This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213447.roa File: AS213447.roa (raw, json) Hash identifier: xwm0q0sJV8WqkpTpy85A7fJEH0RiVs7e6EV5jqK+Gto= Subject key identifier: 10:90:F3:E0:BC:42:32:74:17:3D:7E:F6:27:B9:6F:8A:F1:91:8C:D2 Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Certificate serial: 4F82025BB0EA80CC80D949D1785665722AFEFE37 Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213447.roa Signing time: Tue 13 Jan 2026 12:00:11 +0000 ROA not before: Tue 13 Jan 2026 11:55:11 +0000 ROA not after: Tue 12 Jan 2027 12:00:11 +0000 asID: 213447 IP address blocks: 2a0f:9400:6930::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:82:02:5b:b0:ea:80:cc:80:d9:49:d1:78:56:65:72:2a:fe:fe:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Validity Not Before: Jan 13 11:55:11 2026 GMT Not After : Jan 12 12:00:11 2027 GMT Subject: CN=1090F3E0BC423274173D7EF627B96F8AF1918CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:46:7f:4f:83:f2:fb:8e:a1:51:32:9c:44: 27:7a:7b:58:e8:6d:0d:a7:dc:92:17:a3:25:32:4c: 8a:2e:18:68:13:94:3e:d0:2a:07:4f:68:ec:b4:87: 23:1e:8b:a4:da:e4:17:a3:fe:dc:6d:ad:1b:d1:2a: 6b:8b:a9:15:76:bd:2c:76:ef:d3:ce:05:48:95:f3: 2f:43:73:e6:95:4d:fa:ed:af:1a:30:08:c5:dd:45: 86:d6:42:ff:b5:14:5e:e6:70:c2:1c:e1:f8:e1:40: c4:b1:a9:64:52:4d:fb:22:7a:e3:b8:dd:ee:79:a3: 02:29:13:7f:71:5a:23:58:64:37:56:e1:96:06:fc: 45:16:e8:c5:ee:ef:ac:1f:03:1d:40:35:f2:8d:9a: 27:3a:f8:cb:82:0b:06:7f:3e:09:13:f1:39:19:f3: eb:d1:1f:2e:81:1f:ee:08:ed:50:10:9a:08:86:c3: 1b:6f:63:3f:13:fe:d3:ad:55:d2:80:5b:bd:81:77: 74:84:c6:ca:48:ea:00:cb:67:c1:36:3c:40:75:1e: 8b:f9:bf:c2:06:7f:55:fb:a8:f2:db:85:47:0d:2d: 97:bd:4b:6a:d6:73:62:0c:b4:7d:d1:5b:3b:94:97: dd:59:52:e3:38:11:83:50:31:9a:b6:b1:57:a5:d5: 4f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:90:F3:E0:BC:42:32:74:17:3D:7E:F6:27:B9:6F:8A:F1:91:8C:D2 X509v3 Authority Key Identifier: keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213447.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9400:6930::/48 Signature Algorithm: sha256WithRSAEncryption af:ce:34:bd:ce:8d:95:d4:21:b0:66:69:46:1a:6c:60:e8:1d: d0:e4:69:62:6d:50:43:d5:24:4d:35:7b:07:4d:ce:ff:ca:ab: b5:3c:bb:a3:d2:37:80:0a:e6:c4:fe:95:fb:aa:b6:8b:93:15: 70:63:02:ff:81:4f:46:e9:b7:ee:23:ee:26:60:f4:5a:88:95: c8:e0:f2:05:df:ab:79:35:ac:d9:94:4c:86:d4:d7:6c:c4:92: d7:76:ab:c2:b3:b6:f5:01:93:78:d5:05:d3:14:3f:76:b4:1f: 6c:d7:fc:af:4d:26:18:88:a8:eb:49:35:3c:76:8d:92:bc:c0: 27:85:79:c2:ba:5d:9a:00:7b:fa:8a:f9:ae:5a:96:83:ef:c1: e0:0b:23:54:87:86:bc:0c:db:55:f2:32:c4:ad:21:3b:2a:b8: 7d:72:65:2c:23:7a:0d:03:6b:3d:e2:de:82:76:19:bf:02:d9: 82:89:cb:f0:e2:26:38:5c:f6:e8:9c:39:05:27:b3:85:98:75: ed:3c:82:46:89:f5:f3:ae:13:36:78:b7:6d:71:a5:1e:a4:4c: dc:e8:c9:66:8a:05:4e:9f:4e:70:99:e4:55:7f:82:7a:6a:92: da:1f:11:c5:1a:0a:94:a3:66:26:c8:66:e7:33:11:95:1b:ce: 80:5e:b6:68 -----BEGIN CERTIFICATE----- MIIEvzCCA6egAwIBAgIUT4ICW7DqgMyA2UnReFZlcir+/jcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh M2U3Mzk4ZjAeFw0yNjAxMTMxMTU1MTFaFw0yNzAxMTIxMjAwMTFaMDMxMTAvBgNV BAMTKDEwOTBGM0UwQkM0MjMyNzQxNzNEN0VGNjI3Qjk2RjhBRjE5MThDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7R0Z/T4Py+46hUTKcRCd6e1jo bQ2n3JIXoyUyTIouGGgTlD7QKgdPaOy0hyMei6Ta5Bej/txtrRvRKmuLqRV2vSx2 79POBUiV8y9Dc+aVTfrtrxowCMXdRYbWQv+1FF7mcMIc4fjhQMSxqWRSTfsieuO4 3e55owIpE39xWiNYZDdW4ZYG/EUW6MXu76wfAx1ANfKNmic6+MuCCwZ/PgkT8TkZ 8+vRHy6BH+4I7VAQmgiGwxtvYz8T/tOtVdKAW72Bd3SExspI6gDLZ8E2PEB1Hov5 v8IGf1X7qPLbhUcNLZe9S2rWc2IMtH3RWzuUl91ZUuM4EYNQMZq2sVel1U+BAgMB AAGjggHJMIIBxTAdBgNVHQ4EFgQUEJDz4LxCMnQXPX72J7lvivGRjNIwHwYDVR0j BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0 REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt Q0EvNS9BUzIxMzQ0Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABpMDANBgkqhkiG9w0BAQsFAAOC AQEAr840vc6NldQhsGZpRhpsYOgd0ORpYm1QQ9UkTTV7B03O/8qrtTy7o9I3gArm xP6V+6q2i5MVcGMC/4FPRum37iPuJmD0WoiVyODyBd+reTWs2ZRMhtTXbMSS13ar wrO29QGTeNUF0xQ/drQfbNf8r00mGIio60k1PHaNkrzAJ4V5wrpdmgB7+or5rlqW g+/B4AsjVIeGvAzbVfIyxK0hOyq4fXJlLCN6DQNrPeLegnYZvwLZgonL8OImOFz2 6Jw5BSezhZh17TyCRon1864TNni3bXGlHqRM3OjJZooFTp9OcJnkVX+CemqS2h8R xRoKlKNmJshm5zMRlRvOgF62aA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:03:52 2026 by rpki-client