This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213891.roa
File:                     AS213891.roa (raw, json)
Hash identifier:          49mpurxTTvEIzLSw/7IzIRyhXcT9vSg/Q+LeL2/xie8=
Subject key identifier:   D8:C3:B7:49:7A:24:2B:03:73:CA:E3:AC:4F:26:D1:CC:03:61:84:DC
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       196E00562B8E0A80D430A5F76BA429177D6A3B14
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213891.roa
Signing time:             Mon 12 Jan 2026 20:59:51 +0000
ROA not before:           Mon 12 Jan 2026 20:54:51 +0000
ROA not after:            Mon 11 Jan 2027 20:59:51 +0000
asID:                     213891
IP address blocks:        2a0f:9400:6110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6e:00:56:2b:8e:0a:80:d4:30:a5:f7:6b:a4:29:17:7d:6a:3b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Jan 12 20:54:51 2026 GMT
            Not After : Jan 11 20:59:51 2027 GMT
        Subject: CN=D8C3B7497A242B0373CAE3AC4F26D1CC036184DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:21:d4:a7:42:e9:60:0e:aa:5a:50:85:f6:
                    3d:2a:cd:5d:63:6c:f5:ab:83:e8:09:e3:e4:bd:0a:
                    39:8f:f4:e1:62:97:14:97:86:3a:8f:61:27:25:1d:
                    78:0d:3a:53:6c:58:15:4e:09:ce:58:e4:54:e7:93:
                    3e:33:9a:fa:c0:01:7b:74:6c:24:26:78:f3:a9:20:
                    95:1f:11:8d:5f:c9:76:9b:31:a6:8c:ee:c1:81:8c:
                    65:f9:5d:1c:86:81:16:15:56:79:64:c4:55:e2:f3:
                    0e:06:ea:9a:fd:cc:e6:cf:bf:aa:ca:bf:25:bd:62:
                    cb:1d:93:69:27:51:73:ee:3e:b6:ff:ea:8c:38:14:
                    b2:f0:91:08:f3:54:db:be:96:e9:ba:13:e0:9c:bd:
                    b8:97:b4:39:8c:20:18:d8:71:b8:c6:42:3d:5d:15:
                    c6:81:08:17:d7:0f:69:31:47:7e:96:50:27:47:ba:
                    22:12:96:ac:5b:ff:8f:74:d5:30:e2:75:33:d2:93:
                    cb:54:52:48:f5:a8:f7:e3:ce:f6:94:8a:60:a0:33:
                    fd:e7:3d:74:a5:c9:ed:53:c1:4e:61:09:64:89:13:
                    ce:06:93:3d:c6:7d:72:9c:ec:e4:fc:56:32:6a:6b:
                    5e:88:4d:53:86:29:5e:75:b7:50:e0:e3:26:d9:84:
                    0f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C3:B7:49:7A:24:2B:03:73:CA:E3:AC:4F:26:D1:CC:03:61:84:DC
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213891.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:6110::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:1e:ff:e8:68:c4:54:d6:ae:8c:e4:84:a4:7e:ed:77:ac:17:
         af:48:36:a1:20:50:39:7a:d4:f9:42:94:ca:96:24:45:20:e4:
         fb:8f:f9:72:1c:d0:95:c1:cc:c7:90:7e:d4:38:4b:ca:e9:97:
         75:ae:f3:53:f9:dd:2d:47:77:aa:39:7d:d3:b0:bc:71:70:3f:
         cf:ee:62:eb:01:46:a0:17:62:62:d3:a2:4a:2f:bc:2d:20:e6:
         a3:90:5b:39:01:87:a8:44:e3:de:64:12:03:7e:0e:bb:21:c4:
         f0:0c:f6:1f:9a:15:5c:bd:b0:83:98:10:9c:bf:fd:e6:0c:74:
         b0:d7:fc:6e:4b:50:2e:58:e4:5b:fd:13:3b:3d:e0:47:ca:56:
         e6:08:16:57:0f:ea:0c:25:df:75:07:5a:bb:9f:9e:fb:a9:e3:
         43:05:bc:76:9d:0e:7d:c1:6e:54:9c:20:83:6e:d8:53:26:dd:
         a9:73:98:3c:ae:b8:40:66:e1:b1:e2:e7:2d:e2:5f:6d:44:e9:
         13:24:5e:50:e2:26:eb:19:81:8f:43:28:c7:93:a6:08:90:d7:
         18:ad:ce:89:58:2e:17:21:8c:4f:b2:45:49:94:0d:5c:e3:73:
         65:8f:2b:e0:be:b2:55:8f:f9:bc:fc:af:67:d5:dd:55:a4:a4:
         06:49:ae:61
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUGW4AViuOCoDUMKX3a6QpF31qOxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNjAxMTIyMDU0NTFaFw0yNzAxMTEyMDU5NTFaMDMxMTAvBgNV
BAMTKEQ4QzNCNzQ5N0EyNDJCMDM3M0NBRTNBQzRGMjZEMUNDMDM2MTg0REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8yHUp0LpYA6qWlCF9j0qzV1j
bPWrg+gJ4+S9CjmP9OFilxSXhjqPYSclHXgNOlNsWBVOCc5Y5FTnkz4zmvrAAXt0
bCQmePOpIJUfEY1fyXabMaaM7sGBjGX5XRyGgRYVVnlkxFXi8w4G6pr9zObPv6rK
vyW9Yssdk2knUXPuPrb/6ow4FLLwkQjzVNu+lum6E+CcvbiXtDmMIBjYcbjGQj1d
FcaBCBfXD2kxR36WUCdHuiISlqxb/4901TDidTPSk8tUUkj1qPfjzvaUimCgM/3n
PXSlye1TwU5hCWSJE84Gkz3GfXKc7OT8VjJqa16ITVOGKV51t1Dg4ybZhA9tAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQU2MO3SXokKwNzyuOsTybRzANhhNwwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMzg5MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC
AQEAzB7/6GjEVNaujOSEpH7td6wXr0g2oSBQOXrU+UKUypYkRSDk+4/5chzQlcHM
x5B+1DhLyumXda7zU/ndLUd3qjl907C8cXA/z+5i6wFGoBdiYtOiSi+8LSDmo5Bb
OQGHqETj3mQSA34OuyHE8Az2H5oVXL2wg5gQnL/95gx0sNf8bktQLljkW/0TOz3g
R8pW5ggWVw/qDCXfdQdau5+e+6njQwW8dp0OfcFuVJwgg27YUybdqXOYPK64QGbh
seLnLeJfbUTpEyReUOIm6xmBj0Mox5OmCJDXGK3OiVguFyGMT7JFSZQNXONzZY8r
4L6yVY/5vPyvZ9XdVaSkBkmuYQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:03:52 2026 by rpki-client