This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa
File:                     323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa (raw, json)
Hash identifier:          uT3coFn/2FiAlbXfgKxWfI9iR3qZFERZoB+Va5DEy4M=
Subject key identifier:   28:22:FE:A8:00:EF:AA:51:B7:D5:FD:23:0A:89:D1:72:7E:CF:BC:DA
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       5DECD46D9A78BDDE34DF24789FCC55B441C2C1C2
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa
Signing time:             Tue 20 Jan 2026 17:03:09 +0000
ROA not before:           Tue 20 Jan 2026 16:58:09 +0000
ROA not after:            Tue 19 Jan 2027 17:03:09 +0000
asID:                     54133
IP address blocks:        2602:fe13:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ec:d4:6d:9a:78:bd:de:34:df:24:78:9f:cc:55:b4:41:c2:c1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jan 20 16:58:09 2026 GMT
            Not After : Jan 19 17:03:09 2027 GMT
        Subject: CN=2822FEA800EFAA51B7D5FD230A89D1727ECFBCDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:53:51:b7:79:98:61:93:0c:fe:10:61:a2:
                    7f:fd:39:2e:b3:a8:1c:81:52:c0:8e:9e:81:a1:74:
                    a3:18:2d:4a:37:33:3e:cf:19:3e:a8:6a:8b:9f:c0:
                    93:7f:f4:9f:ab:5c:99:e3:51:09:60:23:fc:60:43:
                    f5:df:88:e1:b1:00:98:12:2d:ca:c2:a5:f2:30:9e:
                    48:62:d0:96:3a:7e:cd:f8:e6:0f:a2:f2:b6:b1:37:
                    2e:dd:bd:7d:20:a7:f1:76:ee:2e:52:2d:e5:ce:49:
                    4e:2d:75:bb:52:b4:7b:95:9b:d6:31:39:82:fb:c3:
                    93:29:5f:15:6a:c3:99:fc:48:f0:19:aa:86:e4:8e:
                    9d:e1:65:55:e6:fc:0b:7e:03:c6:67:07:14:27:9a:
                    fc:a9:ea:48:8c:a9:81:b2:3a:69:b8:5b:ef:fc:99:
                    9c:be:31:04:66:fc:d9:07:a0:30:52:63:c3:65:ce:
                    a8:ff:8d:1d:da:09:da:34:29:67:b4:16:f2:3f:c0:
                    04:20:29:01:f9:e7:8b:9a:97:57:84:90:81:48:4b:
                    1b:8b:e1:a0:62:aa:92:cc:69:c5:31:34:14:fc:87:
                    86:f3:28:86:5e:2e:69:71:40:30:21:4e:ba:c6:8d:
                    35:bd:40:49:55:3f:1f:3c:03:d9:b7:3c:dc:67:6c:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:22:FE:A8:00:EF:AA:51:B7:D5:FD:23:0A:89:D1:72:7E:CF:BC:DA
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:d5:d3:7b:67:a0:ab:8e:07:45:12:61:59:97:b7:e9:cc:e2:
         43:e7:73:fa:e5:fe:73:a2:37:be:cd:b7:a6:88:66:eb:01:5f:
         ae:13:54:a3:39:f4:36:14:97:f7:6a:88:fe:e5:c2:43:af:59:
         d0:ba:70:46:16:77:61:de:56:b7:19:c7:26:94:8f:d9:eb:7b:
         d1:80:31:0d:17:34:4c:a0:65:90:ae:9a:bc:44:06:44:b8:5f:
         48:d1:3e:90:ba:a8:16:1e:d3:73:65:a0:e4:57:f2:a7:8d:22:
         bf:13:45:e9:d8:a2:42:a9:46:2b:3d:50:70:ec:57:7e:8d:45:
         ad:37:7a:66:bd:fd:21:fa:11:ba:d2:c0:cc:10:ab:a4:e6:4d:
         cd:30:4f:bd:90:98:65:72:ea:3f:48:51:96:92:f3:25:c6:d7:
         cd:00:02:d2:1e:12:57:2a:db:dc:f8:dc:45:6f:c0:99:fa:b7:
         63:b9:68:72:bb:ee:17:7a:78:0d:6f:58:23:0b:f2:68:d8:df:
         0f:e3:be:6d:51:03:9c:81:28:c1:1c:ea:a3:e1:17:bb:f4:a4:
         7f:c8:7f:39:40:b3:2a:b9:27:14:77:37:9b:fd:f0:d8:02:b0:
         44:02:8b:77:f3:88:86:10:a7:a1:60:83:1c:e2:05:2c:10:2e:
         db:9e:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:06:10 2026 by rpki-client