Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: KQ9cjdVGP4AT/13zH1mosQkw1FId73C9vuLxZMT3/XQ=
Subject key identifier: 39:77:5C:96:33:06:B5:D2:ED:90:8D:4D:A7:E5:B2:63:6F:C5:3A:1C
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 53809A0036FB9526E1C035EEDF4FEF5DC568878D
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
Signing time: Mon 09 Mar 2026 13:08:38 +0000
ROA not before: Mon 09 Mar 2026 13:03:38 +0000
ROA not after: Mon 08 Mar 2027 13:08:38 +0000
asID: 61138
IP address blocks: 5.253.84.0/22 maxlen: 32
27.0.232.0/22 maxlen: 32
81.31.208.0/21 maxlen: 32
83.142.30.0/23 maxlen: 32
85.90.220.0/23 maxlen: 32
85.155.224.0/21 maxlen: 32
89.39.210.0/23 maxlen: 32
89.187.68.0/23 maxlen: 32
94.24.108.0/23 maxlen: 32
94.26.24.0/23 maxlen: 32
103.68.108.0/22 maxlen: 32
103.109.234.0/23 maxlen: 32
103.137.192.0/23 maxlen: 32
103.139.88.0/23 maxlen: 32
103.141.12.0/23 maxlen: 32
103.146.102.0/23 maxlen: 32
103.151.40.0/23 maxlen: 32
103.204.192.0/22 maxlen: 32
103.214.68.0/22 maxlen: 32
103.230.140.0/22 maxlen: 32
103.254.60.0/22 maxlen: 32
111.235.150.0/23 maxlen: 32
118.91.184.0/22 maxlen: 32
144.48.80.0/22 maxlen: 32
160.202.132.0/22 maxlen: 32
168.222.240.0/22 maxlen: 32
185.90.62.0/23 maxlen: 32
185.99.132.0/22 maxlen: 32
185.121.160.0/22 maxlen: 32
185.121.168.0/22 maxlen: 32
185.121.176.0/22 maxlen: 32
185.121.179.0/24 maxlen: 24
185.147.32.0/22 maxlen: 32
185.195.236.0/24 maxlen: 32
185.195.238.0/23 maxlen: 32
185.214.172.0/22 maxlen: 32
185.236.212.0/22 maxlen: 32
194.58.64.0/23 maxlen: 32
195.184.246.0/23 maxlen: 32
199.47.240.0/22 maxlen: 32
202.50.52.0/22 maxlen: 32
206.53.0.0/22 maxlen: 32
206.245.166.0/23 maxlen: 32
2a06:1280::/32 maxlen: 128
2a06:a006::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:80:9a:00:36:fb:95:26:e1:c0:35:ee:df:4f:ef:5d:c5:68:87:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Mar 9 13:03:38 2026 GMT
Not After : Mar 8 13:08:38 2027 GMT
Subject: CN=39775C963306B5D2ED908D4DA7E5B2636FC53A1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:e1:27:d1:01:fb:1c:a9:d3:ee:c3:c2:66:
4e:33:68:a3:d0:a2:ac:65:d7:b7:17:7d:e3:93:9d:
81:71:77:4e:ea:f3:cd:c4:6f:c6:a8:9a:3f:9a:11:
3c:b7:20:81:7d:00:84:38:51:17:77:8f:ba:4c:b7:
f5:a5:14:1e:4e:01:05:66:60:b5:90:10:a0:9d:75:
ef:85:2b:f8:a0:f5:9f:ba:dc:29:2b:46:ac:f4:31:
