Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: 4A+pztSvHHdDpIpZOiQGatA6u4dBS5MhT9XPUpYhcpw=
Subject key identifier: 49:16:DB:A4:84:C4:2C:1C:BE:61:2A:71:7D:3F:A8:82:D9:23:A3:67
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 033CB2AA49E6B1E9032A936AA4C5E1A9C2B53F4F
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
Signing time: Sun 09 Aug 2026 22:57:06 +0000
ROA not before: Sun 09 Aug 2026 22:52:06 +0000
ROA not after: Sun 08 Aug 2027 22:57:06 +0000
asID: 61138
IP address blocks: 5.253.84.0/22 maxlen: 32
27.0.232.0/22 maxlen: 32
81.31.208.0/21 maxlen: 32
83.142.30.0/23 maxlen: 32
85.90.220.0/23 maxlen: 32
85.155.224.0/21 maxlen: 32
89.39.210.0/23 maxlen: 32
89.187.68.0/23 maxlen: 32
94.24.108.0/23 maxlen: 32
94.26.24.0/23 maxlen: 32
103.68.108.0/22 maxlen: 32
103.109.234.0/23 maxlen: 32
103.137.192.0/23 maxlen: 32
103.139.88.0/23 maxlen: 32
103.141.12.0/23 maxlen: 32
103.146.102.0/23 maxlen: 32
103.151.40.0/23 maxlen: 32
103.204.192.0/22 maxlen: 32
103.208.84.0/22 maxlen: 32
103.214.68.0/22 maxlen: 32
103.230.140.0/22 maxlen: 32
103.254.60.0/22 maxlen: 32
111.235.150.0/23 maxlen: 32
118.91.184.0/22 maxlen: 32
143.246.136.0/22 maxlen: 32
143.246.180.0/22 maxlen: 24
144.48.80.0/22 maxlen: 32
160.202.132.0/22 maxlen: 32
168.222.240.0/22 maxlen: 32
185.90.62.0/23 maxlen: 32
185.99.132.0/22 maxlen: 32
185.121.160.0/22 maxlen: 32
185.121.168.0/22 maxlen: 32
185.121.176.0/22 maxlen: 32
185.147.32.0/22 maxlen: 32
185.195.236.0/24 maxlen: 32
185.195.238.0/23 maxlen: 32
185.214.172.0/22 maxlen: 32
185.236.212.0/22 maxlen: 32
194.58.64.0/23 maxlen: 32
195.184.246.0/23 maxlen: 32
199.47.240.0/22 maxlen: 32
202.50.52.0/22 maxlen: 32
206.53.0.0/22 maxlen: 32
206.245.166.0/23 maxlen: 32
2a06:1280::/32 maxlen: 128
2a06:a006::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:3c:b2:aa:49:e6:b1:e9:03:2a:93:6a:a4:c5:e1:a9:c2:b5:3f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 9 22:52:06 2026 GMT
Not After : Aug 8 22:57:06 2027 GMT
Subject: CN=4916DBA484C42C1CBE612A717D3FA882D923A367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:9d:fe:b3:93:d5:82:d7:11:2d:43:1d:7c:
f3:76:c3:ce:0f:41:ac:26:4e:f8:e0:86:83:45:22:
d3:ec:b0:ca:fd:ba:e1:e4:10:01:39:c8:4f:70:84:
dd:04:a9:aa:f3:8c:5b:2a:f8:02:58:d0:5e:b8:2c:
f7:1e:fe:71:ab:59:aa:f5:22:00:03:0a:0c:d8:4f:
c8:ca:d1:16:f6:98:fb:3c:27:b8:d5:c5:d6:bf:21:
