This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa File: AS210576.roa (raw, json) Hash identifier: jJ0+ycz/uG+3i0tkeRO3wlFEiczn1MOgi3FiZgG+Mw4= Subject key identifier: 0C:44:FB:C8:47:21:21:E8:ED:21:3B:3C:53:D4:7D:C3:95:10:90:A9 Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Certificate serial: 1EE66EEB5558425FF6D6AC572C61856448D2035D Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa Signing time: Sun 04 Jan 2026 22:49:03 +0000 ROA not before: Sun 04 Jan 2026 22:44:03 +0000 ROA not after: Sun 03 Jan 2027 22:49:03 +0000 asID: 210576 IP address blocks: 2a0f:9400:7506::/48 maxlen: 48 2a0f:9400:770b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e6:6e:eb:55:58:42:5f:f6:d6:ac:57:2c:61:85:64:48:d2:03:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f Validity Not Before: Jan 4 22:44:03 2026 GMT Not After : Jan 3 22:49:03 2027 GMT Subject: CN=0C44FBC8472121E8ED213B3C53D47DC3951090A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:6e:51:9b:e1:a2:a6:2b:f8:55:5c:05:72: 3f:2e:8a:10:12:6a:bc:a9:f7:a7:3f:0a:43:f1:7f: 09:9a:ce:42:69:d1:41:36:16:46:1a:0b:6b:fa:79: e4:c9:5a:b8:a4:2a:87:02:1c:23:76:be:b1:b7:23: 8b:b1:93:a7:13:1f:eb:23:f2:d5:f0:77:e2:73:18: a8:5e:d3:6e:f6:77:b4:bb:52:8a:da:fe:80:c3:82: 5d:d7:80:df:0f:b1:9d:7f:33:0c:4c:87:05:7b:ac: 45:00:b6:1f:b6:6b:0e:27:db:33:a1:bf:53:76:79: 72:a2:2f:11:aa:d4:36:62:a1:20:4e:a0:8d:df:01: 32:89:5e:2e:8a:c3:16:0f:51:38:6d:96:a7:40:1a: 1f:62:98:0c:bc:cd:13:cd:7f:96:fe:93:b7:85:1f: 37:f7:8c:8a:c7:cd:cc:85:11:b0:49:c2:00:b2:97: 79:ea:0f:75:23:32:03:86:ea:c3:4c:15:23:31:52: fb:3e:b5:a6:65:88:9d:c9:cb:c4:fb:dd:26:96:72: 94:8c:79:7f:e7:6f:89:26:6f:af:92:ce:5f:53:23: d4:1b:a0:51:d8:c3:56:92:6b:eb:14:31:bd:80:2d: 43:91:9c:58:7d:71:c7:40:cf:f7:fc:77:e3:4c:df: 40:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:44:FB:C8:47:21:21:E8:ED:21:3B:3C:53:D4:7D:C3:95:10:90:A9 X509v3 Authority Key Identifier: keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9400:7506::/48 2a0f:9400:770b::/48 Signature Algorithm: sha256WithRSAEncryption 98:ad:34:bd:3a:f7:20:29:40:ae:91:6c:b3:4c:aa:45:ea:81: 65:ab:40:ad:8c:1e:fb:6d:7f:79:48:2c:c6:b4:d8:82:df:6e: 66:1b:2d:bb:1a:6f:bf:32:b2:c5:94:50:2a:3c:62:8a:81:7b: 41:f6:cc:4b:56:16:0a:42:20:2e:a4:6a:36:62:28:ce:20:dd: 54:7c:54:9a:d4:1c:0b:d2:c6:15:2f:8c:9c:2f:e0:4c:8c:e5: b9:27:6a:6c:d7:60:4e:74:95:ee:f5:d4:d1:aa:14:88:da:ee: a2:e1:5d:60:72:e4:aa:9e:b1:78:79:83:27:e7:96:6a:33:a2: d1:15:24:67:ba:9f:89:70:ef:55:ba:b3:5f:d2:87:0f:82:83: be:18:8e:01:87:a6:58:9f:28:35:94:35:91:7f:0b:e0:5e:ab: a8:08:6f:b2:37:dd:73:05:b7:e7:91:7e:ad:2a:70:a4:01:91: 8a:dd:d4:01:f4:4a:26:8e:3c:cb:ca:f0:2f:ce:a5:59:4c:3a: 42:68:69:73:0c:7e:66:26:a7:21:77:17:47:90:18:25:38:47: 46:73:e7:b5:92:74:99:ab:38:a7:28:21:ca:eb:63:f1:62:3c: d3:18:e6:dd:58:ab:0d:a2:28:1d:1d:d7:bf:96:28:4d:19:d4: 41:fe:cb:49 -----BEGIN CERTIFICATE----- MIIEyDCCA7CgAwIBAgIUHuZu61VYQl/21qxXLGGFZEjSA10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh M2U3Mzk4ZjAeFw0yNjAxMDQyMjQ0MDNaFw0yNzAxMDMyMjQ5MDNaMDMxMTAvBgNV BAMTKDBDNDRGQkM4NDcyMTIxRThFRDIxM0IzQzUzRDQ3REMzOTUxMDkwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4PG5Rm+Gipiv4VVwFcj8uihAS aryp96c/CkPxfwmazkJp0UE2FkYaC2v6eeTJWrikKocCHCN2vrG3I4uxk6cTH+sj 8tXwd+JzGKhe0272d7S7Uora/oDDgl3XgN8PsZ1/MwxMhwV7rEUAth+2aw4n2zOh v1N2eXKiLxGq1DZioSBOoI3fATKJXi6KwxYPUThtlqdAGh9imAy8zRPNf5b+k7eF Hzf3jIrHzcyFEbBJwgCyl3nqD3UjMgOG6sNMFSMxUvs+taZliJ3Jy8T73SaWcpSM eX/nb4kmb6+Szl9TI9QboFHYw1aSa+sUMb2ALUORnFh9ccdAz/f8d+NM30CZAgMB AAGjggHSMIIBzjAdBgNVHQ4EFgQUDET7yEchIejtITs8U9R9w5UQkKkwHwYDVR0j BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0 REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt Q0EvNS9BUzIxMDU3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggr BgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoPlAB1BgMHACoPlAB3CzANBgkqhkiG 9w0BAQsFAAOCAQEAmK00vTr3IClArpFss0yqReqBZatArYwe+21/eUgsxrTYgt9u ZhstuxpvvzKyxZRQKjxiioF7QfbMS1YWCkIgLqRqNmIoziDdVHxUmtQcC9LGFS+M nC/gTIzluSdqbNdgTnSV7vXU0aoUiNruouFdYHLkqp6xeHmDJ+eWajOi0RUkZ7qf iXDvVbqzX9KHD4KDvhiOAYemWJ8oNZQ1kX8L4F6rqAhvsjfdcwW355F+rSpwpAGR it3UAfRKJo48y8rwL86lWUw6Qmhpcwx+ZianIXcXR5AYJThHRnPntZJ0mas4pygh yutj8WI80xjm3VirDaIoHR3Xv5YoTRnUQf7LSQ== -----END CERTIFICATE-----Generated at Wed Jan 21 03:50:22 2026 by rpki-client