This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          Z9hLfWym4o4z+jAB2Gc6Rx/qkpPGIFuZcB+2Hn4tJPw=
Subject key identifier:   67:B0:95:54:CF:F6:E1:44:B2:22:9C:A8:30:04:E9:0C:77:AB:1E:32
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       303518E8B5C7CBC80C5EBA8FB8EE0E0E54DBC5AF
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
Signing time:             Sun 30 Nov 2025 20:25:29 +0000
ROA not before:           Sun 30 Nov 2025 20:20:29 +0000
ROA not after:            Sun 29 Nov 2026 20:25:29 +0000
asID:                     20473
IP address blocks:        2602:fed2:710e::/48 maxlen: 48
                          2602:fed2:710f::/48 maxlen: 48
                          2602:fed2:7110::/48 maxlen: 48
                          2602:fed2:719c::/48 maxlen: 48
                          2602:fed2:719e::/48 maxlen: 48
                          2602:fed2:730d::/48 maxlen: 48
                          2602:fed2:731c::/48 maxlen: 48
                          2602:fed2:7e81::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:35:18:e8:b5:c7:cb:c8:0c:5e:ba:8f:b8:ee:0e:0e:54:db:c5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Nov 30 20:20:29 2025 GMT
            Not After : Nov 29 20:25:29 2026 GMT
        Subject: CN=67B09554CFF6E144B2229CA83004E90C77AB1E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7b:d4:fa:7b:5b:fd:7a:87:3b:a1:99:bc:61:
                    0e:30:8d:34:9b:63:36:ef:e7:86:e6:46:ac:e8:3e:
                    e1:40:a2:53:1b:9d:43:72:ae:39:42:ae:11:38:b1:
                    a5:27:80:2a:5c:57:89:aa:63:20:08:38:49:60:92:
                    81:80:6d:e5:d2:5e:e3:c3:81:3b:52:24:ed:7d:2e:
                    da:d4:4d:81:26:22:40:3c:0d:4e:38:48:bc:e9:d5:
                    f0:51:aa:8c:59:6e:b6:3f:03:03:6b:2d:13:48:df:
                    60:99:66:07:e7:3d:49:9c:8a:19:da:e0:ad:d2:82:
                    09:88:41:ff:de:48:c5:a3:db:81:f8:d2:bf:2c:ad:
                    b4:da:06:9e:88:62:49:22:16:15:6d:1a:2a:3e:8f:
                    c9:84:02:36:50:a6:7c:a8:a1:91:5f:58:c4:68:f7:
                    f7:23:1b:2f:f0:b5:c6:b2:a8:dd:f9:0c:fc:8d:a4:
                    8a:81:fa:25:29:b0:37:c4:8f:9d:13:6c:58:0d:0f:
                    dd:0d:8d:6d:8b:ba:8e:bc:f9:3d:47:bd:9e:88:53:
                    fe:80:5c:99:05:cb:19:52:19:e9:8d:6e:8e:6f:22:
                    0f:f0:2f:29:94:18:87:95:c3:d6:7d:18:9c:0f:fb:
                    3f:11:fd:12:e2:76:af:1f:63:4c:02:67:c1:57:60:
                    df:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B0:95:54:CF:F6:E1:44:B2:22:9C:A8:30:04:E9:0C:77:AB:1E:32
