This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa File: AS61138.roa (raw, json) Hash identifier: d5suq+XDf78qj31jy2kpi3ASrHOz585VWLaIww099y4= Subject key identifier: A6:C3:87:C8:19:5A:F5:1E:A2:38:30:27:0B:59:CF:9A:23:00:40:ED Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 08DA2335E13083FE87F6F342EEBE2B1F3AFC34C9 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa Signing time: Mon 15 Dec 2025 05:50:51 +0000 ROA not before: Mon 15 Dec 2025 05:45:51 +0000 ROA not after: Mon 14 Dec 2026 05:50:51 +0000 asID: 61138 IP address blocks: 5.253.84.0/22 maxlen: 32 27.0.232.0/22 maxlen: 32 81.31.208.0/21 maxlen: 32 83.142.30.0/23 maxlen: 32 85.90.220.0/23 maxlen: 32 85.155.124.0/22 maxlen: 32 85.155.224.0/21 maxlen: 32 89.39.210.0/23 maxlen: 32 89.187.68.0/23 maxlen: 32 94.24.108.0/23 maxlen: 32 94.26.24.0/23 maxlen: 32 103.68.108.0/22 maxlen: 32 103.68.111.0/24 maxlen: 24 103.109.234.0/23 maxlen: 32 103.137.192.0/23 maxlen: 32 103.139.88.0/23 maxlen: 32 103.141.12.0/23 maxlen: 32 103.146.102.0/23 maxlen: 32 103.151.40.0/23 maxlen: 32 103.204.192.0/22 maxlen: 32 103.214.68.0/22 maxlen: 32 103.230.140.0/22 maxlen: 32 103.254.60.0/22 maxlen: 32 104.167.16.0/23 maxlen: 32 111.235.150.0/23 maxlen: 32 118.91.184.0/22 maxlen: 32 144.48.80.0/22 maxlen: 32 160.202.132.0/22 maxlen: 32 168.222.240.0/22 maxlen: 32 185.90.62.0/23 maxlen: 32 185.99.132.0/22 maxlen: 32 185.121.160.0/22 maxlen: 32 185.121.168.0/22 maxlen: 32 185.121.176.0/22 maxlen: 32 185.121.178.0/24 maxlen: 24 185.121.179.0/24 maxlen: 24 185.147.32.0/22 maxlen: 32 185.195.236.0/24 maxlen: 32 185.195.238.0/23 maxlen: 32 185.214.172.0/22 maxlen: 32 185.236.212.0/22 maxlen: 32 194.58.64.0/23 maxlen: 32 195.184.246.0/23 maxlen: 32 199.47.240.0/22 maxlen: 32 202.50.52.0/22 maxlen: 32 206.53.0.0/22 maxlen: 32 206.245.166.0/23 maxlen: 32 206.245.166.0/24 maxlen: 24 2a06:1280::/32 maxlen: 128 2a06:a006::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:da:23:35:e1:30:83:fe:87:f6:f3:42:ee:be:2b:1f:3a:fc:34:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Dec 15 05:45:51 2025 GMT Not After : Dec 14 05:50:51 2026 GMT Subject: CN=A6C387C8195AF51EA23830270B59CF9A230040ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a7:29:3c:d4:16:39:85:41:1a:d3:de:32:56: f9:09:78:fe:a7:43:e6:1d:b2:40:d6:15:63:96:92: 4a:27:ba:c8:9d:91:fe:38:f0:8c:69:e2:1b:47:52: 86:10:86:55:64:5d:10:c1:51:20:ba:d9:b7:7e:73: 98:d8:89:f6:67:c9:94:68:6f:50:41:5f:44:99:43: c0:5f:68:6a:77:8d:75:63:a6:5f:9e:7b:34:9f:b0: 83:a3:ed:75:6c:0f:60:a0:18:67:97:44:82:31:11: d8:02:96:41:d8:ab:44:0c:b6:bd:a3:23:c7:e0:f1: 01:cc:78:72:1b:52:43:d8:6e:6d:c7:b4:13:84:1c: e0:c8:a1:c1:3c:eb:a4:6e:42:d0:58:2f:47:9b:b2: 8d:95:7e:fb:75:6c:f8:09:92:ed:5f:19:fa:f5:28: 14:54:55:66:eb:60:ef:27:2c:a9:12:a9:d7:b1:d2: aa:97:e0:4a:83:87:d7:bf:dd:4b:60:18:87:11:96: 5d:ff:49:d2:77:c6:2a:73:48:ae:bf:6f:c1:02:d9: 75:49:fc:96:d2:e3:d8:3d:a7:30:51:ce:c8:24:a8: 5d:28:16:78:5a:bc:a2:40:c9:00:ff:3f:ce:5d:31: 29:a3:da:52:90:d9:39:be:e1:2f:8f:45:34:de:9e: 10:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C3:87:C8:19:5A:F5:1E:A2:38:30:27:0B:59:CF:9A:23:00:40:ED X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.84.0/22 27.0.232.0/22 81.31.208.0/21 83.142.30.0/23 