This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204211.roa File: AS204211.roa (raw, json) Hash identifier: wdESon18zavahYXUwBPC6ForXIhBARO/G8J5IW1fya8= Subject key identifier: C9:D6:67:0E:34:C0:63:17:80:F6:D7:ED:51:68:8A:6B:1C:31:07:F1 Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Certificate serial: 726E83AF42054D2244970342D9165830307557CA Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204211.roa Signing time: Fri 07 Nov 2025 08:49:47 +0000 ROA not before: Fri 07 Nov 2025 08:44:47 +0000 ROA not after: Fri 06 Nov 2026 08:49:47 +0000 asID: 204211 IP address blocks: 2a0f:9400:6110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 13:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:6e:83:af:42:05:4d:22:44:97:03:42:d9:16:58:30:30:75:57:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Validity Not Before: Nov 7 08:44:47 2025 GMT Not After : Nov 6 08:49:47 2026 GMT Subject: CN=C9D6670E34C0631780F6D7ED51688A6B1C3107F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a2:7b:96:e6:8d:87:36:8d:10:3d:1a:4e:c9: c7:6d:bd:c2:25:80:fc:76:fb:89:07:a6:51:0f:9a: c3:40:f1:36:0e:b5:a5:d4:65:c2:2e:49:66:1d:86: df:d3:12:67:74:b6:5b:43:e8:f8:c8:1f:88:6d:11: 07:c4:c6:3f:9c:50:f3:0e:25:fd:05:fd:9e:6f:6c: 7e:88:03:6d:b6:e3:32:96:1c:21:18:bd:ec:3d:c7: 25:e2:cb:91:62:cc:88:92:50:93:0d:8d:c7:b7:f7: e9:ae:6a:c2:6f:27:cf:f0:14:d5:1c:d1:ac:af:19: c0:b3:7b:fd:76:6c:c9:db:c0:b8:a5:6b:50:2d:a9: 9d:8a:45:48:8b:5d:93:8b:9a:40:c4:bd:b5:a5:a9: 9a:5e:df:af:1d:e5:7b:3a:9a:e1:1b:98:c5:e3:b2: ce:71:bc:16:27:78:6d:dc:42:31:31:af:e8:d7:98: 39:65:de:d4:78:94:f4:8b:c4:1c:b4:0f:1a:fe:f8: ca:a1:7c:16:0b:75:70:e0:c5:8f:27:75:a9:74:ec: df:a7:64:15:ea:7a:2f:ee:c2:2e:2e:ce:b8:f0:ef: b2:89:b4:1a:7e:f9:bf:4a:17:f1:28:70:e2:f2:c6: 1c:5b:90:96:8e:50:a1:b6:4a:8d:75:23:60:5e:8d: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D6:67:0E:34:C0:63:17:80:F6:D7:ED:51:68:8A:6B:1C:31:07:F1 X509v3 Authority Key Identifier: keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204211.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9400:6110::/48 Signature Algorithm: sha256WithRSAEncryption 8c:83:4f:0a:15:52:b0:fe:ae:12:93:77:84:22:2a:d7:ae:e7: 7e:a2:11:c5:82:72:74:82:85:89:a4:22:2a:6a:71:d0:17:85: cf:c3:e1:7e:ef:aa:42:3d:4e:80:08:04:12:2f:19:c1:0f:23: e4:8d:4a:18:cf:df:a2:4e:a1:32:63:21:02:fc:c9:ba:e2:26: a2:93:9a:38:67:0b:82:13:d1:58:61:7f:c0:65:b7:ca:a5:f7: 18:5b:03:36:d9:56:15:84:ba:d4:62:eb:89:db:7b:20:23:a2: a2:c3:b6:52:3d:0d:a3:f6:3f:24:16:ee:c0:2e:53:b9:e2:3f: 74:70:b2:c8:fe:c7:c7:77:98:7b:ac:b9:f8:0a:7a:b0:18:d6: cc:5c:84:9e:ef:6f:d0:53:1e:64:0d:14:21:86:a7:46:27:76: 53:b7:aa:6c:19:d5:23:e6:1a:ae:e8:cf:ff:df:5c:80:dc:e4: e3:b0:29:e6:33:24:13:71:a7:84:d3:f7:bb:01:a5:fe:3d:18: 65:58:a3:bb:2d:af:07:64:75:97:5e:4d:2b:e3:6d:e0:ce:82: 0d:9e:0f:21:9d:3c:85:c3:1b:d4:d9:d8:07:96:db:ea:47:41: 43:d5:ff:82:cd:ca:1a:65:43:57:9a:42:ee:91:fc:79:ce:3a: 9f:30:49:9d -----BEGIN CERTIFICATE----- MIIEvzCCA6egAwIBAgIUcm6Dr0IFTSJElwNC2RZYMDB1V8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh M2U3Mzk4ZjAeFw0yNTExMDcwODQ0NDdaFw0yNjExMDYwODQ5NDdaMDMxMTAvBgNV BAMTKEM5RDY2NzBFMzRDMDYzMTc4MEY2RDdFRDUxNjg4QTZCMUMzMTA3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTonuW5o2HNo0QPRpOycdtvcIl gPx2+4kHplEPmsNA8TYOtaXUZcIuSWYdht/TEmd0tltD6PjIH4htEQfExj+cUPMO Jf0F/Z5vbH6IA2224zKWHCEYvew9xyXiy5FizIiSUJMNjce39+muasJvJ8/wFNUc 0ayvGcCze/12bMnbwLila1AtqZ2KRUiLXZOLmkDEvbWlqZpe368d5Xs6muEbmMXj ss5xvBYneG3cQjExr+jXmDll3tR4lPSLxBy0Dxr++MqhfBYLdXDgxY8ndal07N+n ZBXqei/uwi4uzrjw77KJtBp++b9KF/EocOLyxhxbkJaOUKG2So11I2BejablAgMB AAGjggHJMIIBxTAdBgNVHQ4EFgQUydZnDjTAYxeA9tftUWiKaxwxB/EwHwYDVR0j BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0 REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt Q0EvNS9BUzIwNDIxMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC AQEAjINPChVSsP6uEpN3hCIq167nfqIRxYJydIKFiaQiKmpx0BeFz8Phfu+qQj1O gAgEEi8ZwQ8j5I1KGM/fok6hMmMhAvzJuuImopOaOGcLghPRWGF/wGW3yqX3GFsD NtlWFYS61GLridt7ICOiosO2Uj0No/Y/JBbuwC5TueI/dHCyyP7Hx3eYe6y5+Ap6 sBjWzFyEnu9v0FMeZA0UIYanRid2U7eqbBnVI+YarujP/99cgNzk47Ap5jMkE3Gn hNP3uwGl/j0YZVijuy2vB2R1l15NK+Nt4M6CDZ4PIZ08hcMb1NnYB5bb6kdBQ9X/ gs3KGmVDV5pC7pH8ec46nzBJnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:37:23 2025 by rpki-client