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:710e::-2602:fed2:7110:ffff:ffff:ffff:ffff:ffff
                  2602:fed2:719c::/48
                  2602:fed2:719e::/48
                  2602:fed2:730d::/48
                  2602:fed2:731c::/48
                  2602:fed2:7e81::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:76:30:97:88:5c:02:f2:59:ed:22:7d:3e:de:04:39:3e:f4:
         b5:de:1b:a4:90:83:4b:bf:83:91:21:2a:44:11:52:68:90:cc:
         58:f1:e7:65:2c:61:41:63:c0:ec:56:f3:d2:52:40:f0:f7:f1:
         3d:77:59:24:1d:58:e9:92:22:75:a8:2b:83:55:2e:83:05:5c:
         e0:f0:01:f0:4b:8e:79:dc:0e:a2:f4:ea:99:7c:33:91:8a:22:
         cd:64:e9:65:4e:41:46:c7:a0:ae:23:57:e1:f4:93:74:b7:f4:
         7d:e8:f0:6f:0d:7f:39:7d:80:c5:19:79:73:5e:fb:11:96:55:
         c3:19:f6:8a:63:91:74:2f:69:f7:4c:ea:86:9a:06:98:e4:65:
         ab:4e:e1:78:a9:c5:ee:6d:a7:f1:91:5a:f0:c8:ed:8a:b0:7f:
         f5:cb:79:3a:97:06:38:62:9f:8d:14:62:d9:c8:97:94:87:bc:
         f8:95:eb:d2:c6:49:23:bf:17:e8:85:56:9a:39:a3:52:f3:71:
         9b:c2:1e:03:b7:e7:dd:1f:f2:f4:b1:78:4d:ee:4f:27:5f:f1:
         a6:3d:a5:3e:c9:85:f0:49:22:8b:d0:e1:06:40:c0:69:9a:69:
         c1:f2:a5:a0:72:c9:0d:be:05:41:67:72:b7:c0:ce:3e:b0:dc:
         85:2f:21:e5
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIUMDUY6LXHy8gMXrqPuO4ODlTbxa8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUxMTMwMjAyMDI5WhcNMjYxMTI5MjAyNTI5
WjAzMTEwLwYDVQQDEyg2N0IwOTU1NENGRjZFMTQ0QjIyMjlDQTgzMDA0RTkwQzc3
QUIxRTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XvU+ntb/XqH
O6GZvGEOMI00m2M27+eG5kas6D7hQKJTG51Dcq45Qq4ROLGlJ4AqXFeJqmMgCDhJ
YJKBgG3l0l7jw4E7UiTtfS7a1E2BJiJAPA1OOEi86dXwUaqMWW62PwMDay0TSN9g
mWYH5z1JnIoZ2uCt0oIJiEH/3kjFo9uB+NK/LK202gaeiGJJIhYVbRoqPo/JhAI2
UKZ8qKGRX1jEaPf3Ixsv8LXGsqjd+Qz8jaSKgfolKbA3xI+dE2xYDQ/dDY1ti7qO
vPk9R72eiFP+gFyZBcsZUhnpjW6ObyIP8C8plBiHlcPWfRicD/s/Ef0S4navH2NM
AmfBV2DfgQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFGewlVTP9uFEsiKcqDAE6Qx3
qx4yMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMyMDQ3My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBaBggrBgEFBQcBBwEB/wRLMEkwRwQCAAIwQTASAwcBJgL+0nEOAwcAJgL+
0nEQAwcAJgL+0nGcAwcAJgL+0nGeAwcAJgL+0nMNAwcAJgL+0nMcAwcAJgL+0n6B
MA0GCSqGSIb3DQEBCwUAA4IBAQCmdjCXiFwC8lntIn0+3gQ5PvS13hukkINLv4OR
ISpEEVJokMxY8edlLGFBY8DsVvPSUkDw9/E9d1kkHVjpkiJ1qCuDVS6DBVzg8AHw
S4553A6i9OqZfDORiiLNZOllTkFGx6CuI1fh9JN0t/R96PBvDX85fYDFGXlzXvsR
llXDGfaKY5F0L2n3TOqGmgaY5GWrTuF4qcXubafxkVrwyO2KsH/1y3k6lwY4Yp+N
FGLZyJeUh7z4levSxkkjvxfohVaaOaNS83Gbwh4Dt+fdH/L0sXhN7k8nX/GmPaU+
yYXwSSKL0OEGQMBpmmnB8qWgcskNvgVBZ3K3wM4+sNyFLyHl
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:49:01 2025 by rpki-client