This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS11721.roa File: AS11721.roa (raw, json) Hash identifier: WujiIakXccYCN7Rr5q3a8ZL2EEIAvkroE23aPAe9gQo= Subject key identifier: 20:39:56:99:B7:02:13:36:6A:EC:CA:5E:F4:3F:D3:42:2E:45:55:5F Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Certificate serial: 76F29972D726D3B0728FC2B4C12F56FE1E54A1D7 Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS11721.roa Signing time: Mon 12 Jan 2026 23:59:56 +0000 ROA not before: Mon 12 Jan 2026 23:54:56 +0000 ROA not after: Mon 11 Jan 2027 23:59:56 +0000 asID: 11721 IP address blocks: 2a0f:9400:7384::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f2:99:72:d7:26:d3:b0:72:8f:c2:b4:c1:2f:56:fe:1e:54:a1:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Validity Not Before: Jan 12 23:54:56 2026 GMT Not After : Jan 11 23:59:56 2027 GMT Subject: CN=20395699B70213366AECCA5EF43FD3422E45555F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:58:4b:b7:a7:25:29:eb:36:95:db:34:be:b2: 6c:2f:8d:78:ec:b1:df:ee:1a:b5:26:d2:be:c7:01: 7c:df:6b:21:bf:f6:5a:2b:a7:1e:42:26:0b:f5:0a: 09:fb:76:14:53:d2:68:30:f5:d5:0c:86:f8:84:74: 4b:63:31:91:26:af:6d:bc:03:e9:32:5f:b0:df:2c: cd:11:9e:7b:79:0a:ab:80:35:68:27:6b:2c:dc:23: 7a:2c:3b:bc:9e:33:9a:79:d1:9c:04:11:41:5e:4b: ca:a1:f6:fb:3f:e2:dc:5a:0c:81:5b:1f:d0:f7:f3: c1:03:be:29:13:8a:f1:6a:0f:00:9f:22:79:03:8c: 11:8f:19:61:4f:a6:ce:ad:77:fa:d9:9e:c1:e8:12: bd:4d:5a:0a:51:fd:ba:dd:61:57:35:3b:d7:cc:28: 0d:be:24:e7:19:10:03:96:36:8a:a6:3e:b6:90:a2: e1:ae:2d:06:aa:c2:b5:f6:03:f3:ae:58:07:25:77: 4f:45:e5:1b:99:c4:fe:16:60:1e:14:c4:1b:ea:83: 17:a6:0d:03:89:67:42:8f:4e:1c:8f:97:fd:b5:2c: a8:c9:3c:1c:16:1e:9c:07:2e:95:55:7e:8e:45:fb: 66:46:e8:76:a0:f1:76:d9:11:a4:ed:0b:42:97:fb: 59:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:39:56:99:B7:02:13:36:6A:EC:CA:5E:F4:3F:D3:42:2E:45:55:5F X509v3 Authority Key Identifier: keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS11721.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9400:7384::/48 Signature Algorithm: sha256WithRSAEncryption c4:20:40:49:85:93:77:36:56:00:c7:0f:21:69:eb:d2:ed:46: 2a:ed:cc:41:02:f6:00:2c:7e:e6:7e:77:c2:2e:89:c3:4e:a2: 0a:2a:a5:98:56:d9:94:3a:7d:9f:05:8e:f0:72:3a:4d:36:49: 8d:92:c6:db:58:72:44:9b:54:bc:d0:02:34:2d:aa:aa:a3:2c: 0d:33:73:eb:98:b8:a8:9b:8d:dd:c8:8d:88:72:57:38:94:80: a2:a8:93:39:e4:46:96:29:8e:6f:bd:eb:a4:41:5d:3b:9f:a7: e4:19:d7:5f:fb:8d:e3:a2:9b:87:31:5d:ad:ab:8f:2d:25:ca: 16:3a:6f:e4:b1:cd:c1:99:5d:ef:3a:8f:56:b7:e0:b4:af:89: 49:da:13:96:8c:6b:e1:8e:da:5f:83:37:9a:86:47:14:c3:e6: 43:dd:05:ce:56:35:79:fb:4f:f9:70:42:a6:c0:d9:46:e7:1b: ff:3b:14:e1:a9:4d:de:c9:8d:5d:d9:85:4c:69:2d:b9:6f:ab: 84:64:ca:27:02:3a:0a:f9:0d:89:c9:95:61:4b:7a:2c:99:82: 7d:d3:58:35:83:b8:e1:a0:b3:e4:ca:ae:a8:16:53:f6:34:3b: cc:fe:68:ae:2e:7e:9f:b8:b1:95:f8:e6:cd:b0:8b:bb:21:50: 44:f8:a6:d4 -----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIUdvKZctcm07Byj8K0wS9W/h5UodcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh M2U3Mzk4ZjAeFw0yNjAxMTIyMzU0NTZaFw0yNzAxMTEyMzU5NTZaMDMxMTAvBgNV BAMTKDIwMzk1Njk5QjcwMjEzMzY2QUVDQ0E1RUY0M0ZEMzQyMkU0NTU1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjWEu3pyUp6zaV2zS+smwvjXjs sd/uGrUm0r7HAXzfayG/9lorpx5CJgv1Cgn7dhRT0mgw9dUMhviEdEtjMZEmr228 A+kyX7DfLM0Rnnt5CquANWgnayzcI3osO7yeM5p50ZwEEUFeS8qh9vs/4txaDIFb H9D388EDvikTivFqDwCfInkDjBGPGWFPps6td/rZnsHoEr1NWgpR/brdYVc1O9fM KA2+JOcZEAOWNoqmPraQouGuLQaqwrX2A/OuWAcld09F5RuZxP4WYB4UxBvqgxem DQOJZ0KPThyPl/21LKjJPBwWHpwHLpVVfo5F+2ZG6Hag8XbZEaTtC0KX+1llAgMB AAGjggHIMIIBxDAdBgNVHQ4EFgQUIDlWmbcCEzZq7Mpe9D/TQi5FVV8wHwYDVR0j BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0 REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt Q0EvNS9BUzExNzIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+UAHOEMA0GCSqGSIb3DQEBCwUAA4IB AQDEIEBJhZN3NlYAxw8haevS7UYq7cxBAvYALH7mfnfCLonDTqIKKqWYVtmUOn2f BY7wcjpNNkmNksbbWHJEm1S80AI0LaqqoywNM3PrmLiom43dyI2Iclc4lICiqJM5 5EaWKY5vveukQV07n6fkGddf+43jopuHMV2tq48tJcoWOm/ksc3BmV3vOo9Wt+C0 r4lJ2hOWjGvhjtpfgzeahkcUw+ZD3QXOVjV5+0/5cEKmwNlG5xv/OxThqU3eyY1d 2YVMaS25b6uEZMonAjoK+Q2JyZVhS3osmYJ901g1g7jhoLPkyq6oFlP2NDvM/miu Ln6fuLGV+ObNsIu7IVBE+KbU -----END CERTIFICATE-----Generated at Wed Jan 21 03:51:17 2026 by rpki-client