This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS39945.roa File: AS39945.roa (raw, json) Hash identifier: K918wXgYSjn780yq+M+j1GH2J+EO00nQxC+X6JPm8Mg= Subject key identifier: 5E:5F:AE:2E:9A:F0:AE:CA:57:83:8E:8E:CB:65:19:8C:6F:5F:09:1D Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 59FCE695C16EB574DE38D855D65D6D0664C3DC81 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS39945.roa Signing time: Mon 24 Nov 2025 08:14:36 +0000 ROA not before: Mon 24 Nov 2025 08:09:36 +0000 ROA not after: Mon 23 Nov 2026 08:14:36 +0000 asID: 39945 IP address blocks: 45.54.20.0/24 maxlen: 24 2607:f740:e620::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 11:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:fc:e6:95:c1:6e:b5:74:de:38:d8:55:d6:5d:6d:06:64:c3:dc:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Nov 24 08:09:36 2025 GMT Not After : Nov 23 08:14:36 2026 GMT Subject: CN=5E5FAE2E9AF0AECA57838E8ECB65198C6F5F091D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:59:9a:80:8b:5a:12:0d:22:4c:e1:76:7c:e2: 56:84:86:26:1f:ef:4d:7e:62:f2:33:07:a4:0b:56: 7e:02:11:64:c5:94:d1:2e:64:63:64:f5:0e:97:3f: 8d:2f:1d:55:e8:4e:1f:24:96:36:ae:be:bb:6e:b4: f0:36:ee:b5:5e:d9:bc:e4:b6:4d:f8:77:2f:dc:6f: b9:68:6b:72:4b:ef:43:eb:33:89:fb:71:5a:f7:d3: 33:09:eb:6f:6d:33:77:bc:47:cf:f0:45:20:3e:20: 2e:24:87:d7:3f:87:31:e8:8d:a3:7d:cd:03:97:ce: 50:1c:18:80:83:3a:15:5b:75:a9:f4:96:36:4b:7c: 6a:60:5a:50:43:c0:0c:57:f0:10:97:bc:cb:64:05: b4:24:0e:c2:0a:5c:4c:ff:62:26:27:d6:a6:83:ad: a1:03:b7:bd:5a:46:54:59:aa:01:71:a6:b8:6f:0c: 7d:0b:bb:c2:05:56:a1:62:83:79:0c:33:81:48:78: 50:34:43:0e:9d:88:e6:45:d8:86:cd:fb:ae:bd:42: fc:cc:56:d4:84:87:e2:d3:7c:8e:c8:71:0f:36:1a: 92:c3:ef:f1:95:de:6f:3a:71:b0:5c:27:a5:a9:52: 08:f3:ba:7f:a3:60:a2:ab:c6:ce:17:78:f1:02:1d: 8a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5F:AE:2E:9A:F0:AE:CA:57:83:8E:8E:CB:65:19:8C:6F:5F:09:1D X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS39945.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.54.20.0/24 IPv6: 2607:f740:e620::/48 Signature Algorithm: sha256WithRSAEncryption 8a:09:b5:48:d3:cf:c3:50:bd:e5:b1:4e:ad:01:94:44:ce:27: 6d:e0:18:c3:f2:e4:77:ff:41:c3:e3:cb:f8:22:f9:13:1d:46: 91:20:ab:ac:1f:83:ec:64:fc:32:23:d6:a0:e4:39:bc:54:31: 28:dd:af:83:da:3b:d3:ed:65:1f:95:ff:6d:2e:82:4d:ea:96: f2:50:05:1e:e1:81:1d:70:de:85:5a:ee:79:4b:d7:92:c2:8a: 22:17:52:73:56:37:c7:52:d0:cb:bf:0e:fd:54:e7:a9:6f:1a: 32:dd:45:44:5d:b3:fa:b6:5e:3a:76:7d:12:6c:e9:b4:0c:62: 86:01:43:d4:cd:9d:fe:91:a7:f7:43:b6:ef:81:8c:09:d2:04: 2f:e0:4c:bd:c1:27:01:6b:a3:f7:0a:06:14:d5:fa:76:aa:c3: b5:d6:fc:25:f5:48:ff:18:4e:02:e5:94:4e:b4:8d:25:28:61: 8f:2e:b3:d8:4d:cd:be:6c:23:08:1b:c3:84:89:26:0a:99:e2: c6:a2:df:1c:29:d4:89:1d:11:54:06:4f:41:81:55:ba:28:70: 5d:f7:dc:93:dc:2a:4b:a5:88:7f:2e:3f:db:e7:bf:8d:45:fa: 7b:49:67:69:5a:cc:0d:44:09:da:b3:35:11:3f:69:d1:99:72: 90:f1:2b:af -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIUWfzmlcFutXTeONhV1l1tBmTD3IEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjUxMTI0MDgwOTM2WhcNMjYxMTIzMDgxNDM2 WjAzMTEwLwYDVQQDEyg1RTVGQUUyRTlBRjBBRUNBNTc4MzhFOEVDQjY1MTk4QzZG NUYwOTFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VmagItaEg0i TOF2fOJWhIYmH+9NfmLyMwekC1Z+AhFkxZTRLmRjZPUOlz+NLx1V6E4fJJY2rr67 brTwNu61Xtm85LZN+Hcv3G+5aGtyS+9D6zOJ+3Fa99MzCetvbTN3vEfP8EUgPiAu JIfXP4cx6I2jfc0Dl85QHBiAgzoVW3Wp9JY2S3xqYFpQQ8AMV/AQl7zLZAW0JA7C ClxM/2ImJ9amg62hA7e9WkZUWaoBcaa4bwx9C7vCBVahYoN5DDOBSHhQNEMOnYjm RdiGzfuuvUL8zFbUhIfi03yOyHEPNhqSw+/xld5vOnGwXCelqVII87p/o2Ciq8bO F3jxAh2KJwIDAQABo4ICjzCCAoswHQYDVR0OBBYEFF5fri6a8K7KV4OOjstlGYxv XwkdMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzM5OTQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALTYUMA8EAgACMAkDBwAmB/dA5iAw DQYJKoZIhvcNAQELBQADggEBAIoJtUjTz8NQveWxTq0BlETOJ23gGMPy5Hf/QcPj y/gi+RMdRpEgq6wfg+xk/DIj1qDkObxUMSjdr4PaO9PtZR+V/20ugk3qlvJQBR7h gR1w3oVa7nlL15LCiiIXUnNWN8dS0Mu/Dv1U56lvGjLdRURds/q2Xjp2fRJs6bQM YoYBQ9TNnf6Rp/dDtu+BjAnSBC/gTL3BJwFro/cKBhTV+naqw7XW/CX1SP8YTgLl lE60jSUoYY8us9hNzb5sIwgbw4SJJgqZ4sai3xwp1IkdEVQGT0GBVboocF333JPc KkuliH8uP9vnv41F+ntJZ2lazA1ECdqzNRE/adGZcpDxK68= -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:24 2025 by rpki-client