This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204508.roa File: AS204508.roa (raw, json) Hash identifier: 4q+jbbUQCh77WCfTvyPeZPcXSsZIWJBgGolitxmozhI= Subject key identifier: 67:4F:8A:4F:79:3B:6D:62:A0:DE:FD:6C:A2:40:69:60:68:32:2A:2D Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Certificate serial: 07D2AA36A33AD541307114EDC6A06C69F13FD44D Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204508.roa Signing time: Mon 15 Dec 2025 19:39:50 +0000 ROA not before: Mon 15 Dec 2025 19:34:50 +0000 ROA not after: Mon 14 Dec 2026 19:39:50 +0000 asID: 204508 IP address blocks: 2a0f:9400:6111::/48 maxlen: 48 2a0f:9400:611d::/48 maxlen: 48 2a0f:9400:690d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d2:aa:36:a3:3a:d5:41:30:71:14:ed:c6:a0:6c:69:f1:3f:d4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Validity Not Before: Dec 15 19:34:50 2025 GMT Not After : Dec 14 19:39:50 2026 GMT Subject: CN=674F8A4F793B6D62A0DEFD6CA240696068322A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:94:6b:a5:86:e3:00:c3:4f:77:ec:fb:3d: 85:27:dd:9f:0c:26:8b:34:cc:07:8e:2d:54:e5:28: 31:cb:50:21:67:d5:d5:b3:e5:7c:63:38:32:1e:33: 13:66:46:77:38:77:97:05:63:ed:a3:8e:1b:ba:3f: f7:8e:2a:f8:13:f9:14:d5:0f:4f:a0:d5:e8:0f:c0: c5:b7:35:2e:5e:6f:dc:9e:f4:1c:ee:ba:18:7c:ad: 2d:ab:96:cc:14:f8:5f:0b:b2:5b:8c:94:94:ef:92: 08:a9:17:9e:47:43:31:25:a7:b1:b5:31:52:f6:5f: 7c:a2:2e:ae:25:bc:4e:38:b8:3c:52:43:78:ee:0e: 7b:9c:47:a9:59:bf:89:69:e9:c1:f1:0b:58:67:b3: 44:72:cc:f3:ee:7e:a5:bb:7a:8a:6a:7e:c7:c1:f3: db:ad:2a:66:c2:33:9f:f9:2a:e7:4f:46:ce:58:74: 33:fc:f2:3a:a2:b8:13:c2:19:b7:62:1c:2b:0e:ab: 22:df:62:d1:c9:ba:9d:c3:f6:62:aa:31:a4:c4:db: da:4e:17:de:18:71:2c:cb:41:e9:ca:50:6f:af:0f: 95:57:52:0a:2c:70:7e:04:bd:71:86:45:48:9d:67: c5:fe:07:f2:7d:c1:df:57:5d:97:20:e8:ca:7a:d0: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4F:8A:4F:79:3B:6D:62:A0:DE:FD:6C:A2:40:69:60:68:32:2A:2D X509v3 Authority Key Identifier: keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS204508.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9400:6111::/48 2a0f:9400:611d::/48 2a0f:9400:690d::/48 Signature Algorithm: sha256WithRSAEncryption 44:60:22:ff:1b:3b:fe:b0:e4:89:4d:f8:5f:2b:86:b0:79:dc: b2:a6:13:da:b8:df:62:b1:4c:60:bf:f1:cc:5b:87:ec:1b:6d: b8:df:7d:4c:67:9e:89:62:84:3b:26:76:69:56:44:85:73:ce: 42:3c:b8:cd:6c:5f:b1:fe:9d:e5:c0:35:ee:13:f9:0f:3b:0e: f4:21:b5:c6:3e:66:6a:c6:e0:f4:01:e8:44:6b:76:42:7b:5d: 55:49:2c:bd:cb:24:a7:b4:3c:09:be:de:d4:80:f7:2a:5b:25: b6:74:30:ac:96:22:08:4b:80:86:c6:10:aa:97:dc:14:d1:a0: cf:86:7f:0b:46:50:8f:5a:cb:18:cc:59:be:29:6f:8d:37:8d: 42:70:23:85:65:44:32:a0:b3:4e:a3:2c:b8:66:f2:d0:d1:cb: 10:6a:a9:60:84:c4:2d:cc:47:5c:9a:c7:8f:c9:b2:8f:cc:a8: bc:00:9b:c0:fe:6b:da:f0:58:51:70:a5:17:37:17:d0:f3:70: ef:e1:f8:bd:6b:9b:2f:84:31:d7:a5:f1:2a:3a:00:0a:c9:54: 61:5c:84:2d:5f:81:c1:d2:47:2a:e9:26:44:76:de:f2:53:41: c4:78:ff:ff:d8:22:5f:d3:c7:c9:c7:fa:c3:b3:44:e1:db:76: d6:05:1b:80 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUB9KqNqM61UEwcRTtxqBsafE/1E0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh M2U3Mzk4ZjAeFw0yNTEyMTUxOTM0NTBaFw0yNjEyMTQxOTM5NTBaMDMxMTAvBgNV BAMTKDY3NEY4QTRGNzkzQjZENjJBMERFRkQ2Q0EyNDA2OTYwNjgzMjJBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIJRrpYbjAMNPd+z7PYUn3Z8M Jos0zAeOLVTlKDHLUCFn1dWz5XxjODIeMxNmRnc4d5cFY+2jjhu6P/eOKvgT+RTV D0+g1egPwMW3NS5eb9ye9Bzuuhh8rS2rlswU+F8LsluMlJTvkgipF55HQzElp7G1 MVL2X3yiLq4lvE44uDxSQ3juDnucR6lZv4lp6cHxC1hns0RyzPPufqW7eopqfsfB 89utKmbCM5/5KudPRs5YdDP88jqiuBPCGbdiHCsOqyLfYtHJup3D9mKqMaTE29pO F94YcSzLQenKUG+vD5VXUgoscH4EvXGGRUidZ8X+B/J9wd9XXZcg6Mp60JCjAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUZ0+KT3k7bWKg3v1sokBpYGgyKi0wHwYDVR0j BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0 REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt Q0EvNS9BUzIwNDUwOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0Bggr BgEFBQcBBwEB/wQlMCMwIQQCAAIwGwMHACoPlABhEQMHACoPlABhHQMHACoPlABp DTANBgkqhkiG9w0BAQsFAAOCAQEARGAi/xs7/rDkiU34XyuGsHncsqYT2rjfYrFM YL/xzFuH7BttuN99TGeeiWKEOyZ2aVZEhXPOQjy4zWxfsf6d5cA17hP5DzsO9CG1 xj5masbg9AHoRGt2QntdVUksvcskp7Q8Cb7e1ID3KlsltnQwrJYiCEuAhsYQqpfc FNGgz4Z/C0ZQj1rLGMxZvilvjTeNQnAjhWVEMqCzTqMsuGby0NHLEGqpYITELcxH XJrHj8myj8yovACbwP5r2vBYUXClFzcX0PNw7+H4vWubL4Qx16XxKjoACslUYVyE LV+BwdJHKukmRHbe8lNBxHj//9giX9PHycf6w7NE4dt21gUbgA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:09:13 2025 by rpki-client