Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: P4aUPXQmWudRFC/u3s7Sbv1cOnbjm2QyJZfhVJWjVhk=
Subject key identifier: 96:E9:68:9F:AC:ED:85:F7:17:F4:36:A5:AF:2B:67:B8:7F:CB:05:DD
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 0BD16CC0E48B6DD4319738BCB4F6A9F0A93C57F5
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
Signing time: Tue 21 Jul 2026 22:32:05 +0000
ROA not before: Tue 21 Jul 2026 22:27:05 +0000
ROA not after: Tue 20 Jul 2027 22:32:05 +0000
asID: 61138
IP address blocks: 5.253.84.0/22 maxlen: 32
27.0.232.0/22 maxlen: 32
81.31.208.0/21 maxlen: 32
83.142.30.0/23 maxlen: 32
85.90.220.0/23 maxlen: 32
85.155.224.0/21 maxlen: 32
89.39.210.0/23 maxlen: 32
89.187.68.0/23 maxlen: 32
94.24.108.0/23 maxlen: 32
94.26.24.0/23 maxlen: 32
103.68.108.0/22 maxlen: 32
103.109.234.0/23 maxlen: 32
103.137.192.0/23 maxlen: 32
103.139.88.0/23 maxlen: 32
103.141.12.0/23 maxlen: 32
103.146.102.0/23 maxlen: 32
103.151.40.0/23 maxlen: 32
103.204.192.0/22 maxlen: 32
103.208.84.0/22 maxlen: 32
103.214.68.0/22 maxlen: 32
103.230.140.0/22 maxlen: 32
103.254.60.0/22 maxlen: 32
111.235.150.0/23 maxlen: 32
118.91.184.0/22 maxlen: 32
143.246.136.0/22 maxlen: 32
143.246.180.0/22 maxlen: 24
144.48.80.0/22 maxlen: 32
160.202.132.0/22 maxlen: 32
168.222.240.0/22 maxlen: 32
185.90.62.0/23 maxlen: 32
185.99.132.0/22 maxlen: 32
185.121.160.0/22 maxlen: 32
185.121.168.0/22 maxlen: 32
185.121.176.0/22 maxlen: 32
185.121.179.0/24 maxlen: 24
185.147.32.0/22 maxlen: 32
185.195.236.0/24 maxlen: 32
185.195.238.0/23 maxlen: 32
185.214.172.0/22 maxlen: 32
185.236.212.0/22 maxlen: 32
194.58.64.0/23 maxlen: 32
195.184.246.0/23 maxlen: 32
199.47.240.0/22 maxlen: 32
202.50.52.0/22 maxlen: 32
206.53.0.0/22 maxlen: 32
206.245.166.0/23 maxlen: 32
2a06:1280::/32 maxlen: 128
2a06:a006::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:d1:6c:c0:e4:8b:6d:d4:31:97:38:bc:b4:f6:a9:f0:a9:3c:57:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 21 22:27:05 2026 GMT
Not After : Jul 20 22:32:05 2027 GMT
Subject: CN=96E9689FACED85F717F436A5AF2B67B87FCB05DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:82:a6:d6:5d:95:39:49:10:71:d9:20:fd:
2a:98:6b:a7:85:77:88:64:72:c0:78:d9:19:5f:a6:
ab:41:86:e8:14:45:57:6e:d0:3c:6a:36:eb:0d:00:
4d:84:3a:ac:b7:16:8d:db:c1:a2:f0:94:a5:9d:d4:
3a:73:1d:9c:9a:86:20:0e:37:36:81:12:bf:d4:c1:
27:ed:b5:99:49:56:a5:5c:e5:41:70:3f:61:69:33:
5d:bf:de:7b:9e:b1:ae:b6:5b:d2:65:7f:c7:60:2c:
07:7c:9b:5a:9f:47:5c:2b:28:01:18:48:3e:a4:6a:
ec:5b:33:fa:4c:04:b4:55:f5:df:28:56:95:c3:22:
fb:88:2b:3e:84:db:e1:f2:c0:7b:37:19:89:49:eb:
08:1e:03:0b:ac:9a:cc:a6:9a:6c:91:38:1f:89:fb:
18:94:43:bb:34:cf:8f:8e:71:62:77:a6:92:3a:57:
f2:5d:ed:08:ef:ed:8a:e4:f8:b0:cd:c3:97:93:af:
ea:c3:5f:c5:69:0e:b2:d2:c1:08:09:8a:53:95:b9:
69:12:24:e9:f3:b0:6d:23:59:45:7c:6d:54:da:26:
1e:98:75:00:e6:6c:78:72:6a:04:d7:9f:9f:2c:88:
df:87:20:a1:a4:75:52:a4:88:be:11:fb:c1:0b:28:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E9:68:9F:AC:ED:85:F7:17:F4:36:A5:AF:2B:67:B8:7F:CB:05:DD
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/22
27.0.232.0/22
81.31.208.0/21
83.142.30.0/23
85.90.220.0/23
85.155.224.0/21
89.39.210.0/23
89.187.68.0/23
94.24.108.0/23
94.26.24.0/23
103.68.108.0/22
103.109.234.0/23
103.137.192.0/23
103.139.88.0/23
103.141.12.0/23
103.146.102.0/23
103.151.40.0/23
103.204.192.0/22
103.208.84.0/22
103.214.68.0/22
103.230.140.0/22
103.254.60.0/22
111.235.150.0/23
118.91.184.0/22
143.246.136.0/22
143.246.180.0/22
144.48.80.0/22
160.202.132.0/22
168.222.240.0/22
185.90.62.0/23
185.99.132.0/22
185.121.160.0/22
185.121.168.0/22
185.121.176.0/22
185.147.32.0/22
185.195.236.0/24
185.195.238.0/23
185.214.172.0/22
185.236.212.0/22
194.58.64.0/23
195.184.246.0/23
199.47.240.0/22
202.50.52.0/22
206.53.0.0/22
206.245.166.0/23
IPv6:
2a06:1280::/32
2a06:a006::/32
Signature Algorithm: sha256WithRSAEncryption
9d:44:ef:ee:14:95:a6:66:c3:95:91:05:b9:91:e1:34:c4:c6:
67:3b:a4:e9:d0:8b:98:3b:66:f5:59:6f:90:54:ba:d6:20:19:
45:59:e2:7b:90:34:92:79:ca:f4:39:9c:0e:38:b1:98:5f:cd:
3a:74:1a:68:5f:3d:92:b5:0f:0f:57:1a:f6:e0:f1:a6:12:8a:
c9:23:6d:57:e3:31:8b:16:a1:ca:8d:bb:c6:8d:f0:24:37:8b:
a8:a0:76:f0:f5:2f:3b:01:38:03:0d:e2:13:67:29:93:01:83:
3d:c9:e9:71:c9:8f:2f:a4:ce:28:fa:2b:91:83:17:2f:81:ef:
c3:6a:fb:21:87:bb:96:0d:d2:40:f9:43:42:aa:eb:89:a4:b9:
4f:d3:83:73:79:09:f4:74:65:0b:da:37:5e:45:d9:dc:14:c2:
52:d8:8a:22:2c:3a:37:09:2e:70:e4:63:e5:90:df:dd:b0:72:
77:8f:c1:9b:c0:8b:ee:74:5f:d8:52:4a:57:c1:4e:42:38:3e:
1d:11:07:17:48:f2:af:60:de:32:2a:74:9b:cb:b8:6f:92:54:
0d:58:2c:b9:43:73:35:1b:30:c2:ea:89:6c:84:a2:a8:5e:2b:
c6:66:70:53:9d:8c:c4:75:1b:37:e0:cc:43:7b:5b:d4:c8:4a:
e4:83:b2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:52:28 2026 by rpki-client