This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa File: AS61138.roa (raw, json) Hash identifier: nKula1clkau9vZj9vaj8p6E1rA4w6cIpHShQ8PABwdA= Subject key identifier: A9:20:92:05:7A:0C:B0:32:0E:34:67:BD:FA:5C:A9:EB:19:1D:C6:C8 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 6F2E77569D2F8E45F0D35BB3672F773780ABFC7A Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa Signing time: Mon 01 Dec 2025 22:14:53 +0000 ROA not before: Mon 01 Dec 2025 22:09:53 +0000 ROA not after: Mon 30 Nov 2026 22:14:53 +0000 asID: 61138 IP address blocks: 5.253.84.0/22 maxlen: 24 5.253.86.0/24 maxlen: 24 27.0.232.0/22 maxlen: 24 81.31.208.0/21 maxlen: 24 83.142.30.0/23 maxlen: 24 85.90.220.0/23 maxlen: 24 85.155.124.0/22 maxlen: 24 89.39.210.0/23 maxlen: 24 94.24.108.0/23 maxlen: 24 94.26.24.0/23 maxlen: 24 103.68.108.0/22 maxlen: 24 103.68.108.0/24 maxlen: 24 103.204.192.0/22 maxlen: 24 103.214.68.0/22 maxlen: 24 103.230.140.0/22 maxlen: 24 104.167.16.0/23 maxlen: 24 118.91.184.0/22 maxlen: 24 144.48.80.0/22 maxlen: 24 160.202.132.0/22 maxlen: 24 168.222.240.0/22 maxlen: 24 185.90.62.0/23 maxlen: 24 185.99.132.0/22 maxlen: 24 185.121.160.0/22 maxlen: 24 185.121.168.0/22 maxlen: 24 185.121.168.0/24 maxlen: 24 185.121.176.0/22 maxlen: 24 185.147.32.0/22 maxlen: 24 185.195.238.0/23 maxlen: 24 185.214.172.0/22 maxlen: 24 185.236.212.0/22 maxlen: 24 194.58.64.0/23 maxlen: 24 195.184.246.0/23 maxlen: 24 2a06:1280::/32 maxlen: 48 2a06:a000:100::/40 maxlen: 48 2a06:a004::/32 maxlen: 48 2a06:a006::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2e:77:56:9d:2f:8e:45:f0:d3:5b:b3:67:2f:77:37:80:ab:fc:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Dec 1 22:09:53 2025 GMT Not After : Nov 30 22:14:53 2026 GMT Subject: CN=A92092057A0CB0320E3467BDFA5CA9EB191DC6C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0a:b7:e5:60:37:54:13:d0:21:98:99:bd:72: 66:33:93:e0:d0:ec:7f:ab:82:73:cf:d8:09:f7:3a: 5c:dc:ca:18:fc:4f:ba:62:e9:54:ce:33:de:ca:88: 8c:4d:12:93:07:1b:2b:2e:7b:3a:4a:0c:7e:22:1a: d8:ed:13:43:47:cd:50:ea:fe:c7:83:2c:59:fe:e1: bb:18:d7:07:0b:a6:46:dc:75:bb:f2:06:bd:5c:c6: 95:4c:3c:17:4e:e8:65:51:11:84:30:7d:cd:2b:c0: e9:cb:69:87:b3:18:94:0e:53:38:52:2c:89:c1:10: 6c:b3:e5:0a:71:1e:d3:f8:22:fe:d5:52:08:91:2a: 5f:90:de:73:79:e6:43:20:43:95:27:4b:5b:15:9c: 3c:b5:a2:3f:3f:4e:1c:39:bb:15:9c:89:a5:c8:82: 7d:0c:9f:9c:6e:a2:8e:b3:a7:b0:8f:d8:1f:3e:27: a4:8c:ce:98:0d:f2:ff:c6:78:3f:c2:b1:57:b6:82: b7:0f:75:13:ea:38:9d:3a:89:a2:cc:96:4d:a5:bd: 29:df:da:55:a3:9d:ce:4e:37:b6:c2:d1:16:a2:51: 08:7b:6b:2c:42:37:4a:ee:80:2f:8c:91:ab:31:26: 4c:ae:56:f9:20:20:b5:ef:b7:7a:44:83:fe:57:0f: 71:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:20:92:05:7A:0C:B0:32:0E:34:67:BD:FA:5C:A9:EB:19:1D:C6:C8 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.84.0/22 27.0.232.0/22 81.31.208.0/21 83.142.30.0/23 85.90.220.0/23 85.155.124.0/22 