This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS151673.roa File: AS151673.roa (raw, json) Hash identifier: 4/4YRnWesuO85eSAdE5PXyb1njltsByWxuDSAXk4i3s= Subject key identifier: 11:31:D9:9D:70:79:E9:A7:EF:AF:5E:91:1F:45:97:68:82:0F:EA:4B Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Certificate serial: 2B40FE4FFDF2EE1F73C0634C4090262F6972E4E3 Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS151673.roa Signing time: Sat 20 Dec 2025 10:08:18 +0000 ROA not before: Sat 20 Dec 2025 10:03:18 +0000 ROA not after: Sat 19 Dec 2026 10:08:18 +0000 asID: 151673 IP address blocks: 2a0f:9400:6110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:40:fe:4f:fd:f2:ee:1f:73:c0:63:4c:40:90:26:2f:69:72:e4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Validity Not Before: Dec 20 10:03:18 2025 GMT Not After : Dec 19 10:08:18 2026 GMT Subject: CN=1131D99D7079E9A7EFAF5E911F459768820FEA4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:f7:8c:92:fd:ed:8c:db:ab:e8:b3:bd:51: 41:37:05:1d:95:86:a4:0e:2d:f4:fc:7c:bf:8a:65: 7d:3f:c9:c9:1e:24:53:dc:2d:11:9a:45:16:e3:c8: 53:12:ce:d9:de:7c:c2:10:dd:52:c8:a5:3c:04:04: 9f:a6:1e:7e:ea:e3:37:9d:de:3b:62:d1:8d:6a:a4: 4d:19:e2:59:3e:e1:fc:73:77:20:53:76:b1:be:c0: 9b:38:e3:68:ea:fe:0f:cb:9b:05:a5:d1:2f:87:ec: 36:db:ad:e6:78:7d:52:3c:d1:3d:8d:80:15:7e:3a: 53:a2:73:a2:61:3c:ec:92:38:50:3e:90:e1:21:07: f0:68:39:32:dd:2b:6f:02:c7:a4:6e:16:7d:7a:a9: 1c:5e:98:f3:6e:1a:9f:c5:57:bf:0f:99:d5:30:27: 4d:0e:52:76:54:19:18:0f:84:db:ba:f8:61:f9:75: 65:47:ec:aa:29:8c:30:5d:72:2d:06:7a:1b:e2:8c: e8:d4:14:d2:58:38:ec:ef:75:b0:b7:05:54:07:40: eb:00:77:3c:ed:c7:36:f1:08:cd:28:d5:f7:68:79: d7:59:ba:80:e5:50:26:3f:ce:26:13:4b:9a:43:c0: d6:f3:30:a6:6e:24:c3:f6:af:5f:9c:72:45:81:8d: 46:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:31:D9:9D:70:79:E9:A7:EF:AF:5E:91:1F:45:97:68:82:0F:EA:4B X509v3 Authority Key Identifier: keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS151673.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9400:6110::/48 Signature Algorithm: sha256WithRSAEncryption 1e:ea:6e:b5:ac:d1:cf:5e:eb:15:f2:0d:06:8e:83:15:5b:e7: 51:7b:6b:81:5d:d6:ad:11:87:14:c2:bc:99:9e:c3:41:b2:30: b7:b0:23:96:4b:47:a8:1e:d9:3c:f4:18:85:2f:5a:cb:40:ec: 85:54:1c:49:24:4e:7b:c8:07:71:48:b8:43:16:6f:a5:99:d8: a5:eb:d8:c1:2a:04:1a:42:5b:d3:13:31:b9:d8:04:ba:26:33: de:ce:90:08:21:6e:50:72:a0:4c:50:0b:c2:b3:7b:30:bf:dc: d5:54:0c:43:31:40:dd:15:fa:2d:42:73:ac:07:f4:8f:a7:35: 5f:89:77:e7:ea:65:81:cb:e6:3c:43:d7:2f:5c:e1:f2:d5:31: 01:54:cf:fa:56:b7:68:14:58:0c:00:1e:c5:23:ee:c5:ca:dc: 24:94:92:92:11:25:96:a2:0d:34:51:a8:35:9c:05:8b:b1:48: 9a:14:c9:b0:f1:6c:98:8a:1c:31:e9:ac:05:cb:5c:87:0e:8d: 4c:0a:95:40:6e:68:ca:0b:ff:dd:c7:4e:cb:4b:56:f1:fe:ab: 97:d2:1a:4d:c1:51:ca:60:3c:28:40:36:6f:b7:d5:30:5b:0c: 46:52:17:00:47:df:fe:b0:ee:2b:1f:41:33:e8:83:4d:da:1c: 42:43:a0:d7 -----BEGIN CERTIFICATE----- MIIEvzCCA6egAwIBAgIUK0D+T/3y7h9zwGNMQJAmL2ly5OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh M2U3Mzk4ZjAeFw0yNTEyMjAxMDAzMThaFw0yNjEyMTkxMDA4MThaMDMxMTAvBgNV BAMTKDExMzFEOTlENzA3OUU5QTdFRkFGNUU5MTFGNDU5NzY4ODIwRkVBNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvTveMkv3tjNur6LO9UUE3BR2V hqQOLfT8fL+KZX0/yckeJFPcLRGaRRbjyFMSztnefMIQ3VLIpTwEBJ+mHn7q4zed 3jti0Y1qpE0Z4lk+4fxzdyBTdrG+wJs442jq/g/LmwWl0S+H7DbbreZ4fVI80T2N gBV+OlOic6JhPOySOFA+kOEhB/BoOTLdK28Cx6RuFn16qRxemPNuGp/FV78PmdUw J00OUnZUGRgPhNu6+GH5dWVH7KopjDBdci0GehvijOjUFNJYOOzvdbC3BVQHQOsA dzztxzbxCM0o1fdoeddZuoDlUCY/ziYTS5pDwNbzMKZuJMP2r1+cckWBjUZRAgMB AAGjggHJMIIBxTAdBgNVHQ4EFgQUETHZnXB56afvr16RH0WXaIIP6kswHwYDVR0j BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0 REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt Q0EvNS9BUzE1MTY3My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC AQEAHuputazRz17rFfINBo6DFVvnUXtrgV3WrRGHFMK8mZ7DQbIwt7AjlktHqB7Z PPQYhS9ay0DshVQcSSROe8gHcUi4QxZvpZnYpevYwSoEGkJb0xMxudgEuiYz3s6Q CCFuUHKgTFALwrN7ML/c1VQMQzFA3RX6LUJzrAf0j6c1X4l35+plgcvmPEPXL1zh 8tUxAVTP+la3aBRYDAAexSPuxcrcJJSSkhEllqINNFGoNZwFi7FImhTJsPFsmIoc MemsBctchw6NTAqVQG5oygv/3cdOy0tW8f6rl9IaTcFRymA8KEA2b7fVMFsMRlIX AEff/rDuKx9BM+iDTdocQkOg1w== -----END CERTIFICATE-----Generated at Tue Dec 23 08:50:18 2025 by rpki-client