This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS16390.roa
File:                     AS16390.roa (raw, json)
Hash identifier:          jIFXOMrOqXCDXPARoMNB/iWy0qvu5kq1SHC8TYbiLwI=
Subject key identifier:   FF:BA:C0:21:7D:51:F8:5A:4A:2E:1A:09:65:98:DA:60:17:13:95:D9
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       089C643E941C1C4262B836DD1379B028FD72D632
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS16390.roa
Signing time:             Mon 24 Nov 2025 20:31:14 +0000
ROA not before:           Mon 24 Nov 2025 20:26:14 +0000
ROA not after:            Mon 23 Nov 2026 20:31:14 +0000
asID:                     16390
IP address blocks:        2602:fed2:7103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9c:64:3e:94:1c:1c:42:62:b8:36:dd:13:79:b0:28:fd:72:d6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Nov 24 20:26:14 2025 GMT
            Not After : Nov 23 20:31:14 2026 GMT
        Subject: CN=FFBAC0217D51F85A4A2E1A096598DA60171395D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:49:eb:c3:cd:b9:af:6e:3e:fa:52:4b:b2:
                    5f:20:4f:ef:a9:bb:d6:87:78:8a:74:9f:12:57:d2:
                    81:83:be:98:c3:bf:6f:3c:d8:31:1e:52:ca:d7:b2:
                    58:8b:25:8f:67:9a:f8:ed:3b:41:65:c0:28:91:a5:
                    bd:fe:bd:8b:a6:84:b3:09:ad:1a:d1:bd:96:d8:2a:
                    37:0b:b7:e9:d7:e1:7f:d9:1e:28:0a:cc:af:8c:a3:
                    78:68:fa:14:6a:f2:5e:01:9b:76:7e:85:06:15:cc:
                    a8:83:9a:b1:ae:04:d8:71:f9:5f:e3:7a:0e:b7:a1:
                    f9:55:1a:c3:da:3a:72:56:07:b8:a6:4b:d5:8b:fd:
                    a6:76:e8:c3:31:3e:c7:e8:69:a8:a9:9c:b9:de:06:
                    46:da:60:4a:55:1a:d2:a9:bd:d3:e3:1d:80:11:41:
                    46:13:c0:e6:7d:57:ad:f2:37:7d:9e:14:5e:75:9e:
                    9d:52:76:40:f0:0b:64:29:bf:54:83:8c:49:ff:99:
                    42:59:aa:3c:0e:29:f2:40:b4:ed:08:a1:e5:06:ce:
                    0e:de:fe:aa:dd:9f:26:3a:ec:a3:58:1f:b8:8e:3b:
                    f6:b0:6d:73:be:13:da:16:3e:46:ce:43:e9:97:03:
                    7c:1b:42:11:b8:fa:48:1a:8a:3a:f3:f6:d4:5b:79:
                    4c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BA:C0:21:7D:51:F8:5A:4A:2E:1A:09:65:98:DA:60:17:13:95:D9
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS16390.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7103::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:a9:02:ee:6c:1e:52:9b:40:55:39:f3:b8:74:18:97:c8:0f:
         1e:cb:dc:dc:fe:e8:51:51:e3:f0:7f:24:33:20:65:fb:66:92:
         89:5a:f5:f7:ca:e4:79:3c:9f:bf:82:3a:d7:3f:fa:b2:82:f5:
         74:2d:a5:97:d8:0e:32:1b:5f:df:84:70:0f:58:3d:e7:82:b6:
         0e:2b:78:05:e7:20:94:3b:5b:8f:76:73:3a:7f:ff:47:51:cc:
         0e:c1:3d:3e:a6:b9:26:cb:c2:ce:cd:ad:4c:ab:05:56:10:09:
         a5:ac:e4:ac:5a:ba:54:75:06:f3:da:b4:f4:fa:35:e2:f1:a8:
         d8:18:85:a4:b4:96:55:73:89:72:af:8b:5f:92:d5:c9:f4:0c:
         8f:d5:7d:a4:52:5f:2a:cd:e8:e8:64:06:7e:82:b6:de:d9:57:
         90:1b:70:ed:2b:d9:a4:aa:51:d3:24:c6:1e:15:90:8c:ab:c1:
         c4:70:d8:d5:57:60:14:29:2c:93:40:72:51:8a:9f:14:2e:20:
         19:2b:15:00:85:0e:72:61:5b:db:bf:13:62:c0:7c:fc:14:62:
         bc:68:be:83:f5:c4:df:6f:40:cb:09:52:b2:5c:fd:d1:f6:9b:
         f4:be:c7:1b:6b:35:15:75:37:36:db:5e:c0:6e:03:c5:3c:1a:
         74:bc:43:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:22:29 2025 by rpki-client