This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199310.roa
File: AS199310.roa (raw, json)
Hash identifier: HWkS89g9z62HAQ+IWB0m0bT3pBxxrg79lbgEDNz5NUI=
Subject key identifier: 30:5F:22:DD:12:EC:48:4F:20:2B:8A:83:DA:1B:00:41:90:8F:2B:48
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7641D63F910A49EDD73392BA58FCDD02407DEB11
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199310.roa
Signing time: Sat 20 Dec 2025 07:02:38 +0000
ROA not before: Sat 20 Dec 2025 06:57:38 +0000
ROA not after: Sat 19 Dec 2026 07:02:38 +0000
asID: 199310
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 17:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:41:d6:3f:91:0a:49:ed:d7:33:92:ba:58:fc:dd:02:40:7d:eb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Dec 20 06:57:38 2025 GMT
Not After : Dec 19 07:02:38 2026 GMT
Subject: CN=305F22DD12EC484F202B8A83DA1B0041908F2B48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:1b:c6:b4:c8:2f:fd:e1:b2:7a:90:8d:77:
6b:fc:9d:52:31:eb:71:f8:04:74:25:4b:1a:32:9d:
ca:06:61:5d:69:e9:0f:6d:ec:64:27:1e:25:ab:1f:
7e:9f:a2:01:51:17:95:86:f4:b2:43:a9:41:af:b8:
17:7c:20:0d:63:b1:26:d0:b5:05:88:fc:23:47:18:
76:30:c8:9a:68:1e:48:bd:2c:c9:93:7a:8f:df:ef:
87:79:29:33:26:a5:ee:e8:8a:25:95:02:33:b5:17:
d7:40:b4:ba:d5:8b:04:57:b4:42:09:3d:ba:5a:13:
d2:b7:74:a1:1a:b6:b1:f6:6e:5a:7e:a5:f2:6a:43:
bc:d5:78:6a:5c:19:9d:c9:a3:6b:7b:5b:bd:e0:04:
fa:17:14:d4:31:c6:03:08:4a:29:0b:41:09:3f:00:
17:4b:29:6b:6d:4b:b3:56:28:d1:6c:ab:ab:b0:ac:
85:bb:89:33:cc:ff:6a:e4:e5:02:08:02:cc:6b:69:
67:8f:ee:3c:7f:e2:38:7e:94:54:14:c4:5a:b0:03:
71:e6:11:32:45:37:6c:6a:e4:eb:d3:01:e7:9f:ba:
8b:46:5d:4c:ad:fb:32:f6:cd:37:73:68:52:54:39:
02:0f:c4:47:3b:59:20:3c:35:75:eb:fd:a2:24:ae:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5F:22:DD:12:EC:48:4F:20:2B:8A:83:DA:1B:00:41:90:8F:2B:48
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199310.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
21:b6:4e:ed:53:f2:59:92:97:fd:1d:99:d4:af:4a:1b:19:a6:
8c:41:f2:52:55:0f:ce:ff:10:d4:2a:fe:a1:c5:d1:4d:57:71:
53:0b:64:88:7f:a6:40:cb:4f:df:d6:03:b4:6d:17:28:05:9a:
0a:f4:df:15:0a:c5:a6:d5:4e:e5:b8:8a:98:e1:77:de:a6:20:
2e:6c:1e:4b:7b:d6:67:9b:39:8d:d4:fc:4d:93:a5:2f:8c:13:
d4:58:1c:46:cd:9a:8c:ae:fd:e9:f0:dc:ef:76:a7:73:fa:2c:
7b:3f:16:3e:d8:54:bd:4b:ae:8d:c0:63:80:e9:25:3d:c1:81:
86:bc:1a:8d:65:7f:e0:83:04:0d:30:bf:23:37:89:a6:5b:b2:
e3:41:1d:d2:3f:cb:b7:dd:28:dd:e9:55:0e:44:6d:a0:15:f5:
99:d3:55:56:b9:f8:1b:2a:08:89:db:e8:af:f9:0e:6e:0f:27:
69:d8:76:75:93:17:c0:6f:45:2a:f2:de:48:a4:62:1d:de:90:
0b:e6:78:4b:a0:6f:e5:43:24:d8:d3:48:45:7f:b5:70:ca:9a:
2f:79:b9:24:64:91:91:ad:9a:63:11:ff:0f:5b:27:f8:44:9d:
78:9a:5a:53:8f:81:1a:72:f1:5f:b0:e4:84:35:ba:e7:86:7a:
8c:b4:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:50:20 2025 by rpki-client