85.90.220.0/23 85.155.124.0/22 85.155.224.0/21 89.39.210.0/23 89.187.68.0/23 94.24.108.0/23 94.26.24.0/23 103.68.108.0/22 103.109.234.0/23 103.137.192.0/23 103.139.88.0/23 103.141.12.0/23 103.146.102.0/23 103.151.40.0/23 103.204.192.0/22 103.214.68.0/22 103.230.140.0/22 103.254.60.0/22 104.167.16.0/23 111.235.150.0/23 118.91.184.0/22 144.48.80.0/22 160.202.132.0/22 168.222.240.0/22 185.90.62.0/23 185.99.132.0/22 185.121.160.0/22 185.121.168.0/22 185.121.176.0/22 185.147.32.0/22 185.195.236.0/24 185.195.238.0/23 185.214.172.0/22 185.236.212.0/22 194.58.64.0/23 195.184.246.0/23 199.47.240.0/22 202.50.52.0/22 206.53.0.0/22 206.245.166.0/23 IPv6: 2a06:1280::/32 2a06:a006::/32 Signature Algorithm: sha256WithRSAEncryption 26:c6:cf:a8:01:17:5a:3e:d4:8c:4f:15:b5:1b:c1:f4:b1:ee: f1:ed:8c:fe:d6:c4:17:8c:83:05:14:19:57:24:52:61:f3:37: cb:af:86:3e:a8:a0:ad:8e:e0:e9:11:d9:b7:65:0f:5a:0f:04: a4:be:a0:46:f1:d7:d6:43:6c:17:68:61:fd:7a:85:43:47:c4: f4:e7:3b:5e:af:43:fa:c4:b3:81:40:fc:fa:9b:f3:4a:69:08: b8:92:23:5a:a1:71:10:bd:78:a9:12:b4:ba:10:6b:df:e0:c3: 8e:21:ff:33:4f:3b:5d:f7:f6:e7:1c:67:14:59:1e:c0:7a:d9: 57:59:d6:41:97:32:f8:15:95:80:34:88:9e:cb:5a:16:66:23: 35:24:fa:f7:c9:a1:8b:73:81:41:e9:9e:cc:f7:85:05:f1:18: e0:12:a8:27:bb:5a:7b:a5:fa:4c:72:3a:c7:7b:6a:b9:25:00: a9:e9:ab:0b:2a:bc:be:45:e3:cf:a3:74:8b:07:60:8d:3f:c4: fa:6b:9b:d5:6f:56:89:2f:09:c4:e1:b1:65:d4:f6:a2:8c:46: 21:b1:c9:a9:bd:20:55:73:4e:a3:d5:06:19:64:15:72:62:cf: 85:7f:b9:6c:f1:34:29:0d:2c:a4:95:1e:13:3c:de:93:b0:e1: 3f:8b:85:02 -----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgIUCNojNeEwg/6H9vNC7r4rHzr8NMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTEyMTUwNTQ1NTFaFw0yNjEyMTQwNTUwNTFaMDMxMTAvBgNV BAMTKEE2QzM4N0M4MTk1QUY1MUVBMjM4MzAyNzBCNTlDRjlBMjMwMDQwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcpyk81BY5hUEa094yVvkJeP6n Q+YdskDWFWOWkkonusidkf448Ixp4htHUoYQhlVkXRDBUSC62bd+c5jYifZnyZRo b1BBX0SZQ8BfaGp3jXVjpl+eezSfsIOj7XVsD2CgGGeXRIIxEdgClkHYq0QMtr2j I8fg8QHMeHIbUkPYbm3HtBOEHODIocE866RuQtBYL0ebso2Vfvt1bPgJku1fGfr1 KBRUVWbrYO8nLKkSqdex0qqX4EqDh9e/3UtgGIcRll3/SdJ3xipzSK6/b8EC2XVJ /JbS49g9pzBRzsgkqF0oFnhavKJAyQD/P85dMSmj2lKQ2Tm+4S+PRTTenhC5AgMB AAGjggMQMIIDDDAdBgNVHQ4EFgQUpsOHyBla9R6iODAnC1nPmiMAQO0wHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT NjExMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggE/BggrBgEFBQcB BwEB/wSCAS4wggEqMIIBEAQCAAEwggEIAwQCBf1UAwQCGwDoAwQDUR/QAwQBU44e AwQBVVrcAwQCVZt8AwQDVZvgAwQBWSfSAwQBWbtEAwQBXhhsAwQBXhoYAwQCZ0Rs AwQBZ23qAwQBZ4nAAwQBZ4tYAwQBZ40MAwQBZ5JmAwQBZ5coAwQCZ8zAAwQCZ9ZE AwQCZ+aMAwQCZ/48AwQBaKcQAwQBb+uWAwQCdlu4AwQCkDBQAwQCoMqEAwQCqN7w AwQBuVo+AwQCuWOEAwQCuXmgAwQCuXmoAwQCuXmwAwQCuZMgAwQAucPsAwQBucPu AwQCudasAwQCuezUAwQBwjpAAwQBw7j2AwQCxy/wAwQCyjI0AwQCzjUAAwQBzvWm MBQEAgACMA4DBQAqBhKAAwUAKgagBjANBgkqhkiG9w0BAQsFAAOCAQEAJsbPqAEX Wj7UjE8VtRvB9LHu8e2M/tbEF4yDBRQZVyRSYfM3y6+GPqigrY7g6RHZt2UPWg8E pL6gRvHX1kNsF2hh/XqFQ0fE9Oc7Xq9D+sSzgUD8+pvzSmkIuJIjWqFxEL14qRK0 uhBr3+DDjiH/M087Xff25xxnFFkewHrZV1nWQZcy+BWVgDSInstaFmYjNST698mh i3OBQemezPeFBfEY4BKoJ7tae6X6THI6x3tquSUAqemrCyq8vkXjz6N0iwdgjT/E +mub1W9WiS8JxOGxZdT2ooxGIbHJqb0gVXNOo9UGGWQVcmLPhX+5bPE0KQ0spJUe Ezzek7DhP4uFAg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:06:10 2025 by rpki-client