Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: 4kmmT5cpVGskybbwRcJvtVzznEYXhJhj+LEXXx+r7bs=
Subject key identifier: AC:BC:5A:0E:21:F0:D1:19:26:62:59:3B:DF:E5:E7:52:4E:62:A5:F5
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1D649B05CD9710458ECE7D054DF95315DA2714FC
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
Signing time: Mon 20 Jul 2026 15:33:24 +0000
ROA not before: Mon 20 Jul 2026 15:28:24 +0000
ROA not after: Mon 19 Jul 2027 15:33:24 +0000
asID: 53356
IP address blocks: 45.148.76.0/22 maxlen: 22
2a0f:9400:5::/48 maxlen: 48
2a0f:9400:200::/48 maxlen: 48
2a0f:9400:fa0::/44 maxlen: 45
2a0f:9400:fb0::/44 maxlen: 44
2a0f:9400:6106::/48 maxlen: 48
2a0f:9400:614b::/48 maxlen: 48
2a0f:9400:6400::/40 maxlen: 40
2a0f:9400:6500::/40 maxlen: 40
2a0f:9400:6600::/40 maxlen: 40
2a0f:9400:6800::/40 maxlen: 48
2a0f:9400:6906::/48 maxlen: 48
2a0f:9400:6910::/44 maxlen: 48
2a0f:9400:6939::/48 maxlen: 48
2a0f:9400:6a00::/40 maxlen: 40
2a0f:9400:6c00::/40 maxlen: 44
2a0f:9400:6d00::/40 maxlen: 40
2a0f:9400:6e00::/40 maxlen: 40
2a0f:9400:7000::/40 maxlen: 48
2a0f:9400:7330::/44 maxlen: 48
2a0f:9400:7385::/48 maxlen: 48
2a0f:9400:738c::/48 maxlen: 48
2a0f:9400:738f::/48 maxlen: 48
2a0f:9400:73a0::/44 maxlen: 44
2a0f:9400:7400::/40 maxlen: 40
2a0f:9400:770c::/48 maxlen: 48
2a0f:9400:7723::/48 maxlen: 48
2a0f:9400:7724::/48 maxlen: 48
2a0f:9400:7726::/48 maxlen: 48
2a0f:9400:7727::/48 maxlen: 48
2a0f:9400:7728::/48 maxlen: 48
2a0f:9400:772c::/48 maxlen: 48
2a0f:9400:772f::/48 maxlen: 48
2a0f:9400:8003::/48 maxlen: 48
2a0f:9400:8019::/48 maxlen: 48
2a0f:9400:8024::/48 maxlen: 48
2a0f:9400:8027::/48 maxlen: 48
2a0f:9400:802b::/48 maxlen: 48
2a0f:9401::/32 maxlen: 32
2a0f:9405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:64:9b:05:cd:97:10:45:8e:ce:7d:05:4d:f9:53:15:da:27:14:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 20 15:28:24 2026 GMT
Not After : Jul 19 15:33:24 2027 GMT
Subject: CN=ACBC5A0E21F0D1192662593BDFE5E7524E62A5F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:9f:39:83:6a:4a:b1:35:d5:d9:4c:c9:0c:
66:a1:ba:28:f2:1e:5b:58:f7:d9:82:01:54:03:58:
a3:6f:f2:d2:2e:bf:72:ce:18:9c:75:18:f1:f3:6c:
b7:48:84:1d:e1:bf:a5:74:bf:89:cd:01:f4:50:fa:
8b:80:ce:30:6a:ff:4f:de:74:1e:2b:bd:29:d4:1e:
f6:f5:8c:b3:fa:d5:48:5f:11:15:55:5f:63:28:e4:
67:3d:95:6d:30:7e:73:1d:de:ae:23:d3:17:13:96:
