This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207317.roa
File:                     AS207317.roa (raw, json)
Hash identifier:          NdwWIG0n933o7YErKyjsbR7+dgKoKOC9Px6CdEnL5bI=
Subject key identifier:   C2:05:F6:F9:2B:90:FE:F9:4A:85:1C:3E:E1:2E:96:17:2E:76:2C:01
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       1934CA84CEE8D568A3FB3F6927B7E1F2CADB441E
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207317.roa
Signing time:             Sat 20 Dec 2025 06:20:35 +0000
ROA not before:           Sat 20 Dec 2025 06:15:35 +0000
ROA not after:            Sat 19 Dec 2026 06:20:35 +0000
asID:                     207317
IP address blocks:        2a0f:9400:6110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 17:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:34:ca:84:ce:e8:d5:68:a3:fb:3f:69:27:b7:e1:f2:ca:db:44:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Dec 20 06:15:35 2025 GMT
            Not After : Dec 19 06:20:35 2026 GMT
        Subject: CN=C205F6F92B90FEF94A851C3EE12E96172E762C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a6:90:6c:60:22:d7:4d:c7:1a:97:3d:6c:1b:
                    21:33:00:2a:cf:d3:8a:83:56:39:99:da:aa:a6:6a:
                    65:2a:f0:99:07:a5:4a:11:50:04:b8:a7:22:bb:ac:
                    68:f3:2e:08:d4:2f:4f:c8:16:e5:5a:0e:7f:d1:39:
                    5e:fd:bb:ea:c1:50:78:45:ad:b8:87:1b:04:1a:69:
                    58:5f:7b:4c:39:63:15:ea:a2:3a:08:9d:01:66:9d:
                    e4:23:d2:62:73:8d:92:c0:a1:24:6c:3f:fe:00:6d:
                    6a:f9:1c:bf:5e:78:91:72:06:a5:21:ba:45:bb:12:
                    b2:1b:8e:56:50:0d:1c:ed:f3:35:0e:51:57:ce:95:
                    74:aa:42:39:fe:78:fe:b0:28:ad:bc:fa:60:e5:a4:
                    92:af:31:37:b3:d0:9a:8c:82:3c:23:79:d1:4d:1d:
                    ba:11:ce:46:0d:9a:b7:a5:3c:24:6b:a2:64:a9:86:
                    69:85:64:87:f4:e8:ea:f7:e7:0a:29:0b:26:c4:74:
                    09:17:3a:ff:51:b6:e8:f7:f2:66:3d:92:c1:0f:c0:
                    36:dc:be:d9:7c:0b:14:49:95:6f:3d:c6:da:57:71:
                    ee:36:0d:7a:53:d0:d2:1f:64:2b:ec:e3:65:22:69:
                    43:8e:ef:89:1d:97:71:a9:ce:cc:dd:f5:e3:44:b7:
                    a4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:05:F6:F9:2B:90:FE:F9:4A:85:1C:3E:E1:2E:96:17:2E:76:2C:01
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:6110::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:61:b6:65:e8:84:e3:55:db:25:77:3e:72:cb:df:e0:7a:9c:
         9c:09:d8:bf:18:4e:88:73:0e:69:df:70:34:99:e5:ce:dd:31:
         de:8a:aa:2b:c3:92:5f:7f:ef:86:ab:e4:bf:4d:dd:22:86:61:
         d3:44:cd:c7:64:c2:71:cb:de:35:f3:f4:b9:55:0d:56:87:47:
         3f:7c:4a:88:cc:69:c0:6f:8d:52:df:5b:ca:52:77:02:92:0b:
         10:fc:25:15:15:8c:96:db:1b:97:60:50:ff:12:57:90:87:33:
         aa:42:3e:50:9a:77:73:cf:7f:76:62:7e:31:6c:74:65:30:95:
         93:2e:bf:ba:d9:83:0a:57:4f:01:a9:6f:f6:7c:39:d0:ed:1d:
         c9:06:58:73:0d:9e:42:f7:f5:2d:01:a8:09:85:02:59:cb:46:
         d3:b3:5e:7e:b9:ba:6a:15:ff:9d:cf:e4:c0:80:25:4d:de:da:
         f4:48:6c:87:8e:45:c7:88:ea:8b:73:ef:e2:4f:66:51:88:07:
         e2:4e:8a:5e:16:43:be:46:af:4f:20:3c:b4:0f:53:be:99:9c:
         09:d0:ca:b7:c9:76:1c:e3:47:74:53:fd:03:07:3a:2c:43:d6:
         59:ef:b1:da:00:12:0e:ab:1f:9d:b2:c5:63:ce:ea:a0:16:d4:
         aa:cf:2d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:50:19 2025 by rpki-client