Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: ckMQ/a3kjvJiEhePvrQ8qE+VDJ+M07TFhEQRcLAA+9M=
Subject key identifier: FE:A7:CD:C3:4F:89:53:01:C4:A0:D8:9E:E2:35:1B:43:AC:CD:39:6B
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2BADE5F922B9086BB6B94548FDBADFE79B8170B6
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
Signing time: Sun 12 Oct 2025 17:24:29 +0000
ROA not before: Sun 12 Oct 2025 17:19:29 +0000
ROA not after: Sun 11 Oct 2026 17:24:29 +0000
asID: 61138
IP address blocks: 5.253.84.0/22 maxlen: 24
5.253.86.0/24 maxlen: 24
27.0.232.0/22 maxlen: 24
81.31.208.0/21 maxlen: 24
83.142.30.0/23 maxlen: 24
85.90.220.0/23 maxlen: 24
89.39.210.0/23 maxlen: 24
94.24.108.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
103.68.108.0/22 maxlen: 24
103.68.108.0/24 maxlen: 24
103.204.192.0/22 maxlen: 24
103.214.68.0/22 maxlen: 24
103.230.140.0/22 maxlen: 24
104.167.16.0/23 maxlen: 24
118.91.184.0/22 maxlen: 24
144.48.80.0/22 maxlen: 24
160.202.132.0/22 maxlen: 24
185.90.62.0/23 maxlen: 24
185.99.132.0/22 maxlen: 24
185.121.160.0/22 maxlen: 24
185.121.168.0/22 maxlen: 24
185.121.168.0/24 maxlen: 24
185.121.176.0/22 maxlen: 24
185.147.32.0/22 maxlen: 24
185.195.238.0/23 maxlen: 24
185.214.172.0/22 maxlen: 24
185.236.212.0/22 maxlen: 24
194.58.64.0/23 maxlen: 24
195.184.246.0/23 maxlen: 24
2a06:1280::/32 maxlen: 48
2a06:a000:100::/40 maxlen: 48
2a06:a004::/32 maxlen: 48
2a06:a006::/32 maxlen: 48
2a06:a007::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ad:e5:f9:22:b9:08:6b:b6:b9:45:48:fd:ba:df:e7:9b:81:70:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 12 17:19:29 2025 GMT
Not After : Oct 11 17:24:29 2026 GMT
Subject: CN=FEA7CDC34F895301C4A0D89EE2351B43ACCD396B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:13:b3:e0:72:37:aa:40:44:23:c1:4f:9e:
fe:d1:f4:0f:a8:66:4d:6b:8e:e7:a8:46:c7:03:de:
5f:44:db:ac:5a:ac:01:a1:66:a2:41:53:77:c6:e1:
a0:5c:dd:2c:39:e7:9e:31:c5:78:b4:93:cf:9e:8e:
a1:bd:5b:d0:29:59:5b:fb:b5:6c:db:28:11:e9:63:
62:de:97:3c:d1:f5:9f:4a:a9:36:d6:ab:25:55:5c:
2f:94:c4:1b:77:da:35:ba:a2:bf:99:93:67:13:a4:
4e:69:0b:ee:be:99:54:d3:58:9a:89:e7:67:8b:3b:
59:32:11:26:9c:01:c0:e4:75:f7:f2:c9:44:c5:43:
fe:94:c8:33:76:55:64:dd:93:49:12:d4:ac:7b:c4:
66:f3:1e:98:e3:d3:0a:9b:65:1a:41:1d:e8:e1:84:
75:9e:8d:76:d2:9e:43:c1:3a:a6:f9:5a:65:50:70:
07:d8:b2:33:d0:bc:3e:b2:08:cb:ef:93:73:b6:a7:
db:0b:43:bf:7a:7f:4c:ef:2f:6b:f0:e4:bb:ce:48:
d9:0f:14:2e:f1:2a:36:65:c6:1a:cc:b9:05:32:e2:
4e:c2:3b:87:34:88:a5:42:1d:50:c2:6e:d9:de:af:
23:e7:e2:50:c2:34:1a:a5:ad:b3:75:e0:50:ff:3e:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A7:CD:C3:4F:89:53:01:C4:A0:D8:9E:E2:35:1B:43:AC:CD:39:6B
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/22
27.0.232.0/22
81.31.208.0/21
83.142.30.0/23
85.90.220.0/23
89.39.210.0/23
94.24.108.0/23
94.26.24.0/23
103.68.108.0/22
103.204.192.0/22
103.214.68.0/22
103.230.140.0/22
104.167.16.0/23
118.91.184.0/22
144.48.80.0/22
160.202.132.0/22
185.90.62.0/23
185.99.132.0/22
185.121.160.0/22
185.121.168.0/22
185.121.176.0/22
185.147.32.0/22
185.195.238.0/23
185.214.172.0/22
185.236.212.0/22
194.58.64.0/23
195.184.246.0/23
IPv6:
2a06:1280::/32
2a06:a000:100::/40
2a06:a004::/32
2a06:a006::/31
Signature Algorithm: sha256WithRSAEncryption
a5:3d:43:3d:69:06:17:ad:3f:20:df:d9:5d:8a:47:24:2d:4e:
bc:05:02:52:c9:81:5c:87:7b:2e:cb:f9:e7:3f:3b:e6:90:a8:
91:af:40:23:49:e0:6a:06:a8:a9:81:b4:ea:79:52:1d:de:47:
db:b0:94:73:fe:77:89:a2:1c:5d:4d:16:f8:b4:6f:71:bd:87:
e0:fd:39:d1:42:45:43:a4:c0:89:db:46:b0:f6:30:69:8f:01:
f9:a7:b8:91:21:84:ee:49:20:c7:b7:f4:ab:37:b3:ba:08:87:
11:af:79:1a:53:f5:89:ce:85:6f:50:5f:76:b7:02:8f:84:2f:
e2:35:bd:5b:21:e0:be:f2:06:3e:1a:8a:53:55:67:9f:b5:2e:
d5:61:7b:0a:a1:04:39:e1:9c:d3:32:01:7c:22:3b:15:df:bc:
fe:bd:1e:a8:be:3d:1f:ec:8f:71:ba:d0:01:bc:5f:85:bb:e7:
28:80:aa:7f:7f:de:86:c9:b7:19:13:84:b6:46:65:7b:61:d4:
48:55:96:0a:d7:0f:9f:27:11:5e:9e:1b:e4:d8:13:ff:96:2b:
7a:e6:37:97:d9:d1:a1:37:ea:9e:9e:d3:63:26:20:43:ef:be:
ee:7f:c6:e7:22:2f:c4:a1:09:78:ad:d3:89:95:c6:02:3a:c0:
24:57:6b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:23 2025 by rpki-client