Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: KkO+OTf4qHWjavd3duxc4bkXMp1doNshFxmpMHtfRn4=
Subject key identifier: 1A:32:69:00:FB:3F:32:19:D5:0F:2B:0E:9F:E4:E8:48:4C:C8:42:1E
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 39C5C25CB9EF09285CE666B79F7B122A676EBFA8
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
Signing time: Wed 10 Jun 2026 15:01:22 +0000
ROA not before: Wed 10 Jun 2026 14:56:22 +0000
ROA not after: Wed 09 Jun 2027 15:01:22 +0000
asID: 61138
IP address blocks: 5.253.84.0/22 maxlen: 32
27.0.232.0/22 maxlen: 32
81.31.208.0/21 maxlen: 32
83.142.30.0/23 maxlen: 32
85.90.220.0/23 maxlen: 32
85.155.224.0/21 maxlen: 32
89.39.210.0/23 maxlen: 32
89.187.68.0/23 maxlen: 32
94.24.108.0/23 maxlen: 32
94.26.24.0/23 maxlen: 32
103.68.108.0/22 maxlen: 32
103.109.234.0/23 maxlen: 32
103.137.192.0/23 maxlen: 32
103.139.88.0/23 maxlen: 32
103.141.12.0/23 maxlen: 32
103.146.102.0/23 maxlen: 32
103.151.40.0/23 maxlen: 32
103.204.192.0/22 maxlen: 32
103.208.84.0/22 maxlen: 32
103.214.68.0/22 maxlen: 32
103.230.140.0/22 maxlen: 32
103.254.60.0/22 maxlen: 32
111.235.150.0/23 maxlen: 32
118.91.184.0/22 maxlen: 32
143.246.136.0/22 maxlen: 32
144.48.80.0/22 maxlen: 32
160.202.132.0/22 maxlen: 32
168.222.240.0/22 maxlen: 32
185.90.62.0/23 maxlen: 32
185.99.132.0/22 maxlen: 32
185.121.160.0/22 maxlen: 32
185.121.168.0/22 maxlen: 32
185.121.176.0/22 maxlen: 32
185.121.179.0/24 maxlen: 24
185.147.32.0/22 maxlen: 32
185.195.236.0/24 maxlen: 32
185.195.238.0/23 maxlen: 32
185.214.172.0/22 maxlen: 32
185.236.212.0/22 maxlen: 32
194.58.64.0/23 maxlen: 32
195.184.246.0/23 maxlen: 32
199.47.240.0/22 maxlen: 32
202.50.52.0/22 maxlen: 32
206.53.0.0/22 maxlen: 32
206.245.166.0/23 maxlen: 32
2a06:1280::/32 maxlen: 128
2a06:a006::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c5:c2:5c:b9:ef:09:28:5c:e6:66:b7:9f:7b:12:2a:67:6e:bf:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 10 14:56:22 2026 GMT
Not After : Jun 9 15:01:22 2027 GMT
Subject: CN=1A326900FB3F3219D50F2B0E9FE4E8484CC8421E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e7:8d:dd:65:07:52:64:3b:1b:cf:96:be:df:
ed:d1:9d:b0:59:2d:64:d3:9d:e7:be:b8:9a:f6:b1:
ff:66:4d:1d:3b:c8:4f:9c:f5:9e:74:25:cf:dc:fc:
35:e5:5b:41:21:fb:39:c3:cc:c9:cd:f7:2b:ea:f9:
ce:3e:e5:1a:30:94:7c:2f:32:26:66:92:39:14:b1:
c6:e0:df:f3:50:32:d9:31:89:af:df:71:31:72:7d:
40:2b:1f:bd:d0:bf:33:de:90:6c:8d:c6:42:41:6d:
58:97:9c:3c:dc:7c:bf:77:8c:ab:84:c0:50:c1:89:
26:11:15:4a:84:10:30:46:16:17:c0:f4:b1:84:51:
fd:b0:ad:93:67:33:6e:b2:9b:ea:00:12:e2:e5:9a:
86:c2:15:b4:23:a0:38:dc:44:b5:2a:52:2e:14:80:
10:7d:e7:86:32:64:76:2f:25:c9:6c:1e:b8:9d:b7:
f7:21:ed:1d:b8:40:d2:e3:e4:b6:27:83:be:70:8a:
86:dd:d3:a6:55:00:0f:6a:98:a8:e3:1b:50:77:c6:
3e:3d:95:b9:79:48:c9:e7:83:17:95:