55:01:9e:89:07:de:6f:4b:f8:2e:f9:bd:a7:38:a3:
6c:5c:fe:17:83:d3:e8:0f:ad:f8:5f:21:2e:1c:46:
c6:e3:8e:b5:04:6d:2a:12:99:b1:51:aa:a7:39:0c:
4c:2f:e7:27:90:b1:24:27:00:42:f3:a5:42:ca:2b:
9a:51:48:4c:93:a8:f1:19:19:85:25:df:0a:a3:84:
a1:81:34:97:bc:95:4f:40:98:26:53:35:be:69:04:
9b:96:8c:8b:7e:a0:07:de:a1:4a:d7:16:4c:97:ee:
be:f2:26:bd:1f:85:16:c7:e2:d8:ec:56:32:d7:c9:
a4:fd:a7:a2:7e:39:f5:e5:1e:eb:e6:24:82:c3:d9:
44:8c:fd:a8:52:bf:69:2a:c1:9f:46:22:4f:ea:5f:
49:7a:6e:92:5a:ff:65:5b:52:c6:e7:bb:41:c1:c2:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:16:DB:A4:84:C4:2C:1C:BE:61:2A:71:7D:3F:A8:82:D9:23:A3:67
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/22
27.0.232.0/22
81.31.208.0/21
83.142.30.0/23
85.90.220.0/23
85.155.224.0/21
89.39.210.0/23
89.187.68.0/23
94.24.108.0/23
94.26.24.0/23
103.68.108.0/22
103.109.234.0/23
103.137.192.0/23
103.139.88.0/23
103.141.12.0/23
103.146.102.0/23
103.151.40.0/23
103.204.192.0/22
103.208.84.0/22
103.214.68.0/22
103.230.140.0/22
103.254.60.0/22
111.235.150.0/23
118.91.184.0/22
143.246.136.0/22
143.246.180.0/22
144.48.80.0/22
160.202.132.0/22
168.222.240.0/22
185.90.62.0/23
185.99.132.0/22
185.121.160.0/22
185.121.168.0/22
185.121.176.0/22
185.147.32.0/22
185.195.236.0/24
185.195.238.0/23
185.214.172.0/22
185.236.212.0/22
194.58.64.0/23
195.184.246.0/23
199.47.240.0/22
202.50.52.0/22
206.53.0.0/22
206.245.166.0/23
IPv6:
2a06:1280::/32
2a06:a006::/32
Signature Algorithm: sha256WithRSAEncryption
99:bb:c4:ac:57:27:a9:6e:88:f9:09:56:23:4d:3e:62:33:ce:
b4:1f:f5:f3:8e:a5:d8:5f:ca:8c:b7:d1:30:ce:2d:bb:2e:ee:
13:f6:9f:b6:14:ef:5e:ef:e6:11:52:ad:db:6e:c3:ad:cf:2f:
a1:1f:3f:2d:b4:a7:49:58:b6:6d:56:66:b2:af:f1:e3:12:20:
91:75:76:05:04:da:ef:13:2d:a6:b4:ca:0c:9a:a4:03:e2:b7:
56:b1:0d:dd:13:d7:95:02:23:57:bd:f6:2d:f8:ae:33:46:b6:
df:15:9b:fe:e2:27:67:d8:59:4d:28:e9:90:1c:33:e3:bb:2a:
f5:93:33:b5:f1:01:c3:1f:6d:2c:89:3e:b3:d0:98:a4:f4:38:
40:e5:53:53:49:a0:05:34:e1:2f:d8:a2:17:9a:78:c3:d9:bd:
a4:f8:b8:19:0c:c6:26:42:02:d0:12:db:89:8e:37:01:36:3e:
68:2a:60:d3:03:34:fa:cd:7f:69:ea:1a:ad:4f:8b:18:98:d4:
fe:2a:a9:73:e1:e7:76:98:28:ca:4f:51:f2:74:26:20:74:8b:
bf:af:77:bd:04:9a:6b:f4:5f:6d:50:e4:09:e5:b8:a5:e5:3d:
3b:44:0e:67:da:d1:4c:36:83:12:80:86:59:a8:d1:37:15:e5:
aa:03:e7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:09:05 2026 by rpki-client