Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: iv/n2u5sBxcbAeo4wKxv2IsEAnN8TA+mDxbpiy4Wd88=
Subject key identifier: 2B:E9:2D:C2:55:20:71:6D:93:6D:7F:1E:60:F2:6C:31:09:73:4F:5E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 564E0355B20798FC10D525CA3E6430F0F7ABF879
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
Signing time: Sun 11 Oct 2026 21:12:55 +0000
ROA not before: Sun 11 Oct 2026 21:07:55 +0000
ROA not after: Sun 10 Oct 2027 21:12:55 +0000
asID: 53356
IP address blocks: 45.148.76.0/22 maxlen: 22
2a0f:9400:5::/48 maxlen: 48
2a0f:9400:200::/48 maxlen: 48
2a0f:9400:fa0::/44 maxlen: 45
2a0f:9400:fb0::/44 maxlen: 44
2a0f:9400:6106::/48 maxlen: 48
2a0f:9400:6109::/48 maxlen: 48
2a0f:9400:6118::/48 maxlen: 48
2a0f:9400:6119::/48 maxlen: 48
2a0f:9400:611c::/48 maxlen: 48
2a0f:9400:614b::/48 maxlen: 48
2a0f:9400:6400::/40 maxlen: 40
2a0f:9400:6500::/40 maxlen: 40
2a0f:9400:6600::/40 maxlen: 40
2a0f:9400:6800::/40 maxlen: 48
2a0f:9400:6906::/48 maxlen: 48
2a0f:9400:6910::/44 maxlen: 48
2a0f:9400:6939::/48 maxlen: 48
2a0f:9400:6a00::/40 maxlen: 40
2a0f:9400:6c00::/40 maxlen: 44
2a0f:9400:6d00::/40 maxlen: 40
2a0f:9400:6e00::/40 maxlen: 40
2a0f:9400:7000::/40 maxlen: 48
2a0f:9400:7330::/44 maxlen: 48
2a0f:9400:7385::/48 maxlen: 48
2a0f:9400:738c::/48 maxlen: 48
2a0f:9400:738f::/48 maxlen: 48
2a0f:9400:73a0::/44 maxlen: 44
2a0f:9400:7400::/40 maxlen: 40
2a0f:9400:770c::/48 maxlen: 48
2a0f:9400:7723::/48 maxlen: 48
2a0f:9400:7724::/48 maxlen: 48
2a0f:9400:7726::/48 maxlen: 48
2a0f:9400:7727::/48 maxlen: 48
2a0f:9400:7728::/48 maxlen: 48
2a0f:9400:772c::/48 maxlen: 48
2a0f:9400:772f::/48 maxlen: 48
2a0f:9400:7800::/40 maxlen: 40
2a0f:9400:7900::/40 maxlen: 40
2a0f:9400:7a00::/40 maxlen: 40
2a0f:9400:8003::/48 maxlen: 48
2a0f:9400:8019::/48 maxlen: 48
2a0f:9400:8024::/48 maxlen: 48
2a0f:9400:8027::/48 maxlen: 48
2a0f:9400:802b::/48 maxlen: 48
2a0f:9400:9000::/40 maxlen: 40
2a0f:9400:9100::/48 maxlen: 48
2a0f:9401::/32 maxlen: 32
2a0f:9405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:4e:03:55:b2:07:98:fc:10:d5:25:ca:3e:64:30:f0:f7:ab:f8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 11 21:07:55 2026 GMT
Not After : Oct 10 21:12:55 2027 GMT
Subject: CN=2BE92DC25520716D936D7F1E60F26C3109734F5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ba:6c:d2:e9:b1:6c:85:44:cc:1c:25:67:28:
4a:36:87:19:a1:c5:28:29:28:68:8b:11:16:1f:c1:
f9:89:bc:5c:e3:2e:d9:61:20:f9:59:bd:0b:dc:85:
64:c7:47:c3:aa:a3:27:46:93:40:22:13:ba:a8:8c:
6b:15:ee:4d:50:54:33:af:54:d0:bd:5a:62:5d:59:
a7:d3:99:55:69:65:95:16:0d:ae:76:29:01:a2:35:
cb:0a:aa:37:1a:b9:6d:73:d4:89:c3:20:9c:a3:4d:
0b:44:a0:a3:83:35:87:72:d4:e0:2e:90:75:5d:a6:
df:f5:e8:f3:28:81:86:9e:92:75:a6:de:0d:66:36:
9e:8e:a6:e8:59:9c:6e:64:5a:c8:38:16:ce:33:2c:
38:14:1c:ae:8d:64:5c:cf:3b:f8:73:30:f3:7a:c5:
5c:05:30:95:4e:2c:0c:3d:56:28:9d:96:f6:8a:14:
93:ad:1c:2f:75:83:bd:d1:f8:3f:26:9a:52:a8:1a:
12:98:c3:d0:10:61:fb:fe:99:e2:c7:07:65:fc:1d:
09:24:55:c7:54:5d:25:73:ec:35:79:8e:60:fe:20:
0e:74:c8:ae:b0:7f:1c:14:f6:26:c3:a3:e5:fc:48:
69:d6:b8:d1:f5:ee:7a:10:42:e1:1e:af:cc:ce:17:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E9:2D:C2:55:20:71:6D:93:6D:7F:1E:60:F2:6C:31:09:73:4F:5E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.76.0/22
IPv6:
2a0f:9400:5::/48
2a0f:9400:200::/48
2a0f:9400:fa0::/43
2a0f:9400:6106::/48
2a0f:9400:6109::/48
2a0f:9400:6118::/47
2a0f:9400:611c::/48
2a0f:9400:614b::/48
2a0f:9400:6400::-2a0f:9400:66ff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:6800::/40
2a0f:9400:6906::/48
2a0f:9400:6910::/44
2a0f:9400:6939::/48
2a0f:9400:6a00::/40
2a0f:9400:6c00::-2a0f:9400:6eff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7000::/40
2a0f:9400:7330::/44
2a0f:9400:7385::/48
2a0f:9400:738c::/48
2a0f:9400:738f::/48
2a0f:9400:73a0::/44
2a0f:9400:7400::/40
2a0f:9400:770c::/48
2a0f:9400:7723::-2a0f:9400:7724:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7726::-2a0f:9400:7728:ffff:ffff:ffff:ffff:ffff
2a0f:9400:772c::/48
2a0f:9400:772f::/48
2a0f:9400:7800::-2a0f:9400:7aff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:8003::/48
2a0f:9400:8019::/48
2a0f:9400:8024::/48
2a0f:9400:8027::/48
2a0f:9400:802b::/48
2a0f:9400:9000::-2a0f:9400:9100:ffff:ffff:ffff:ffff:ffff
2a0f:9401::/32
2a0f:9405::/32
Signature Algorithm: sha256WithRSAEncryption
39:7b:40:27:28:1f:da:e3:25:6d:55:ed:5f:26:00:73:26:49:
e2:c3:8c:69:d0:d2:99:38:26:3f:d4:fa:ae:f3:f6:fb:de:11:
04:dd:eb:73:68:96:4c:ec:f7:58:51:dd:40:e4:d9:dd:b4:65:
6e:82:8c:cd:4a:bd:ec:c8:e2:8f:c4:4c:5a:98:09:fd:6d:f1:
96:78:de:9f:7a:bb:43:f7:01:75:da:ee:ef:67:cf:f4:d7:6c:
b1:3d:a5:d9:c9:46:a9:8a:55:cb:e0:1f:ee:43:da:77:fd:49:
12:75:ca:2a:d2:9e:31:a5:1e:fa:df:7e:84:e8:91:88:f5:52:
e0:12:eb:73:05:76:5a:b7:39:4d:cb:2f:e9:3f:a9:ea:7a:f3:
bf:99:23:b2:ab:7d:c8:4e:16:ac:7b:c6:db:cd:21:33:42:53:
75:56:cc:7c:cd:0d:5c:82:24:9b:75:86:cb:f7:3c:3c:8f:20:
6f:1e:94:7a:f0:09:f7:9a:f0:ef:5b:5b:0d:3d:11:37:4d:ef:
64:5d:3c:ba:86:4c:bd:4b:bc:61:03:0e:5b:26:03:ad:dd:01:
16:f2:2a:58:ca:d7:aa:cf:b0:18:f6:26:bd:27:20:4d:4b:64:
b9:5b:46:e6:e1:64:75:bb:a8:45:ba:45:79:84:30:b7:03:7a:
e0:f3:8f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 17:13:29 2026 by rpki-client