Route Origin Authorization
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: 591H8S54xylXFxu9KC2gTyBQsPf7dBenhuHLrEEO7D0=
Subject key identifier: E4:D5:64:F7:87:83:73:5F:28:0F:78:62:FD:CA:E0:CC:43:48:D6:FC
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6A4478FF533525ACDFCED9828AFD82B16F6BAB4A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
Signing time: Thu 13 Aug 2026 19:15:47 +0000
ROA not before: Thu 13 Aug 2026 19:10:47 +0000
ROA not after: Thu 12 Aug 2027 19:15:47 +0000
asID: 53356
IP address blocks: 45.148.76.0/22 maxlen: 22
2a0f:9400:5::/48 maxlen: 48
2a0f:9400:200::/48 maxlen: 48
2a0f:9400:fa0::/44 maxlen: 45
2a0f:9400:fb0::/44 maxlen: 44
2a0f:9400:6106::/48 maxlen: 48
2a0f:9400:614b::/48 maxlen: 48
2a0f:9400:6400::/40 maxlen: 40
2a0f:9400:6500::/40 maxlen: 40
2a0f:9400:6600::/40 maxlen: 40
2a0f:9400:6800::/40 maxlen: 48
2a0f:9400:6906::/48 maxlen: 48
2a0f:9400:6910::/44 maxlen: 48
2a0f:9400:6939::/48 maxlen: 48
2a0f:9400:6a00::/40 maxlen: 40
2a0f:9400:6c00::/40 maxlen: 44
2a0f:9400:6d00::/40 maxlen: 40
2a0f:9400:6e00::/40 maxlen: 40
2a0f:9400:7000::/40 maxlen: 48
2a0f:9400:7330::/44 maxlen: 48
2a0f:9400:7385::/48 maxlen: 48
2a0f:9400:738c::/48 maxlen: 48
2a0f:9400:738f::/48 maxlen: 48
2a0f:9400:73a0::/44 maxlen: 44
2a0f:9400:7400::/40 maxlen: 40
2a0f:9400:770c::/48 maxlen: 48
2a0f:9400:7723::/48 maxlen: 48
2a0f:9400:7724::/48 maxlen: 48
2a0f:9400:7726::/48 maxlen: 48
2a0f:9400:7727::/48 maxlen: 48
2a0f:9400:7728::/48 maxlen: 48
2a0f:9400:772c::/48 maxlen: 48
2a0f:9400:772f::/48 maxlen: 48
2a0f:9400:7800::/40 maxlen: 40
2a0f:9400:8003::/48 maxlen: 48
2a0f:9400:8019::/48 maxlen: 48
2a0f:9400:8024::/48 maxlen: 48
2a0f:9400:8027::/48 maxlen: 48
2a0f:9400:802b::/48 maxlen: 48
2a0f:9401::/32 maxlen: 32
2a0f:9405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:44:78:ff:53:35:25:ac:df:ce:d9:82:8a:fd:82:b1:6f:6b:ab:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 13 19:10:47 2026 GMT
Not After : Aug 12 19:15:47 2027 GMT
Subject: CN=E4D564F78783735F280F7862FDCAE0CC4348D6FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:fd:bd:0b:e1:77:65:a0:89:0e:2e:4e:78:
34:6a:06:c2:a4:f8:28:93:58:a9:03:60:18:3c:10:
3f:a3:8c:48:26:3f:de:8f:9b:26:9e:0e:2d:80:fb:
94:4a:36:45:62:1c:3c:d4:cc:fb:73:07:85:db:2a:
67:2a:21:f1:b1:c5:76:0f:56:85:84:57:5b:c5:34:
91:8a:90:f1:9a:95:00:0e:0d:1e:7a:fb:ec:5f:22:
5a:6b:b3:c9:55:64:27:c8:54:0c:9a:8f:a0:58:9c:
