This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213447.roa
File: AS213447.roa (raw, json)
Hash identifier: xwm0q0sJV8WqkpTpy85A7fJEH0RiVs7e6EV5jqK+Gto=
Subject key identifier: 10:90:F3:E0:BC:42:32:74:17:3D:7E:F6:27:B9:6F:8A:F1:91:8C:D2
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4F82025BB0EA80CC80D949D1785665722AFEFE37
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213447.roa
Signing time: Tue 13 Jan 2026 12:00:11 +0000
ROA not before: Tue 13 Jan 2026 11:55:11 +0000
ROA not after: Tue 12 Jan 2027 12:00:11 +0000
asID: 213447
IP address blocks: 2a0f:9400:6930::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:82:02:5b:b0:ea:80:cc:80:d9:49:d1:78:56:65:72:2a:fe:fe:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jan 13 11:55:11 2026 GMT
Not After : Jan 12 12:00:11 2027 GMT
Subject: CN=1090F3E0BC423274173D7EF627B96F8AF1918CD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:46:7f:4f:83:f2:fb:8e:a1:51:32:9c:44:
27:7a:7b:58:e8:6d:0d:a7:dc:92:17:a3:25:32:4c:
8a:2e:18:68:13:94:3e:d0:2a:07:4f:68:ec:b4:87:
23:1e:8b:a4:da:e4:17:a3:fe:dc:6d:ad:1b:d1:2a:
6b:8b:a9:15:76:bd:2c:76:ef:d3:ce:05:48:95:f3:
2f:43:73:e6:95:4d:fa:ed:af:1a:30:08:c5:dd:45:
86:d6:42:ff:b5:14:5e:e6:70:c2:1c:e1:f8:e1:40:
c4:b1:a9:64:52:4d:fb:22:7a:e3:b8:dd:ee:79:a3:
02:29:13:7f:71:5a:23:58:64:37:56:e1:96:06:fc:
45:16:e8:c5:ee:ef:ac:1f:03:1d:40:35:f2:8d:9a:
27:3a:f8:cb:82:0b:06:7f:3e:09:13:f1:39:19:f3:
eb:d1:1f:2e:81:1f:ee:08:ed:50:10:9a:08:86:c3:
1b:6f:63:3f:13:fe:d3:ad:55:d2:80:5b:bd:81:77:
74:84:c6:ca:48:ea:00:cb:67:c1:36:3c:40:75:1e:
8b:f9:bf:c2:06:7f:55:fb:a8:f2:db:85:47:0d:2d:
97:bd:4b:6a:d6:73:62:0c:b4:7d:d1:5b:3b:94:97:
dd:59:52:e3:38:11:83:50:31:9a:b6:b1:57:a5:d5:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:90:F3:E0:BC:42:32:74:17:3D:7E:F6:27:B9:6F:8A:F1:91:8C:D2
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6930::/48
Signature Algorithm: sha256WithRSAEncryption
af:ce:34:bd:ce:8d:95:d4:21:b0:66:69:46:1a:6c:60:e8:1d:
d0:e4:69:62:6d:50:43:d5:24:4d:35:7b:07:4d:ce:ff:ca:ab:
b5:3c:bb:a3:d2:37:80:0a:e6:c4:fe:95:fb:aa:b6:8b:93:15:
70:63:02:ff:81:4f:46:e9:b7:ee:23:ee:26:60:f4:5a:88:95:
c8:e0:f2:05:df:ab:79:35:ac:d9:94:4c:86:d4:d7:6c:c4:92:
d7:76:ab:c2:b3:b6:f5:01:93:78:d5:05:d3:14:3f:76:b4:1f:
6c:d7:fc:af:4d:26:18:88:a8:eb:49:35:3c:76:8d:92:bc:c0:
27:85:79:c2:ba:5d:9a:00:7b:fa:8a:f9:ae:5a:96:83:ef:c1:
e0:0b:23:54:87:86:bc:0c:db:55:f2:32:c4:ad:21:3b:2a:b8:
7d:72:65:2c:23:7a:0d:03:6b:3d:e2:de:82:76:19:bf:02:d9:
82:89:cb:f0:e2:26:38:5c:f6:e8:9c:39:05:27:b3:85:98:75:
ed:3c:82:46:89:f5:f3:ae:13:36:78:b7:6d:71:a5:1e:a4:4c:
dc:e8:c9:66:8a:05:4e:9f:4e:70:99:e4:55:7f:82:7a:6a:92:
da:1f:11:c5:1a:0a:94:a3:66:26:c8:66:e7:33:11:95:1b:ce:
80:5e:b6:68
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUT4ICW7DqgMyA2UnReFZlcir+/jcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjAxMTMxMTU1MTFaFw0yNzAxMTIxMjAwMTFaMDMxMTAvBgNV
BAMTKDEwOTBGM0UwQkM0MjMyNzQxNzNEN0VGNjI3Qjk2RjhBRjE5MThDRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7R0Z/T4Py+46hUTKcRCd6e1jo
bQ2n3JIXoyUyTIouGGgTlD7QKgdPaOy0hyMei6Ta5Bej/txtrRvRKmuLqRV2vSx2
79POBUiV8y9Dc+aVTfrtrxowCMXdRYbWQv+1FF7mcMIc4fjhQMSxqWRSTfsieuO4
3e55owIpE39xWiNYZDdW4ZYG/EUW6MXu76wfAx1ANfKNmic6+MuCCwZ/PgkT8TkZ
8+vRHy6BH+4I7VAQmgiGwxtvYz8T/tOtVdKAW72Bd3SExspI6gDLZ8E2PEB1Hov5
v8IGf1X7qPLbhUcNLZe9S2rWc2IMtH3RWzuUl91ZUuM4EYNQMZq2sVel1U+BAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUEJDz4LxCMnQXPX72J7lvivGRjNIwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMzQ0Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABpMDANBgkqhkiG9w0BAQsFAAOC
AQEAr840vc6NldQhsGZpRhpsYOgd0ORpYm1QQ9UkTTV7B03O/8qrtTy7o9I3gArm
xP6V+6q2i5MVcGMC/4FPRum37iPuJmD0WoiVyODyBd+reTWs2ZRMhtTXbMSS13ar
wrO29QGTeNUF0xQ/drQfbNf8r00mGIio60k1PHaNkrzAJ4V5wrpdmgB7+or5rlqW
g+/B4AsjVIeGvAzbVfIyxK0hOyq4fXJlLCN6DQNrPeLegnYZvwLZgonL8OImOFz2
6Jw5BSezhZh17TyCRon1864TNni3bXGlHqRM3OjJZooFTp9OcJnkVX+CemqS2h8R
xRoKlKNmJshm5zMRlRvOgF62aA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:49:39 2026 by rpki-client