This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199310.roa
File:                     AS199310.roa (raw, json)
Hash identifier:          HWkS89g9z62HAQ+IWB0m0bT3pBxxrg79lbgEDNz5NUI=
Subject key identifier:   30:5F:22:DD:12:EC:48:4F:20:2B:8A:83:DA:1B:00:41:90:8F:2B:48
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       7641D63F910A49EDD73392BA58FCDD02407DEB11
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199310.roa
Signing time:             Sat 20 Dec 2025 07:02:38 +0000
ROA not before:           Sat 20 Dec 2025 06:57:38 +0000
ROA not after:            Sat 19 Dec 2026 07:02:38 +0000
asID:                     199310
IP address blocks:        2a0f:9400:6110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 17:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:41:d6:3f:91:0a:49:ed:d7:33:92:ba:58:fc:dd:02:40:7d:eb:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Dec 20 06:57:38 2025 GMT
            Not After : Dec 19 07:02:38 2026 GMT
        Subject: CN=305F22DD12EC484F202B8A83DA1B0041908F2B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:1b:c6:b4:c8:2f:fd:e1:b2:7a:90:8d:77:
                    6b:fc:9d:52:31:eb:71:f8:04:74:25:4b:1a:32:9d:
                    ca:06:61:5d:69:e9:0f:6d:ec:64:27:1e:25:ab:1f:
                    7e:9f:a2:01:51:17:95:86:f4:b2:43:a9:41:af:b8:
                    17:7c:20:0d:63:b1:26:d0:b5:05:88:fc:23:47:18:
                    76:30:c8:9a:68:1e:48:bd:2c:c9:93:7a:8f:df:ef:
                    87:79:29:33:26:a5:ee:e8:8a:25:95:02:33:b5:17:
                    d7:40:b4:ba:d5:8b:04:57:b4:42:09:3d:ba:5a:13:
                    d2:b7:74:a1:1a:b6:b1:f6:6e:5a:7e:a5:f2:6a:43:
                    bc:d5:78:6a:5c:19:9d:c9:a3:6b:7b:5b:bd:e0:04:
                    fa:17:14:d4:31:c6:03:08:4a:29:0b:41:09:3f:00:
                    17:4b:29:6b:6d:4b:b3:56:28:d1:6c:ab:ab:b0:ac:
                    85:bb:89:33:cc:ff:6a:e4:e5:02:08:02:cc:6b:69:
                    67:8f:ee:3c:7f:e2:38:7e:94:54:14:c4:5a:b0:03:
                    71:e6:11:32:45:37:6c:6a:e4:eb:d3:01:e7:9f:ba:
                    8b:46:5d:4c:ad:fb:32:f6:cd:37:73:68:52:54:39:
                    02:0f:c4:47:3b:59:20:3c:35:75:eb:fd:a2:24:ae:
                    2d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5F:22:DD:12:EC:48:4F:20:2B:8A:83:DA:1B:00:41:90:8F:2B:48
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199310.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:6110::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:b6:4e:ed:53:f2:59:92:97:fd:1d:99:d4:af:4a:1b:19:a6:
         8c:41:f2:52:55:0f:ce:ff:10:d4:2a:fe:a1:c5:d1:4d:57:71:
         53:0b:64:88:7f:a6:40:cb:4f:df:d6:03:b4:6d:17:28:05:9a:
         0a:f4:df:15:0a:c5:a6:d5:4e:e5:b8:8a:98:e1:77:de:a6:20:
         2e:6c:1e:4b:7b:d6:67:9b:39:8d:d4:fc:4d:93:a5:2f:8c:13:
         d4:58:1c:46:cd:9a:8c:ae:fd:e9:f0:dc:ef:76:a7:73:fa:2c:
         7b:3f:16:3e:d8:54:bd:4b:ae:8d:c0:63:80:e9:25:3d:c1:81:
         86:bc:1a:8d:65:7f:e0:83:04:0d:30:bf:23:37:89:a6:5b:b2:
         e3:41:1d:d2:3f:cb:b7:dd:28:dd:e9:55:0e:44:6d:a0:15:f5:
         99:d3:55:56:b9:f8:1b:2a:08:89:db:e8:af:f9:0e:6e:0f:27:
         69:d8:76:75:93:17:c0:6f:45:2a:f2:de:48:a4:62:1d:de:90:
         0b:e6:78:4b:a0:6f:e5:43:24:d8:d3:48:45:7f:b5:70:ca:9a:
         2f:79:b9:24:64:91:91:ad:9a:63:11:ff:0f:5b:27:f8:44:9d:
         78:9a:5a:53:8f:81:1a:72:f1:5f:b0:e4:84:35:ba:e7:86:7a:
         8c:b4:ac:de
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUdkHWP5EKSe3XM5K6WPzdAkB96xEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTEyMjAwNjU3MzhaFw0yNjEyMTkwNzAyMzhaMDMxMTAvBgNV
BAMTKDMwNUYyMkREMTJFQzQ4NEYyMDJCOEE4M0RBMUIwMDQxOTA4RjJCNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/hvGtMgv/eGyepCNd2v8nVIx
63H4BHQlSxoyncoGYV1p6Q9t7GQnHiWrH36fogFRF5WG9LJDqUGvuBd8IA1jsSbQ
tQWI/CNHGHYwyJpoHki9LMmTeo/f74d5KTMmpe7oiiWVAjO1F9dAtLrViwRXtEIJ
PbpaE9K3dKEatrH2blp+pfJqQ7zVeGpcGZ3Jo2t7W73gBPoXFNQxxgMISikLQQk/
ABdLKWttS7NWKNFsq6uwrIW7iTPM/2rk5QIIAsxraWeP7jx/4jh+lFQUxFqwA3Hm
ETJFN2xq5OvTAeefuotGXUyt+zL2zTdzaFJUOQIPxEc7WSA8NXXr/aIkri39AgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUMF8i3RLsSE8gK4qD2hsAQZCPK0gwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzE5OTMxMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC
AQEAIbZO7VPyWZKX/R2Z1K9KGxmmjEHyUlUPzv8Q1Cr+ocXRTVdxUwtkiH+mQMtP
39YDtG0XKAWaCvTfFQrFptVO5biKmOF33qYgLmweS3vWZ5s5jdT8TZOlL4wT1Fgc
Rs2ajK796fDc73anc/osez8WPthUvUuujcBjgOklPcGBhrwajWV/4IMEDTC/IzeJ
pluy40Ed0j/Lt90o3elVDkRtoBX1mdNVVrn4GyoIidvor/kObg8nadh2dZMXwG9F
KvLeSKRiHd6QC+Z4S6Bv5UMk2NNIRX+1cMqaL3m5JGSRka2aYxH/D1sn+ESdeJpa
U4+BGnLxX7DkhDW654Z6jLSs3g==
-----END CERTIFICATE-----
Generated at Tue Dec 23 08:50:20 2025 by rpki-client