This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS153376.roa File: AS153376.roa (raw, json) Hash identifier: rwmoviMCjX41VonfMLen9lFsazIW+h2+uWNfDDryFIc= Subject key identifier: CC:A8:06:02:36:AD:07:31:A4:87:2A:00:47:C5:C7:0A:62:9D:8C:CA Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Certificate serial: 4D47B8520EDBC862CCA670543FF26D6411D98CD8 Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS153376.roa Signing time: Tue 02 Dec 2025 13:21:18 +0000 ROA not before: Tue 02 Dec 2025 13:16:18 +0000 ROA not after: Tue 01 Dec 2026 13:21:18 +0000 asID: 153376 IP address blocks: 2a0f:9400:6110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:47:b8:52:0e:db:c8:62:cc:a6:70:54:3f:f2:6d:64:11:d9:8c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Validity Not Before: Dec 2 13:16:18 2025 GMT Not After : Dec 1 13:21:18 2026 GMT Subject: CN=CCA8060236AD0731A4872A0047C5C70A629D8CCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:50:68:15:5e:52:ea:00:b3:ba:97:21:8a:3c: b6:2f:f1:6d:50:c1:aa:9b:1c:a4:df:59:ef:1d:f1: c2:ed:d7:9e:e5:80:17:0e:af:8e:7c:bc:35:c5:fb: e9:76:0d:e2:de:9a:a0:03:1c:78:e1:ba:82:8c:b5: 16:82:aa:cf:e1:e1:12:f5:45:e1:de:02:54:b0:4d: 44:f3:fd:ef:89:55:33:22:7a:48:b8:d1:59:fa:0e: 3a:b3:3e:08:6c:3e:74:00:39:24:35:f3:22:73:ca: f2:91:39:51:7b:1e:bc:c3:23:43:11:fe:f9:52:72: f1:fa:d2:03:a7:8e:59:b3:d8:5a:01:eb:ca:37:10: 9d:21:42:78:c4:85:13:2f:0a:ba:39:93:dc:74:2a: 17:e9:6b:47:1d:09:56:0d:88:71:5e:42:d7:df:34: 9e:d2:0d:ba:5f:12:9a:87:32:ff:0e:ac:06:29:1c: 1f:37:87:a6:62:a7:f9:7c:85:ec:7e:d8:ba:6b:be: a5:b9:66:d6:09:02:dc:b8:84:bd:10:58:f4:da:7b: 67:c9:29:1d:72:71:58:54:49:c1:1d:46:a1:94:16: 82:26:46:87:a5:eb:65:db:16:64:c7:f0:0e:31:7b: 58:ac:df:41:0a:a7:b0:5c:81:36:79:79:77:05:cd: 44:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A8:06:02:36:AD:07:31:A4:87:2A:00:47:C5:C7:0A:62:9D:8C:CA X509v3 Authority Key Identifier: keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS153376.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9400:6110::/48 Signature Algorithm: sha256WithRSAEncryption 2f:f1:1f:d7:78:95:37:d0:79:38:f2:47:6a:28:c1:30:63:c6: 89:a3:02:ff:40:b3:e0:38:4d:1b:79:bb:b8:ce:7b:ff:14:a4: d7:42:0b:db:d5:21:d4:ee:37:55:79:12:66:ce:87:81:92:cb: bb:ac:da:b9:72:b8:c1:50:a8:cc:8b:44:dc:d3:15:9e:2d:6d: e6:7d:ec:bc:c1:f4:c1:af:bc:30:b4:c6:0c:b7:3a:69:e0:c0: f2:e1:8d:3e:c9:b8:78:e5:d1:e3:85:e9:66:be:ec:ee:bf:ea: d6:ce:55:dd:a6:0f:38:51:af:ec:e6:1b:bb:50:b8:b9:fe:c2: ab:d5:38:65:fd:71:9e:98:1a:e0:21:b6:e6:32:a8:4c:48:63: aa:8b:ff:76:de:5a:9c:81:43:1c:80:d1:4f:60:63:5e:6b:3c: 73:55:02:01:40:64:70:d5:fa:2a:c5:8e:c2:d7:d6:63:db:d1: 1f:cf:7d:09:83:a6:b8:9c:d6:d9:ec:3a:bc:07:00:99:a4:48: 7e:63:5c:d5:33:ad:f9:ab:4c:0e:3e:e2:6a:d7:e0:e0:1d:08: f8:ff:99:c3:71:05:c5:3a:d0:98:33:6b:d9:93:65:a3:8d:35: f9:e4:74:99:45:c5:38:53:bc:71:de:b8:f5:ba:63:87:80:eb: a7:ad:95:8f -----BEGIN CERTIFICATE----- MIIEvzCCA6egAwIBAgIUTUe4Ug7byGLMpnBUP/JtZBHZjNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh M2U3Mzk4ZjAeFw0yNTEyMDIxMzE2MThaFw0yNjEyMDExMzIxMThaMDMxMTAvBgNV BAMTKENDQTgwNjAyMzZBRDA3MzFBNDg3MkEwMDQ3QzVDNzBBNjI5RDhDQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+UGgVXlLqALO6lyGKPLYv8W1Q waqbHKTfWe8d8cLt157lgBcOr458vDXF++l2DeLemqADHHjhuoKMtRaCqs/h4RL1 ReHeAlSwTUTz/e+JVTMieki40Vn6DjqzPghsPnQAOSQ18yJzyvKROVF7HrzDI0MR /vlScvH60gOnjlmz2FoB68o3EJ0hQnjEhRMvCro5k9x0Khfpa0cdCVYNiHFeQtff NJ7SDbpfEpqHMv8OrAYpHB83h6Zip/l8hex+2LprvqW5ZtYJAty4hL0QWPTae2fJ KR1ycVhUScEdRqGUFoImRoel62XbFmTH8A4xe1is30EKp7BcgTZ5eXcFzUT7AgMB AAGjggHJMIIBxTAdBgNVHQ4EFgQUzKgGAjatBzGkhyoAR8XHCmKdjMowHwYDVR0j BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0 REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt Q0EvNS9BUzE1MzM3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC AQEAL/Ef13iVN9B5OPJHaijBMGPGiaMC/0Cz4DhNG3m7uM57/xSk10IL29Uh1O43 VXkSZs6HgZLLu6zauXK4wVCozItE3NMVni1t5n3svMH0wa+8MLTGDLc6aeDA8uGN Psm4eOXR44XpZr7s7r/q1s5V3aYPOFGv7OYbu1C4uf7Cq9U4Zf1xnpga4CG25jKo TEhjqov/dt5anIFDHIDRT2BjXms8c1UCAUBkcNX6KsWOwtfWY9vRH899CYOmuJzW 2ew6vAcAmaRIfmNc1TOt+atMDj7iatfg4B0I+P+Zw3EFxTrQmDNr2ZNlo401+eR0 mUXFOFO8cd649bpjh4Drp62Vjw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:48:27 2025 by rpki-client