0b:f5:b2:8e:dc:98:f0:fe:72:1b:94:e1:62:4d:ea:
1d:db:d9:76:5d:1d:52:65:d2:b4:93:ba:e4:77:41:
50:7c:64:09:f4:55:69:14:e3:28:84:e4:10:cb:a2:
cd:bc:85:2b:47:f7:00:cf:bb:0e:65:16:38:d7:bf:
93:26:86:eb:71:9f:8d:e9:27:54:5a:b9:e3:8f:a5:
91:d9:1a:55:9e:dc:31:3f:94:8f:fb:0c:7e:fb:f6:
6c:79:fe:dc:da:36:68:b4:27:f1:5e:3e:ae:6a:94:
d9:90:32:b3:9c:fe:97:ce:88:1c:b8:b0:90:78:bf:
71:f6:ac:83:69:51:b4:13:da:f1:e1:d8:6e:be:bd:
2c:3f:02:db:5c:b7:35:cc:ac:54:b6:b5:15:6f:5a:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D5:64:F7:87:83:73:5F:28:0F:78:62:FD:CA:E0:CC:43:48:D6:FC
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.76.0/22
IPv6:
2a0f:9400:5::/48
2a0f:9400:200::/48
2a0f:9400:fa0::/43
2a0f:9400:6106::/48
2a0f:9400:614b::/48
2a0f:9400:6400::-2a0f:9400:66ff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:6800::/40
2a0f:9400:6906::/48
2a0f:9400:6910::/44
2a0f:9400:6939::/48
2a0f:9400:6a00::/40
2a0f:9400:6c00::-2a0f:9400:6eff:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7000::/40
2a0f:9400:7330::/44
2a0f:9400:7385::/48
2a0f:9400:738c::/48
2a0f:9400:738f::/48
2a0f:9400:73a0::/44
2a0f:9400:7400::/40
2a0f:9400:770c::/48
2a0f:9400:7723::-2a0f:9400:7724:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7726::-2a0f:9400:7728:ffff:ffff:ffff:ffff:ffff
2a0f:9400:772c::/48
2a0f:9400:772f::/48
2a0f:9400:7800::/40
2a0f:9400:8003::/48
2a0f:9400:8019::/48
2a0f:9400:8024::/48
2a0f:9400:8027::/48
2a0f:9400:802b::/48
2a0f:9401::/32
2a0f:9405::/32
Signature Algorithm: sha256WithRSAEncryption
b5:1b:5f:8c:1f:15:d6:8c:f0:a4:aa:1b:09:65:d1:6d:4b:fc:
14:62:29:09:c3:63:28:04:9e:95:2c:38:40:53:ce:25:31:45:
c8:45:91:5d:fe:34:ea:81:80:83:f2:70:10:66:fc:27:2b:96:
3d:63:0d:3d:60:71:81:64:5e:59:14:f0:39:0b:25:73:e1:19:
56:ba:66:65:95:28:49:2d:58:d0:a9:09:12:af:2c:06:51:cd:
8e:44:2a:e3:4b:34:ce:ae:54:66:cc:2b:a3:7c:94:ee:9e:aa:
31:e8:93:d7:8d:54:b7:e2:91:4e:78:18:48:48:a6:db:57:4b:
26:79:66:0d:93:9c:3a:b5:3f:3b:33:8c:1b:7b:de:2f:d1:53:
2a:0c:70:02:a1:34:5d:f8:63:84:a6:8a:7b:60:f0:4f:46:83:
a4:32:7c:1e:90:e7:1e:28:cc:fb:b9:80:17:45:00:24:16:13:
c1:9d:fa:14:d7:a8:c1:77:0a:bd:53:0a:52:e4:f1:ec:fa:67:
ba:84:39:bb:ce:80:4e:73:6d:84:29:e5:4c:8f:e2:1e:65:64:
63:d7:2c:f5:58:47:00:ad:b2:eb:11:49:6e:5f:a0:c1:24:f6:
8c:7f:8a:39:16:fa:f6:8c:16:b0:a8:29:d3:af:9e:f7:90:e2:
32:2f:d6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:11:03 2026 by rpki-client