This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398493.roa
File:                     AS398493.roa (raw, json)
Hash identifier:          bUJfSY25+ZP4r0KyCO4d24iUFDO+FQ+S3unwlooD+oE=
Subject key identifier:   90:38:EB:7A:22:52:16:34:AE:89:C9:A9:B7:DB:40:11:BA:1B:22:AD
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       683E742B056D0833E8DAF3A8AD6F8648411329FC
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398493.roa
Signing time:             Tue 25 Nov 2025 20:11:49 +0000
ROA not before:           Tue 25 Nov 2025 20:06:49 +0000
ROA not after:            Tue 24 Nov 2026 20:11:49 +0000
asID:                     398493
IP address blocks:        2602:fed2:708e::/48 maxlen: 48
                          2602:fed2:7318::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3e:74:2b:05:6d:08:33:e8:da:f3:a8:ad:6f:86:48:41:13:29:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Nov 25 20:06:49 2025 GMT
            Not After : Nov 24 20:11:49 2026 GMT
        Subject: CN=9038EB7A22521634AE89C9A9B7DB4011BA1B22AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:56:c0:d0:a1:26:34:36:5e:8b:b9:18:5d:
                    e0:e3:ce:c4:1e:2c:54:d3:7a:40:cd:7c:de:47:fe:
                    79:28:5f:09:25:0c:8e:fc:a4:22:ec:b0:40:fe:0a:
                    6d:50:7f:3e:5a:1d:e2:7c:7b:63:ce:66:61:4d:e9:
                    99:05:6d:70:60:f3:7d:82:59:39:9f:27:1f:d9:93:
                    a8:11:da:4b:99:20:59:f5:77:13:0d:fe:95:60:8e:
                    f3:31:29:ba:01:28:1f:81:2e:70:e9:f1:66:5a:4b:
                    43:ad:7f:86:d6:c1:ca:78:8c:98:38:68:72:07:4d:
                    4a:9d:da:40:9f:93:dd:c0:a3:75:0d:75:8b:ea:97:
                    70:35:2d:15:28:ca:50:59:f5:e7:ea:18:d9:e1:15:
                    9f:a9:dc:21:b7:63:00:57:19:0a:59:91:5e:06:f7:
                    74:11:04:60:28:21:a2:b6:d0:85:c4:5d:7d:85:66:
                    c8:f9:a3:58:2a:57:3f:65:93:23:88:44:a9:ae:ee:
                    54:97:27:24:91:4b:cf:76:10:7c:a8:df:a3:fd:93:
                    85:eb:ff:b5:8e:36:0f:be:75:16:28:69:9f:01:ed:
                    b9:42:43:10:59:37:3e:ee:b3:00:b8:f0:9f:67:05:
                    46:8c:e6:ff:fa:c1:c2:f7:ee:60:c7:28:b4:c3:20:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:38:EB:7A:22:52:16:34:AE:89:C9:A9:B7:DB:40:11:BA:1B:22:AD
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398493.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:708e::/48
                  2602:fed2:7318::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:d9:2c:b5:ba:0f:6f:52:42:65:3e:8d:7a:33:ba:dd:a4:1d:
         2d:4c:2d:59:27:b1:79:1e:5b:ef:c1:4a:65:13:e5:b6:48:75:
         61:ec:fe:0f:47:8e:29:4b:37:66:02:22:ca:8e:43:a1:30:d9:
         f8:67:a9:25:cb:b7:c7:15:0e:6e:37:10:84:ff:49:e1:86:d2:
         4a:da:b6:91:1f:86:aa:01:9e:a7:fa:87:0c:ab:94:f1:aa:11:
         6f:22:e7:68:67:33:9c:c5:00:05:52:b2:d6:a9:05:d5:9c:96:
         5a:ae:4e:08:11:47:11:92:55:22:a8:2d:f4:7e:b8:64:7b:fb:
         b0:31:11:a0:13:9b:6b:1b:02:4f:d3:a4:29:77:0d:7a:e7:59:
         23:bf:18:bc:63:e5:a0:9a:3a:8f:0e:a8:81:52:4a:cd:0a:47:
         75:0f:04:4c:c5:84:43:e5:d7:09:49:80:8b:1d:0a:9a:2b:d6:
         52:da:58:6d:ed:03:d6:f6:5e:04:13:61:a0:12:35:9f:5f:ac:
         86:b5:20:80:e2:fb:6e:89:96:70:34:57:1d:a6:83:5e:5a:f2:
         2d:9e:ef:cc:b8:c4:9e:48:45:20:40:8f:d3:3c:53:8b:87:0a:
         22:28:22:1a:76:eb:a9:09:4b:23:0e:bd:99:4e:6e:cf:b3:37:
         50:0f:f6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:58:49 2025 by rpki-client