89.39.210.0/23 94.24.108.0/23 94.26.24.0/23 103.68.108.0/22 103.204.192.0/22 103.214.68.0/22 103.230.140.0/22 104.167.16.0/23 118.91.184.0/22 144.48.80.0/22 160.202.132.0/22 168.222.240.0/22 185.90.62.0/23 185.99.132.0/22 185.121.160.0/22 185.121.168.0/22 185.121.176.0/22 185.147.32.0/22 185.195.238.0/23 185.214.172.0/22 185.236.212.0/22 194.58.64.0/23 195.184.246.0/23 IPv6: 2a06:1280::/32 2a06:a000:100::/40 2a06:a004::/32 2a06:a006::/32 Signature Algorithm: sha256WithRSAEncryption 59:21:ad:c2:4a:29:c8:0b:c6:fc:75:33:f5:ee:63:94:ab:d2: f6:b7:06:53:03:d1:8d:e8:b8:47:12:c4:6c:f1:0f:16:16:60: 97:98:cb:6c:f5:df:0e:0b:51:2d:e0:64:31:ed:6c:df:7a:d6: e5:b0:60:98:95:f3:41:91:9c:49:cf:f2:57:47:24:7d:f1:a3: bc:13:72:fd:3f:c1:95:7e:90:42:b3:04:9d:bf:1f:8d:9e:7e: 65:6c:7d:1e:3c:70:fc:7f:61:f1:16:75:17:cf:79:b0:19:4f: 0e:bd:b8:84:3a:6b:ab:17:8d:dd:0b:34:2b:28:63:7f:d6:bd: fa:4b:1b:4b:fd:4d:a7:a1:2b:2b:90:c2:96:a1:09:24:22:98: 23:c9:56:c0:04:59:85:42:2c:58:e3:6a:fd:a7:7a:c8:07:ce: 78:32:0a:e7:ac:f2:08:8a:09:67:ed:04:84:fd:84:1e:d1:e6: 8c:18:26:41:65:1c:22:43:c2:16:e4:e5:d2:4e:1a:56:d9:c5: b0:7b:e8:6e:4d:36:73:58:54:ab:54:66:2d:e1:67:82:b8:3d: 41:07:c8:0b:29:a8:24:b7:fd:ea:0c:8f:a8:d8:71:d4:94:e5: 55:9b:4d:78:b8:2c:c3:22:17:f8:2e:b5:fd:90:7c:fa:2b:fd: 0d:d2:f2:7b -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUby53Vp0vjkXw01uzZy93N4Cr/HowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTEyMDEyMjA5NTNaFw0yNjExMzAyMjE0NTNaMDMxMTAvBgNV BAMTKEE5MjA5MjA1N0EwQ0IwMzIwRTM0NjdCREZBNUNBOUVCMTkxREM2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVCrflYDdUE9AhmJm9cmYzk+DQ 7H+rgnPP2An3Olzcyhj8T7pi6VTOM97KiIxNEpMHGysuezpKDH4iGtjtE0NHzVDq /seDLFn+4bsY1wcLpkbcdbvyBr1cxpVMPBdO6GVREYQwfc0rwOnLaYezGJQOUzhS LInBEGyz5QpxHtP4Iv7VUgiRKl+Q3nN55kMgQ5UnS1sVnDy1oj8/Thw5uxWciaXI gn0Mn5xuoo6zp7CP2B8+J6SMzpgN8v/GeD/CsVe2grcPdRPqOJ06iaLMlk2lvSnf 2lWjnc5ON7bC0RaiUQh7ayxCN0rugC+MkasxJkyuVvkgILXvt3pEg/5XD3H9AgMB AAGjggLAMIICvDAdBgNVHQ4EFgQUqSCSBXoMsDIONGe9+lyp6xkdxsgwHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT NjExMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgfAGCCsGAQUFBwEH AQH/BIHgMIHdMIG1BAIAATCBrgMEAgX9VAMEAhsA6AMEA1Ef0AMEAVOOHgMEAVVa 3AMEAlWbfAMEAVkn0gMEAV4YbAMEAV4aGAMEAmdEbAMEAmfMwAMEAmfWRAMEAmfm jAMEAWinEAMEAnZbuAMEApAwUAMEAqDKhAMEAqje8AMEAblaPgMEArljhAMEArl5 oAMEArl5qAMEArl5sAMEArmTIAMEAbnD7gMEArnWrAMEArns1AMEAcI6QAMEAcO4 9jAjBAIAAjAdAwUAKgYSgAMGACoGoAABAwUAKgagBAMFACoGoAYwDQYJKoZIhvcN AQELBQADggEBAFkhrcJKKcgLxvx1M/XuY5Sr0va3BlMD0Y3ouEcSxGzxDxYWYJeY y2z13w4LUS3gZDHtbN961uWwYJiV80GRnEnP8ldHJH3xo7wTcv0/wZV+kEKzBJ2/ H42efmVsfR48cPx/YfEWdRfPebAZTw69uIQ6a6sXjd0LNCsoY3/WvfpLG0v9Taeh KyuQwpahCSQimCPJVsAEWYVCLFjjav2nesgHzngyCues8giKCWftBIT9hB7R5owY JkFlHCJDwhbk5dJOGlbZxbB76G5NNnNYVKtUZi3hZ4K4PUEHyAspqCS3/eoMj6jY cdSU5VWbTXi4LMMiF/gutf2QfPor/Q3S8ns= -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:19 2025 by rpki-client