e9:91:10:de:80:38:21:03:1a:d1:01:b5:44:e8:23:
00:74:38:bd:96:0f:93:64:29:c2:d9:7e:76:36:7a:
aa:1a:e3:49:90:e1:3c:d8:4f:88:81:7b:d3:1b:47:
92:a7:9a:5d:36:26:bf:82:8c:2c:9b:a5:39:f7:da:
ca:6f:33:23:a5:82:ed:e2:1e:d7:5b:a2:04:d5:b3:
09:30:bf:04:79:19:e8:92:cc:75:64:24:e0:f4:f1:
44:65:1f:1f:40:82:43:32:71:8f:d1:15:6c:8a:22:
75:3c:d9:a4:43:dc:b8:7b:b6:6a:7a:f2:4c:67:cb:
47:17:ca:aa:2b:47:1c:b2:54:00:b4:43:ef:a2:04:
cd:ee:70:e4:a4:77:f9:57:1c:ec:ae:42:7a:89:0a:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BC:5A:0E:21:F0:D1:19:26:62:59:3B:DF:E5:E7:52:4E:62:A5:F5
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.76.0/22
IPv6:
2a0f:9400:5::/48
2a0f:9400:200::/48
2a0f:9400:fa0::/43
2a0f:9400:6106::/48
2a0f:9400:614b::/48
2a0f:9400:6400::-2a0f:9400:66ff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:6800::/40
2a0f:9400:6906::/48
2a0f:9400:6910::/44
2a0f:9400:6939::/48
2a0f:9400:6a00::/40
2a0f:9400:6c00::-2a0f:9400:6eff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7000::/40
2a0f:9400:7330::/44
2a0f:9400:7385::/48
2a0f:9400:738c::/48
2a0f:9400:738f::/48
2a0f:9400:73a0::/44
2a0f:9400:7400::/40
2a0f:9400:770c::/48
2a0f:9400:7723::-2a0f:9400:7724:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7726::-2a0f:9400:7728:ffff:ffff:ffff:ffff:ffff
2a0f:9400:772c::/48
2a0f:9400:772f::/48
2a0f:9400:8003::/48
2a0f:9400:8019::/48
2a0f:9400:8024::/48
2a0f:9400:8027::/48
2a0f:9400:802b::/48
2a0f:9401::/32
2a0f:9405::/32
Signature Algorithm: sha256WithRSAEncryption
48:e5:cc:32:78:fe:91:58:a9:ec:67:10:be:f8:97:da:16:c8:
e2:65:20:87:5f:ce:15:52:c1:ff:14:0c:54:48:84:11:56:0d:
b0:7b:4b:47:ae:75:0b:f3:56:e9:51:1e:70:e3:87:a7:9a:d6:
6f:a4:ec:dc:9a:a0:b9:2e:39:a5:a0:15:07:40:5a:74:13:d8:
ce:d1:6d:46:bf:e4:dc:13:eb:87:ff:07:6f:86:63:ff:f7:28:
4d:3c:0b:f1:7b:c8:92:d2:64:23:a1:93:d6:1f:8f:b5:92:7d:
1d:e0:07:76:9e:2f:26:ce:f2:1d:1d:4d:bf:d8:b1:7a:a9:82:
5a:4d:ba:2d:b6:69:68:2b:b3:78:a9:56:be:50:71:65:ea:a3:
0d:59:a7:fa:ae:f0:d5:3b:1a:af:06:83:20:7f:7c:ad:a2:05:
e0:eb:8c:76:40:7d:16:f7:88:e7:16:19:c0:68:91:47:c0:3a:
25:d1:20:62:c3:6b:90:5a:cf:e5:2f:bd:3b:d1:47:65:14:4a:
a5:19:95:06:4b:ec:2e:cc:27:ad:13:07:13:68:ca:59:2c:c9:
1b:4f:89:e3:91:00:97:14:bc:fa:b4:ba:d8:9b:bc:f1:80:59:
c1:8f:95:e5:aa:c5:7a:99:34:24:5e:6e:c9:52:b0:18:be:80:
0a:e9:2a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:56 2026 by rpki-client