This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204535.roa File: AS204535.roa (raw, json) Hash identifier: FGg7+5bYvOo971kvwehklphBCw6fuFf+1DORiMEED1g= Subject key identifier: A9:33:E8:86:12:70:98:06:ED:0A:CF:DE:53:8A:22:89:6E:B6:0F:8C Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Certificate serial: 74B4267F943DF154A4EE1B0DF9B76E1543BFC198 Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204535.roa Signing time: Tue 02 Dec 2025 13:47:07 +0000 ROA not before: Tue 02 Dec 2025 13:42:07 +0000 ROA not after: Tue 01 Dec 2026 13:47:07 +0000 asID: 204535 IP address blocks: 2a0f:9400:6110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b4:26:7f:94:3d:f1:54:a4:ee:1b:0d:f9:b7:6e:15:43:bf:c1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Validity Not Before: Dec 2 13:42:07 2025 GMT Not After : Dec 1 13:47:07 2026 GMT Subject: CN=A933E88612709806ED0ACFDE538A22896EB60F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:30:65:4c:1c:f0:54:22:26:97:62:29:ca:37: d0:0b:c3:6c:4c:bc:be:67:f6:b9:63:56:ee:e6:55: 09:6e:9c:4e:5b:c1:05:53:36:e9:6c:86:fa:c1:fd: 51:3c:e5:88:29:ac:63:3e:3a:0f:7e:70:86:07:87: 25:60:99:d6:3d:76:dd:47:05:f9:01:43:da:a0:32: f2:a1:4d:b1:2f:6d:f7:6a:b0:a3:53:82:e3:aa:a3: a7:0c:5c:23:58:9d:64:91:11:74:d3:a7:32:56:1f: ba:8c:72:d6:f6:99:d4:62:34:0d:3c:47:f1:75:d2: 79:a8:e9:be:ab:dd:cd:37:2f:87:54:d5:0e:59:cd: 76:b4:43:87:f2:0f:21:5b:58:ac:f7:ea:c3:83:62: d9:7f:98:9b:9e:04:4e:a4:a8:d8:ec:72:46:b7:99: b0:bd:1e:59:a3:7b:33:63:7f:40:87:6c:a4:8d:eb: 7b:07:e3:5e:75:05:13:1d:a5:c3:88:85:fd:bc:8b: 89:9a:be:0f:22:42:2f:16:55:be:d5:fe:b7:c5:d7: d5:cc:7f:cf:d5:4b:f3:f3:fb:d7:fd:24:17:37:f8: 7f:45:ac:8f:a5:f4:6b:ce:f7:54:a8:52:47:bb:81: 6c:f1:f5:7a:68:25:e9:d7:99:54:f6:f8:be:41:eb: 9a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:33:E8:86:12:70:98:06:ED:0A:CF:DE:53:8A:22:89:6E:B6:0F:8C X509v3 Authority Key Identifier: keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9400:6110::/48 Signature Algorithm: sha256WithRSAEncryption 37:08:27:55:18:5d:18:9a:45:70:50:46:72:5e:24:17:f1:a4: 9d:61:21:eb:94:ed:45:d2:93:68:9f:ff:c6:6b:ab:cf:6b:f9: 02:06:f1:ab:ab:16:18:bd:80:12:c5:81:db:a3:19:c1:1e:6c: 28:8f:3b:11:67:86:0c:29:cd:d3:6a:10:b7:b3:6b:aa:2e:52: 18:37:99:e8:c0:c8:e6:4a:cd:fd:98:8c:59:f2:be:44:cf:bb: 3a:0d:25:11:40:53:78:98:c8:c7:c3:c9:f6:6a:fd:a8:8d:0e: 66:0e:c9:12:0a:42:9c:ce:2c:df:ff:dc:cc:57:0d:e1:07:5e: 74:e2:72:3b:9d:2a:6d:ab:89:92:25:59:13:1c:15:c4:d5:b1: 11:85:90:49:11:03:b2:f4:01:d8:9a:f1:f8:dd:5e:e9:ca:fc: 2b:67:df:54:7d:27:eb:52:58:bc:d1:b4:15:a0:e7:c4:47:1a: 88:fb:57:d3:10:36:19:a5:b6:00:11:88:16:a9:e4:f5:ff:8d: 87:01:e2:8f:a7:0c:25:bc:2d:3b:26:84:16:ac:48:d2:87:6f: 3c:1b:9f:91:c9:83:42:a6:4b:70:fd:ff:1e:4c:80:e9:38:37: 85:3c:b6:18:18:2f:aa:ed:cc:ec:0d:17:a0:21:11:41:0e:70: 3b:53:23:79 -----BEGIN CERTIFICATE----- MIIEvzCCA6egAwIBAgIUdLQmf5Q98VSk7hsN+bduFUO/wZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh M2U3Mzk4ZjAeFw0yNTEyMDIxMzQyMDdaFw0yNjEyMDExMzQ3MDdaMDMxMTAvBgNV BAMTKEE5MzNFODg2MTI3MDk4MDZFRDBBQ0ZERTUzOEEyMjg5NkVCNjBGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcMGVMHPBUIiaXYinKN9ALw2xM vL5n9rljVu7mVQlunE5bwQVTNulshvrB/VE85YgprGM+Og9+cIYHhyVgmdY9dt1H BfkBQ9qgMvKhTbEvbfdqsKNTguOqo6cMXCNYnWSREXTTpzJWH7qMctb2mdRiNA08 R/F10nmo6b6r3c03L4dU1Q5ZzXa0Q4fyDyFbWKz36sODYtl/mJueBE6kqNjscka3 mbC9HlmjezNjf0CHbKSN63sH4151BRMdpcOIhf28i4mavg8iQi8WVb7V/rfF19XM f8/VS/Pz+9f9JBc3+H9FrI+l9GvO91SoUke7gWzx9XpoJenXmVT2+L5B65qNAgMB AAGjggHJMIIBxTAdBgNVHQ4EFgQUqTPohhJwmAbtCs/eU4oiiW62D4wwHwYDVR0j BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0 REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt Q0EvNS9BUzIwNDUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC AQEANwgnVRhdGJpFcFBGcl4kF/GknWEh65TtRdKTaJ//xmurz2v5Agbxq6sWGL2A EsWB26MZwR5sKI87EWeGDCnN02oQt7Nrqi5SGDeZ6MDI5krN/ZiMWfK+RM+7Og0l EUBTeJjIx8PJ9mr9qI0OZg7JEgpCnM4s3//czFcN4QdedOJyO50qbauJkiVZExwV xNWxEYWQSREDsvQB2Jrx+N1e6cr8K2ffVH0n61JYvNG0FaDnxEcaiPtX0xA2GaW2 ABGIFqnk9f+NhwHij6cMJbwtOyaEFqxI0odvPBufkcmDQqZLcP3/HkyA6Tg3hTy2 GBgvqu3M7A0XoCERQQ5wO1MjeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:52:02 2025 by rpki-client