This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215026.roa
File: AS215026.roa (raw, json)
Hash identifier: TC/9CriNePMyBa0LUxG+SW9wjiWQYJhEdLSjuF+zSbc=
Subject key identifier: 30:1C:6E:AC:04:93:3E:A4:17:90:6B:B6:75:06:5D:47:02:DC:6E:6E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5DB0D28DE62D5DDA4A6783055991E1A3A515EBE9
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215026.roa
Signing time: Sun 30 Nov 2025 20:09:18 +0000
ROA not before: Sun 30 Nov 2025 20:04:18 +0000
ROA not after: Sun 29 Nov 2026 20:09:18 +0000
asID: 215026
IP address blocks: 2a0f:9400:6109::/48 maxlen: 48
2a0f:9400:6118::/48 maxlen: 48
2a0f:9400:611c::/48 maxlen: 48
2a0f:9400:614f::/48 maxlen: 48
2a0f:9400:6905::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b0:d2:8d:e6:2d:5d:da:4a:67:83:05:59:91:e1:a3:a5:15:eb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 30 20:04:18 2025 GMT
Not After : Nov 29 20:09:18 2026 GMT
Subject: CN=301C6EAC04933EA417906BB675065D4702DC6E6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:15:47:a6:be:2d:a5:43:c9:68:58:15:2d:
3b:57:fb:e5:45:ec:90:83:89:52:06:0b:8b:dd:7a:
8b:aa:33:c8:e6:1d:35:64:c3:a1:b1:f7:b1:fe:a3:
02:4a:1e:87:82:2b:c9:28:2b:52:59:27:28:4f:b3:
eb:92:b3:95:11:27:95:d6:52:8a:8e:66:5c:b0:d1:
01:09:3e:23:12:7a:e4:13:21:d7:45:a2:2a:2c:ea:
51:e8:5f:0f:0c:9b:89:3e:7c:40:92:aa:40:bf:c7:
87:ee:0e:5d:91:c3:18:e2:12:c3:4e:7a:ca:53:32:
e3:8b:9c:c6:3b:bf:c4:36:b4:46:73:b4:52:2a:ef:
85:56:d3:cf:81:06:c4:05:1f:16:98:cd:ae:7b:0c:
ce:1c:1a:6f:67:82:21:04:b9:a1:34:8f:74:48:95:
69:33:18:40:8e:d2:23:69:68:5e:e4:61:02:b3:c6:
30:07:9b:7a:57:e1:96:0a:b4:38:c1:a2:52:00:7c:
32:aa:3f:db:45:74:38:9a:54:6b:b2:a8:78:66:7d:
85:2d:d2:ec:2e:e7:c1:fd:3e:62:3f:26:2a:2c:8e:
d1:a2:aa:92:17:dd:27:b6:e5:11:e9:02:0d:6a:7b:
18:d6:a8:49:c6:31:ef:6a:84:19:ab:4b:5d:6c:fe:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1C:6E:AC:04:93:3E:A4:17:90:6B:B6:75:06:5D:47:02:DC:6E:6E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215026.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6109::/48
2a0f:9400:6118::/48
2a0f:9400:611c::/48
2a0f:9400:614f::/48
2a0f:9400:6905::/48
Signature Algorithm: sha256WithRSAEncryption
35:d0:79:ed:0c:54:14:44:bb:c6:a4:dd:03:56:7e:d6:e7:97:
c5:a5:d2:66:7e:59:65:fa:02:0d:42:66:03:52:34:44:56:b6:
18:02:c2:8d:1c:a4:a0:a6:cc:24:55:02:9a:1e:04:2c:23:5b:
f8:9d:60:1c:f6:fe:c1:a1:62:1b:83:96:38:05:53:29:1a:51:
96:56:07:53:65:75:64:8d:b6:75:b2:8b:37:55:2d:38:93:b0:
b3:65:0b:67:4e:d3:41:33:b6:be:0f:e8:30:54:fa:3a:59:e7:
a4:f0:1c:f3:48:91:9f:aa:02:16:b5:9b:2f:71:9d:e3:91:cd:
5b:c0:b2:ad:55:bc:3f:4b:c8:8b:e6:78:7e:41:10:45:14:16:
ff:79:a8:9c:9a:22:6f:45:c2:08:ce:a1:e8:c8:27:a5:f0:1d:
87:fa:42:b7:88:c3:aa:8a:f7:db:74:7b:17:0c:07:e5:29:9f:
a1:e2:5b:73:ab:58:f9:32:1b:6a:ce:fe:6d:e9:2c:67:b0:77:
76:f9:93:61:d7:5e:5a:e7:7e:e8:53:c1:c4:de:ff:67:ab:89:
d3:ab:f6:12:7a:5d:bd:a8:e4:0c:3f:10:a6:6d:ea:1c:f7:80:
0e:72:c5:e7:e3:87:07:20:8e:4b:52:20:e8:2a:6f:4f:79:44:
5f:08:4c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:06:39 2025 by rpki-client