This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197438.roa File: AS197438.roa (raw, json) Hash identifier: jNDXfDa24qH1Y/am3HNNSV3xOnPEbjXd8CS4N+sFuk0= Subject key identifier: 84:76:DA:0C:01:16:14:B2:32:54:FC:7C:9F:DC:FE:09:87:D2:0F:09 Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Certificate serial: 7873F8E1277AB477EFB0D242DE2CD192C6BCF20D Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197438.roa Signing time: Fri 05 Dec 2025 13:35:36 +0000 ROA not before: Fri 05 Dec 2025 13:30:36 +0000 ROA not after: Fri 04 Dec 2026 13:35:36 +0000 asID: 197438 IP address blocks: 2a0f:9400:611e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:73:f8:e1:27:7a:b4:77:ef:b0:d2:42:de:2c:d1:92:c6:bc:f2:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Validity Not Before: Dec 5 13:30:36 2025 GMT Not After : Dec 4 13:35:36 2026 GMT Subject: CN=8476DA0C011614B23254FC7C9FDCFE0987D20F09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:de:42:ba:d7:58:61:eb:2c:16:14:02:4f: 1e:4a:67:e8:ae:96:36:da:47:90:6f:1b:15:a9:4a: 30:c4:03:03:39:88:05:1a:c8:64:ab:73:9d:f7:07: 57:b7:7a:f6:fe:2a:b1:62:3c:8c:68:4f:42:e1:f1: 61:f1:4b:d8:26:49:59:cb:ef:bb:cd:7a:33:b9:be: 07:91:4a:ac:12:2a:17:b2:a1:d8:b1:03:fa:88:52: b7:e0:7a:ca:2e:96:4e:1c:f2:e3:07:2b:97:7c:0d: 15:9f:39:3c:2c:5a:36:01:d3:99:9f:3d:4f:2b:f6: 2e:ab:8c:63:9d:68:04:a3:61:ab:a0:c0:29:ec:1a: 87:57:10:df:e5:51:b9:66:c4:fd:cd:04:d5:ea:4a: fc:0d:b2:fc:ad:9f:0f:89:70:11:f7:87:0d:2c:ca: ca:3d:3f:67:9c:ab:50:0e:53:69:2b:41:4f:7f:d6: 18:42:dc:3f:26:6a:1e:c1:53:43:4d:02:87:b0:48: e7:d4:d4:44:df:25:77:47:aa:d8:e1:f2:c8:b9:17: 56:2b:8c:de:a9:93:d3:d0:a6:dc:69:e8:dc:e6:ed: 85:b7:3f:71:54:3e:9e:5b:53:f2:ab:78:c4:e8:0d: 1e:bd:67:de:b2:c9:07:5e:dd:3e:9c:95:31:4b:fe: 1b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:76:DA:0C:01:16:14:B2:32:54:FC:7C:9F:DC:FE:09:87:D2:0F:09 X509v3 Authority Key Identifier: keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9400:611e::/48 Signature Algorithm: sha256WithRSAEncryption 92:38:43:45:be:49:8f:03:38:2e:f4:07:25:25:a5:cc:05:b9: 8f:ef:ab:4f:da:cc:f2:8b:25:75:2e:2c:b9:40:0a:c6:04:33: 43:e5:6e:dc:b2:21:98:e5:cc:2b:e7:60:69:46:fe:4e:87:e2: 5e:04:df:a9:12:18:52:97:8c:cf:ac:62:63:3d:69:a2:57:bb: 0e:97:c3:3b:62:3e:d9:20:69:22:16:aa:4c:80:60:04:6b:6f: 2e:cb:71:b3:f7:e8:0a:82:ad:e0:76:c0:6d:ea:a6:2e:ea:ed: 68:88:9f:a3:17:85:39:ba:d8:62:53:81:71:4c:2a:db:a6:b9: 92:b1:3f:37:f8:20:30:04:2e:e5:f4:3e:e5:d7:28:d9:d8:28: 8b:02:bb:6a:78:4b:8b:b4:e5:3e:8a:33:fc:16:b9:2a:fb:5b: e5:1b:a6:8d:e2:fa:ff:55:77:30:da:35:51:bb:f9:0d:b7:a5: 9b:bc:0d:85:06:af:91:ce:54:20:5d:10:b1:ac:ca:a8:6b:c5: 43:61:a8:cb:ec:ab:07:de:24:96:c8:36:e9:90:2c:54:4c:6c: 46:e6:d0:59:2e:09:99:2d:06:74:3f:18:fa:04:3c:5a:ca:60: e4:62:f8:9f:5a:70:98:7f:2d:04:db:74:70:c8:1e:b9:df:7c: e7:14:8d:1d -----BEGIN CERTIFICATE----- MIIEvzCCA6egAwIBAgIUeHP44Sd6tHfvsNJC3izRksa88g0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh M2U3Mzk4ZjAeFw0yNTEyMDUxMzMwMzZaFw0yNjEyMDQxMzM1MzZaMDMxMTAvBgNV BAMTKDg0NzZEQTBDMDExNjE0QjIzMjU0RkM3QzlGRENGRTA5ODdEMjBGMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hN5CutdYYessFhQCTx5KZ+iu ljbaR5BvGxWpSjDEAwM5iAUayGSrc533B1e3evb+KrFiPIxoT0Lh8WHxS9gmSVnL 77vNejO5vgeRSqwSKheyodixA/qIUrfgesoulk4c8uMHK5d8DRWfOTwsWjYB05mf PU8r9i6rjGOdaASjYaugwCnsGodXEN/lUblmxP3NBNXqSvwNsvytnw+JcBH3hw0s yso9P2ecq1AOU2krQU9/1hhC3D8mah7BU0NNAoewSOfU1ETfJXdHqtjh8si5F1Yr jN6pk9PQptxp6Nzm7YW3P3FUPp5bU/KreMToDR69Z96yyQde3T6clTFL/huJAgMB AAGjggHJMIIBxTAdBgNVHQ4EFgQUhHbaDAEWFLIyVPx8n9z+CYfSDwkwHwYDVR0j BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0 REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt Q0EvNS9BUzE5NzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhHjANBgkqhkiG9w0BAQsFAAOC AQEAkjhDRb5JjwM4LvQHJSWlzAW5j++rT9rM8osldS4suUAKxgQzQ+Vu3LIhmOXM K+dgaUb+TofiXgTfqRIYUpeMz6xiYz1pole7DpfDO2I+2SBpIhaqTIBgBGtvLstx s/foCoKt4HbAbeqmLurtaIifoxeFObrYYlOBcUwq26a5krE/N/ggMAQu5fQ+5dco 2dgoiwK7anhLi7TlPooz/Ba5Kvtb5RumjeL6/1V3MNo1Ubv5Dbelm7wNhQavkc5U IF0QsazKqGvFQ2Goy+yrB94klsg26ZAsVExsRubQWS4JmS0GdD8Y+gQ8Wspg5GL4 n1pwmH8tBNt0cMgeud985xSNHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:25 2025 by rpki-client