91:54:0b:5a:e6:ec:77:17:1a:5e:5e:6a:a7:b2:05:
30:8d:1f:0f:65:f6:ce:09:e5:da:d9:ac:01:3c:bc:
f3:70:0b:31:77:6d:fa:a3:ea:31:ed:42:a7:f9:69:
c5:a4:06:6f:7c:65:b6:2f:67:5d:bf:3c:7f:4d:18:
38:57:ec:45:cf:b8:87:6e:91:ed:7d:32:5c:ce:5e:
ab:93:4d:a3:83:31:30:1c:ae:e9:5e:3b:1a:3d:f7:
e6:94:62:e0:7d:7e:49:06:03:1a:82:61:8f:7d:33:
92:5e:8b:b7:31:23:50:94:1b:ce:77:82:b7:33:b9:
3d:44:b7:d6:85:37:24:3a:3b:94:3f:ee:0c:17:ab:
72:6e:22:e8:62:ba:da:1b:44:ac:dc:c8:67:b2:c3:
6b:bd:9e:1f:9a:8e:f3:7a:bb:c4:0b:63:4d:7c:ef:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:77:5C:96:33:06:B5:D2:ED:90:8D:4D:A7:E5:B2:63:6F:C5:3A:1C
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/22
27.0.232.0/22
81.31.208.0/21
83.142.30.0/23
85.90.220.0/23
85.155.224.0/21
89.39.210.0/23
89.187.68.0/23
94.24.108.0/23
94.26.24.0/23
103.68.108.0/22
103.109.234.0/23
103.137.192.0/23
103.139.88.0/23
103.141.12.0/23
103.146.102.0/23
103.151.40.0/23
103.204.192.0/22
103.214.68.0/22
103.230.140.0/22
103.254.60.0/22
111.235.150.0/23
118.91.184.0/22
144.48.80.0/22
160.202.132.0/22
168.222.240.0/22
185.90.62.0/23
185.99.132.0/22
185.121.160.0/22
185.121.168.0/22
185.121.176.0/22
185.147.32.0/22
185.195.236.0/24
185.195.238.0/23
185.214.172.0/22
185.236.212.0/22
194.58.64.0/23
195.184.246.0/23
199.47.240.0/22
202.50.52.0/22
206.53.0.0/22
206.245.166.0/23
IPv6:
2a06:1280::/32
2a06:a006::/32
Signature Algorithm: sha256WithRSAEncryption
02:bd:d1:82:cd:1a:1b:7c:ff:8a:1a:40:23:b1:47:16:ef:84:
44:82:a4:c1:0e:b5:93:7c:e1:21:ef:cd:3c:ad:02:db:fe:d1:
82:1c:1f:5d:ba:a6:3e:c4:9b:74:d3:b3:d7:6a:6e:d3:d6:18:
8c:4d:cd:b1:3b:a9:fd:07:96:2b:6f:1f:1f:df:e6:0c:d6:7e:
3b:40:a3:d7:8b:f1:8b:1e:1b:5a:63:2e:7b:ab:4c:6c:69:6d:
1c:41:85:71:f9:68:b6:c0:b0:a3:08:18:e7:25:a3:6f:8a:e1:
f6:f0:54:7b:c0:d7:03:57:ba:1c:63:a9:c6:8a:f8:cd:4e:06:
12:76:ec:b0:f3:97:9e:7d:f9:cc:a7:2d:77:d4:62:17:57:b1:
6f:96:cc:3e:2d:d7:5b:ff:b7:35:9a:ee:d2:1f:64:92:cf:6e:
4d:13:d7:9a:53:4d:3d:c5:c7:f3:5e:b9:8e:d0:56:2c:e3:e9:
a8:7b:57:2d:90:6f:68:cf:f5:9b:88:a4:df:08:a5:af:34:4e:
cf:00:4f:5e:d5:3e:dc:01:b3:c9:d9:0e:60:c1:2f:9f:f0:c2:
cb:44:de:ed:1f:fb:fb:c2:ce:a0:ca:ff:b4:7b:20:34:e6:6d:
fa:51:a1:b7:f4:81:ab:c9:b5:fa:ab:38:18:c8:f2:51:7c:f4:
41:66:2b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:01:10 2026 by rpki-client