This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204921.roa File: AS204921.roa (raw, json) Hash identifier: 4BOlqySGKp0EXc+MZMjlcgtXSXJcD5/lCIbBqyem07k= Subject key identifier: 13:A2:CC:06:AE:8A:A1:5F:11:F0:AB:D3:FE:07:61:29:71:B3:5A:78 Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Certificate serial: 53EFB94E72C93E7919426878A4358CC28A9E86BD Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204921.roa Signing time: Tue 02 Dec 2025 13:46:43 +0000 ROA not before: Tue 02 Dec 2025 13:41:43 +0000 ROA not after: Tue 01 Dec 2026 13:46:43 +0000 asID: 204921 IP address blocks: 2a0f:9400:6110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ef:b9:4e:72:c9:3e:79:19:42:68:78:a4:35:8c:c2:8a:9e:86:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Validity Not Before: Dec 2 13:41:43 2025 GMT Not After : Dec 1 13:46:43 2026 GMT Subject: CN=13A2CC06AE8AA15F11F0ABD3FE07612971B35A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:f7:62:bf:f6:1a:0a:a4:18:e0:d1:ad:68: d3:8d:74:ce:c5:17:de:b3:f0:8b:fa:78:8f:2e:57: 18:e5:24:76:4c:07:95:09:fd:6d:4d:34:fa:ad:ae: e6:7c:c3:88:1b:0f:59:80:20:27:6c:6b:1e:18:19: 34:e1:b7:27:a2:db:65:4b:8b:dc:1d:b7:b0:c0:c7: ea:be:b3:7a:1d:ca:d5:1f:5a:63:14:e6:d4:96:b3: ec:67:97:0f:09:05:4c:1e:d6:0f:8d:f4:66:70:5e: 3e:fb:cf:c6:69:b8:9b:e9:3a:88:57:75:f5:a5:d3: 5c:49:13:73:40:a6:b4:a9:6c:c9:da:f1:39:33:7c: 64:42:15:6f:91:b0:ea:97:2c:35:81:29:55:47:8a: 7e:40:ff:30:68:b8:d2:11:09:fa:56:a7:d1:cc:16: 3c:9e:d5:57:dd:37:2c:a8:42:7b:52:af:af:e8:cc: 6f:e3:db:d1:90:27:1b:1c:a9:93:fb:20:9b:1e:87: bc:0f:cb:98:aa:12:1d:c8:1b:dc:72:8b:b9:02:12: 2a:bd:ab:be:81:2e:8e:eb:e9:cc:e8:0f:35:8c:d7: 45:77:a0:33:68:45:dd:31:d5:27:18:c2:4d:47:ed: 30:d8:7a:ba:6b:f0:d6:81:5e:9c:6a:07:33:74:a9: c0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A2:CC:06:AE:8A:A1:5F:11:F0:AB:D3:FE:07:61:29:71:B3:5A:78 X509v3 Authority Key Identifier: keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204921.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9400:6110::/48 Signature Algorithm: sha256WithRSAEncryption 10:bf:dd:96:fa:89:46:16:cf:cf:ff:ba:06:6e:d6:65:10:24: c5:c1:9d:93:6c:77:19:5c:65:3a:3a:2f:94:8c:c5:75:10:b5: 6f:81:8d:57:e2:59:26:69:be:9a:ea:f0:12:57:cc:fc:8c:0f: 84:c9:4a:18:a2:a0:15:97:8a:e5:44:e1:22:e6:40:3f:20:9a: 9f:57:e9:cf:72:03:04:8e:ba:14:c5:c9:53:7a:5a:3d:3d:66: 66:4e:a6:23:0c:e8:ce:a8:97:1a:dc:eb:62:2e:72:5f:f1:4e: e2:cf:48:0c:11:24:e5:0a:3d:5a:f3:6d:bd:2b:6d:8f:ab:cc: 18:39:d9:77:ce:d2:22:ec:af:a3:09:9d:ea:ee:f7:7f:50:c6: db:37:03:2a:ce:cf:74:f5:33:41:88:20:99:4b:95:cd:7a:88: 11:db:da:ec:cd:d3:55:1d:f8:9b:22:6c:2d:a9:01:66:f7:13: b1:0d:0c:6e:28:17:98:ed:6a:d0:47:96:fa:85:d3:79:d6:bb: 5c:f0:37:0e:fe:c9:76:c9:61:bc:39:d3:90:d3:70:cb:f8:88: 2b:c4:d5:82:f3:d9:4a:09:ab:88:43:88:38:b8:0a:d4:5c:63: c3:8c:43:9a:c5:63:c1:7b:1b:ff:1f:95:c4:ca:71:e8:ad:41: c0:9f:c7:de -----BEGIN CERTIFICATE----- MIIEvzCCA6egAwIBAgIUU++5TnLJPnkZQmh4pDWMwoqehr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh M2U3Mzk4ZjAeFw0yNTEyMDIxMzQxNDNaFw0yNjEyMDExMzQ2NDNaMDMxMTAvBgNV BAMTKDEzQTJDQzA2QUU4QUExNUYxMUYwQUJEM0ZFMDc2MTI5NzFCMzVBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCko/div/YaCqQY4NGtaNONdM7F F96z8Iv6eI8uVxjlJHZMB5UJ/W1NNPqtruZ8w4gbD1mAICdsax4YGTThtyei22VL i9wdt7DAx+q+s3odytUfWmMU5tSWs+xnlw8JBUwe1g+N9GZwXj77z8ZpuJvpOohX dfWl01xJE3NAprSpbMna8TkzfGRCFW+RsOqXLDWBKVVHin5A/zBouNIRCfpWp9HM Fjye1VfdNyyoQntSr6/ozG/j29GQJxscqZP7IJseh7wPy5iqEh3IG9xyi7kCEiq9 q76BLo7r6czoDzWM10V3oDNoRd0x1ScYwk1H7TDYerpr8NaBXpxqBzN0qcBFAgMB AAGjggHJMIIBxTAdBgNVHQ4EFgQUE6LMBq6KoV8R8KvT/gdhKXGzWngwHwYDVR0j BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0 REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt Q0EvNS9BUzIwNDkyMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC AQEAEL/dlvqJRhbPz/+6Bm7WZRAkxcGdk2x3GVxlOjovlIzFdRC1b4GNV+JZJmm+ murwElfM/IwPhMlKGKKgFZeK5UThIuZAPyCan1fpz3IDBI66FMXJU3paPT1mZk6m IwzozqiXGtzrYi5yX/FO4s9IDBEk5Qo9WvNtvSttj6vMGDnZd87SIuyvowmd6u73 f1DG2zcDKs7PdPUzQYggmUuVzXqIEdva7M3TVR34myJsLakBZvcTsQ0MbigXmO1q 0EeW+oXTeda7XPA3Dv7JdslhvDnTkNNwy/iIK8TVgvPZSgmriEOIOLgK1Fxjw4xD msVjwXsb/x+VxMpx6K1BwJ/H3g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:48:36 2025 by rpki-client