This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212532.roa File: AS212532.roa (raw, json) Hash identifier: BR7WijAMt2Ej8oDoDheTg4nBWAWJ+IPJ4A5MV1Nht60= Subject key identifier: 36:CB:D6:CF:B6:97:C0:57:7F:C3:AA:F7:FF:72:15:BD:95:3C:EF:86 Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Certificate serial: 56F00B3155C843D1B56359A20F1D00649B433027 Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212532.roa Signing time: Sat 20 Dec 2025 06:20:48 +0000 ROA not before: Sat 20 Dec 2025 06:15:48 +0000 ROA not after: Sat 19 Dec 2026 06:20:48 +0000 asID: 212532 IP address blocks: 2a0f:9400:6110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f0:0b:31:55:c8:43:d1:b5:63:59:a2:0f:1d:00:64:9b:43:30:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Validity Not Before: Dec 20 06:15:48 2025 GMT Not After : Dec 19 06:20:48 2026 GMT Subject: CN=36CBD6CFB697C0577FC3AAF7FF7215BD953CEF86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:da:1c:c3:ec:b5:c6:3b:af:bb:17:c9:0a:cc: 43:75:f0:25:27:55:24:b2:77:a3:84:72:f9:74:d4: af:0e:a5:ff:e4:3e:cb:7c:c5:77:13:de:ba:c7:11: 89:1c:c8:57:07:16:23:24:ca:f4:7e:31:72:f7:e1: df:6a:6b:95:3a:44:15:1b:fd:19:5a:4b:3e:e0:c5: 14:bc:08:19:8b:84:6d:05:96:25:f9:c2:4b:44:75: 8d:f9:3f:22:78:29:13:8b:ed:ee:97:2d:12:78:84: 32:13:d4:03:1d:68:90:02:06:e3:f4:7e:e5:20:75: 7d:20:a9:75:97:4d:e7:ff:75:fc:de:14:b4:48:95: ce:4b:7f:85:b4:42:4a:92:be:94:95:5e:37:9c:1b: 13:4a:42:78:b9:d3:d9:a5:e7:3a:48:52:f2:9d:6c: 6e:84:d5:85:7d:3a:6b:1a:08:8e:57:33:6f:00:4d: 26:9e:4e:9a:61:13:83:e4:18:92:09:f3:d0:61:19: 56:cc:7c:0f:3a:6a:16:82:d1:31:13:37:9e:86:0f: be:2f:04:a2:f1:fa:1d:10:19:c1:34:2a:82:16:f9: d7:c1:c2:7e:ec:5b:c2:52:3d:f1:3d:51:ec:ad:25: ab:68:1f:f1:39:a4:a6:a2:4a:4f:9d:4c:f0:ac:85: 36:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CB:D6:CF:B6:97:C0:57:7F:C3:AA:F7:FF:72:15:BD:95:3C:EF:86 X509v3 Authority Key Identifier: keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9400:6110::/48 Signature Algorithm: sha256WithRSAEncryption a3:42:60:22:0c:fd:5c:12:e7:3c:4b:d3:52:f7:ed:8b:9c:69: 49:67:26:30:e2:7b:13:14:0b:72:e9:e9:3c:50:76:4e:35:0e: bc:d6:ba:a3:33:a7:59:7b:ef:58:e9:6b:a4:62:ac:21:34:ae: bd:b5:4d:0d:56:08:2e:a4:7f:34:53:df:ac:9a:0c:b5:ec:6a: 56:b2:51:36:f3:2a:51:aa:2a:b1:3c:5b:6e:9b:19:c3:e5:07: 0b:b9:7c:9f:a0:94:3e:54:22:91:51:12:6c:49:f9:34:6a:0e: 64:36:c4:2b:06:15:99:dc:74:07:c9:4d:bf:c3:60:d8:81:e0: 46:33:2e:32:c0:04:a7:2a:23:14:2b:a5:f8:ce:6c:e0:a6:bf: e3:ab:36:b7:4b:1d:42:b4:f5:d3:23:f9:a8:83:65:21:36:7b: 46:a5:c6:cb:df:dc:c1:13:13:9e:42:7f:c5:51:82:43:a6:6a: ac:d4:7c:f6:a0:11:50:7a:0d:a3:6e:05:82:1e:56:d5:15:ba: be:ad:41:99:c9:58:63:e6:ea:07:6c:10:11:8a:46:a6:9c:d1: 85:cb:cb:28:eb:71:ed:56:5c:fd:fd:83:38:e3:9c:7f:1c:c8: 8e:1c:97:60:8e:12:0c:a0:1b:a6:ef:3f:d2:da:ad:d5:a5:9f: f0:30:e4:87 -----BEGIN CERTIFICATE----- MIIEvzCCA6egAwIBAgIUVvALMVXIQ9G1Y1miDx0AZJtDMCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh M2U3Mzk4ZjAeFw0yNTEyMjAwNjE1NDhaFw0yNjEyMTkwNjIwNDhaMDMxMTAvBgNV BAMTKDM2Q0JENkNGQjY5N0MwNTc3RkMzQUFGN0ZGNzIxNUJEOTUzQ0VGODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi2hzD7LXGO6+7F8kKzEN18CUn VSSyd6OEcvl01K8Opf/kPst8xXcT3rrHEYkcyFcHFiMkyvR+MXL34d9qa5U6RBUb /RlaSz7gxRS8CBmLhG0FliX5wktEdY35PyJ4KROL7e6XLRJ4hDIT1AMdaJACBuP0 fuUgdX0gqXWXTef/dfzeFLRIlc5Lf4W0QkqSvpSVXjecGxNKQni509ml5zpIUvKd bG6E1YV9OmsaCI5XM28ATSaeTpphE4PkGJIJ89BhGVbMfA86ahaC0TETN56GD74v BKLx+h0QGcE0KoIW+dfBwn7sW8JSPfE9UeytJatoH/E5pKaiSk+dTPCshTbXAgMB AAGjggHJMIIBxTAdBgNVHQ4EFgQUNsvWz7aXwFd/w6r3/3IVvZU874YwHwYDVR0j BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0 REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt Q0EvNS9BUzIxMjUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC AQEAo0JgIgz9XBLnPEvTUvfti5xpSWcmMOJ7ExQLcunpPFB2TjUOvNa6ozOnWXvv WOlrpGKsITSuvbVNDVYILqR/NFPfrJoMtexqVrJRNvMqUaoqsTxbbpsZw+UHC7l8 n6CUPlQikVESbEn5NGoOZDbEKwYVmdx0B8lNv8Ng2IHgRjMuMsAEpyojFCul+M5s 4Ka/46s2t0sdQrT10yP5qINlITZ7RqXGy9/cwRMTnkJ/xVGCQ6ZqrNR89qARUHoN o24Fgh5W1RW6vq1BmclYY+bqB2wQEYpGppzRhcvLKOtx7VZc/f2DOOOcfxzIjhyX YI4SDKAbpu8/0tqt1aWf8DDkhw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:59:18 2025 by rpki-client