C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
Signing time: Mon 21 Sep 2026 00:59:05 +0000
ROA not before: Mon 21 Sep 2026 00:54:05 +0000
ROA not after: Mon 20 Sep 2027 00:59:05 +0000
asID: 53356
IP address blocks: 45.148.76.0/22 maxlen: 22
2a0f:9400:5::/48 maxlen: 48
2a0f:9400:200::/48 maxlen: 48
2a0f:9400:fa0::/44 maxlen: 45
2a0f:9400:fb0::/44 maxlen: 44
2a0f:9400:6106::/48 maxlen: 48
2a0f:9400:614b::/48 maxlen: 48
2a0f:9400:6400::/40 maxlen: 40
2a0f:9400:6500::/40 maxlen: 40
2a0f:9400:6600::/40 maxlen: 40
2a0f:9400:6800::/40 maxlen: 48
2a0f:9400:6906::/48 maxlen: 48
2a0f:9400:6910::/44 maxlen: 48
2a0f:9400:6939::/48 maxlen: 48
2a0f:9400:6a00::/40 maxlen: 40
2a0f:9400:6c00::/40 maxlen: 44
2a0f:9400:6d00::/40 maxlen: 40
2a0f:9400:6e00::/40 maxlen: 40
2a0f:9400:7000::/40 maxlen: 48
2a0f:9400:7330::/44 maxlen: 48
2a0f:9400:7385::/48 maxlen: 48
2a0f:9400:738c::/48 maxlen: 48
2a0f:9400:738f::/48 maxlen: 48
2a0f:9400:73a0::/44 maxlen: 44
2a0f:9400:7400::/40 maxlen: 40
2a0f:9400:770c::/48 maxlen: 48
2a0f:9400:7723::/48 maxlen: 48
2a0f:9400:7724::/48 maxlen: 48
2a0f:9400:7726::/48 maxlen: 48
2a0f:9400:7727::/48 maxlen: 48
2a0f:9400:7728::/48 maxlen: 48
2a0f:9400:772c::/48 maxlen: 48
2a0f:9400:772f::/48 maxlen: 48
2a0f:9400:7800::/40 maxlen: 40
2a0f:9400:8003::/48 maxlen: 48
2a0f:9400:8019::/48 maxlen: 48
2a0f:9400:8024::/48 maxlen: 48
2a0f:9400:8027::/48 maxlen: 48
2a0f:9400:802b::/48 maxlen: 48
2a0f:9400:9000::/40 maxlen: 40
2a0f:9401::/32 maxlen: 32
2a0f:9405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c6:f0:10:7b:f8:e6:86:e8:5a:6b:dc:e0:18:d5:7a:6c:a7:93:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 21 00:54:05 2026 GMT
Not After : Sep 20 00:59:05 2027 GMT
Subject: CN=A580FE3AF56D7D9E92E72A456159586A107C7595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:30:5f:59:df:57:dd:07:6e:12:20:98:22:
48:c9:f8:16:ce:bd:27:7c:1a:79:3c:aa:74:bf:99:
1b:63:b8:46:59:55:fd:91:1f:1f:56:6e:3a:20:42:
6a:c4:43:18:86:8a:83:5e:d5:7c:2b:06:d7:03:4b:
b2:96:2e:8a:83:ae:68:0b:31:e3:15:7a:47:1a:8b:
08:dd:27:81:d2:ee:33:d2:c6:6b:67:9d:33:a7:42:
ee:9c:16:f7:04:fa:40:bb:88:41:b3:69:50:8a:e9:
f9:7e:5a:e0:b7:ee:c9:bf:b2:9c:e8:76:08:52:70:
ea:ec:22:ba:43:e7:e7:1b:44:b1:4c:d1:50:c8:66:
11:c3:73:c8:3d:6d:60:eb:f7:c9:bf:2a:13:68:4d:
e3:6d:d9:e4:45:46:b1:b1:22:bb:ac:b9:d6:13:6b:
38:f0:af:58:77:96:75:7f:47:9e:db:50:55:24:4e:
15:f9:74:30:91:71:05:ce:13:07:29:44:1a:75:4e:
6f:fb:ce:d1:13:ee:75:c7:7b:ea:57:ed:90:19:13:
13:2a:9e:cb:81:34:c5:67:d2:05:23:d4:14:a1:97:
99:f4:26:d9:71:62:d1:7f:8a:f6:89:ac:d3:ff:b7:
10:b6:99:bf:79:f5:60:ba:e0:4a:4d:4b:39:4f:9f:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:FE:3A:F5:6D:7D:9E:92:E7:2A:45:61:59:58:6A:10:7C:75:95
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.76.0/22
IPv6:
2a0f:9400:5::/48
2a0f:9400:200::/48
2a0f:9400:fa0::/43
2a0f:9400:6106::/48
2a0f:9400:614b::/48
2a0f:9400:6400::-2a0f:9400:66ff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:6800::/40
2a0f:9400:6906::/48
2a0f:9400:6910::/44
2a0f:9400:6939::/48
2a0f:9400:6a00::/40
2a0f:9400:6c00::-2a0f:9400:6eff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7000::/40
2a0f:9400:7330::/44
2a0f:9400:7385::/48
2a0f:9400:738c::/48
2a0f:9400:738f::/48
2a0f:9400:73a0::/44
2a0f:9400:7400::/40
2a0f:9400:770c::/48
2a0f:9400:7723::-2a0f:9400:7724:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7726::-2a0f:9400:7728:ffff:ffff:ffff:ffff:ffff
2a0f:9400:772c::/48
2a0f:9400:772f::/48
2a0f:9400:7800::/40
2a0f:9400:8003::/48
2a0f:9400:8019::/48
2a0f:9400:8024::/48
2a0f:9400:8027::/48
2a0f:9400:802b::/48
2a0f:9400:9000::/40
2a0f:9401::/32
2a0f:9405::/32
Signature Algorithm: sha256WithRSAEncryption
03:36:2e:d0:a3:02:64:a1:03:15:9f:d7:16:90:3f:4e:8d:22:
aa:f9:f8:7f:9d:02:c5:7a:30:89:20:60:98:2f:31:f3:97:f1:
1a:87:d2:4d:4d:b2:ad:cf:c2:84:09:58:cc:3e:c3:0e:53:06:
7d:bf:23:ec:e1:a8:a6:f5:7d:0a:1c:71:b4:8a:df:15:34:3e:
9b:6d:bf:30:67:79:74:3b:2d:fe:ff:12:f3:85:de:b1:32:24:
fd:41:90:0f:be:3f:66:e6:3b:69:e2:f3:65:84:e9:ae:aa:60:
31:49:56:5a:c7:e3:40:38:46:e8:65:81:d3:30:02:45:4c:34:
b9:54:93:26:da:5a:65:53:f9:e6:6e:c1:e4:af:25:7b:64:dd:
82:78:29:a4:3b:01:55:d9:e2:b9:6f:07:91:60:15:8c:11:8f:
06:80:b0:0e:66:9a:58:aa:58:35:cf:70:4b:6c:8c:81:cc:68:
60:c8:e3:3c:7c:c2:f0:28:a0:e8:7f:e1:9f:bd:3e:72:13:dc:
02:ef:ca:19:b4:44:a1:74:05:a1:42:56:8a:52:a5:86:1a:2d:
54:03:74:a8:86:1d:d7:b3:bc:79:91:f3:07:d2:7b:3a:b1:d9:
f9:bc:9d:60:f7:13:3d:f7:f4:69:db:9c:1e:51:e7:9f:6f:d6:
8b:35:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:43:13 2026 by rpki-client