This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214933.roa File: AS214933.roa (raw, json) Hash identifier: Ri0qrUl5Lee3u+miQ+Eu4sbPOAcXhAc8Wh0rpZUqR8o= Subject key identifier: 0D:CA:E3:A0:2C:95:11:89:DE:47:3D:BD:C2:F4:18:F4:33:0C:91:CE Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Certificate serial: 36666CCD7762B52B182A1D177EB4FF4B1AEE6928 Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214933.roa Signing time: Tue 02 Dec 2025 13:46:57 +0000 ROA not before: Tue 02 Dec 2025 13:41:57 +0000 ROA not after: Tue 01 Dec 2026 13:46:57 +0000 asID: 214933 IP address blocks: 2a0f:9400:6110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:66:6c:cd:77:62:b5:2b:18:2a:1d:17:7e:b4:ff:4b:1a:ee:69:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Validity Not Before: Dec 2 13:41:57 2025 GMT Not After : Dec 1 13:46:57 2026 GMT Subject: CN=0DCAE3A02C951189DE473DBDC2F418F4330C91CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:24:6d:ad:ca:08:19:d6:32:a2:db:83:2a:97: 67:2a:4f:7b:c7:8f:32:16:09:cb:39:b3:8e:9f:49: 7b:72:ff:8e:40:db:e9:0d:85:64:13:14:b3:4a:44: 73:7a:a1:ac:17:85:3c:1b:15:cb:d8:15:c6:03:79: fa:c9:c0:73:54:80:a8:20:5b:3d:9d:0e:8b:82:e0: 01:1b:e3:1c:36:b2:17:31:3e:1d:1e:bd:1d:50:de: 24:e2:6d:ec:b7:93:2e:2f:3d:a2:75:7c:5e:a7:b6: 93:ec:5e:03:c6:57:3b:2f:6b:99:25:21:0a:00:ad: 9b:2b:25:d4:33:f5:6a:be:c6:ad:d5:31:1b:40:05: 2e:7d:d3:fe:f9:da:a4:5a:ea:fb:ed:e0:3f:b0:c8: 55:d3:16:1a:bb:d9:6e:5a:13:a5:c6:f7:c7:a3:15: f1:af:8f:af:59:99:d4:a0:1d:2b:1d:12:1e:47:dd: dc:0e:03:9a:b3:09:68:2a:86:97:28:d0:d4:8f:a0: cc:91:ee:90:97:3b:61:5e:15:01:19:a8:c4:4b:e7: 2a:57:42:a5:82:bb:24:fa:44:c8:ea:bc:bc:6b:c7: 33:22:35:75:ae:0a:df:9d:d0:a3:07:39:dd:4a:5c: 71:78:3e:eb:f2:79:6d:f2:90:e7:55:f8:d3:7e:52: c6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CA:E3:A0:2C:95:11:89:DE:47:3D:BD:C2:F4:18:F4:33:0C:91:CE X509v3 Authority Key Identifier: keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9400:6110::/48 Signature Algorithm: sha256WithRSAEncryption 9e:ca:e4:7e:7b:32:cd:12:49:ca:57:d6:62:42:d6:ec:f6:57: ce:a7:e7:7f:c2:d6:6b:17:bc:af:c3:69:d6:b1:95:e6:d2:8c: db:12:a8:f8:e2:9a:5f:f6:27:90:17:e9:db:6c:b2:33:12:02: a8:0b:ee:4e:68:8c:45:6b:61:87:51:44:ca:06:e8:45:63:91: f1:e8:51:47:16:2f:54:6d:e4:f8:a9:41:98:3b:8c:58:d1:3f: ec:a8:63:bd:14:21:af:2c:95:ea:9d:5d:fc:1c:a3:e9:a9:8e: 95:de:14:9e:b2:6b:b7:9f:c7:7b:ee:9c:6d:53:36:d7:11:08: fa:8d:0c:98:1f:ca:6e:4b:8c:31:e5:87:68:07:5f:7a:b8:fb: d9:84:3c:d8:93:55:31:ea:d2:6d:6c:99:d1:ce:11:e1:43:40: 61:7e:de:8d:4f:b1:0c:09:a2:03:dc:f4:8a:ea:ad:6c:7a:88: 00:11:5b:5e:87:81:b7:c3:8f:c2:6e:33:75:1c:be:bb:bf:22: 41:84:5d:3b:83:a6:64:b0:93:b9:d2:a5:1d:37:77:2f:16:ad: e3:08:6a:ab:fa:88:1a:ea:41:74:d8:ec:9f:a6:c5:c8:b5:05: c9:f3:bd:55:bd:b4:b8:62:51:01:50:04:de:c3:1e:e3:af:af: ba:b6:9d:c4 -----BEGIN CERTIFICATE----- MIIEvzCCA6egAwIBAgIUNmZszXditSsYKh0XfrT/SxruaSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh M2U3Mzk4ZjAeFw0yNTEyMDIxMzQxNTdaFw0yNjEyMDExMzQ2NTdaMDMxMTAvBgNV BAMTKDBEQ0FFM0EwMkM5NTExODlERTQ3M0RCREMyRjQxOEY0MzMwQzkxQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJG2tyggZ1jKi24Mql2cqT3vH jzIWCcs5s46fSXty/45A2+kNhWQTFLNKRHN6oawXhTwbFcvYFcYDefrJwHNUgKgg Wz2dDouC4AEb4xw2shcxPh0evR1Q3iTibey3ky4vPaJ1fF6ntpPsXgPGVzsva5kl IQoArZsrJdQz9Wq+xq3VMRtABS590/752qRa6vvt4D+wyFXTFhq72W5aE6XG98ej FfGvj69ZmdSgHSsdEh5H3dwOA5qzCWgqhpco0NSPoMyR7pCXO2FeFQEZqMRL5ypX QqWCuyT6RMjqvLxrxzMiNXWuCt+d0KMHOd1KXHF4PuvyeW3ykOdV+NN+Usa/AgMB AAGjggHJMIIBxTAdBgNVHQ4EFgQUDcrjoCyVEYneRz29wvQY9DMMkc4wHwYDVR0j BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0 REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt Q0EvNS9BUzIxNDkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC AQEAnsrkfnsyzRJJylfWYkLW7PZXzqfnf8LWaxe8r8Np1rGV5tKM2xKo+OKaX/Yn kBfp22yyMxICqAvuTmiMRWthh1FEygboRWOR8ehRRxYvVG3k+KlBmDuMWNE/7Khj vRQhryyV6p1d/Byj6amOld4UnrJrt5/He+6cbVM21xEI+o0MmB/KbkuMMeWHaAdf erj72YQ82JNVMerSbWyZ0c4R4UNAYX7ejU+xDAmiA9z0iuqtbHqIABFbXoeBt8OP wm4zdRy+u78iQYRdO4OmZLCTudKlHTd3Lxat4whqq/qIGupBdNjsn6bFyLUFyfO9 Vb20uGJRAVAE3sMe46+vuradxA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:45:50 2025 by rpki-client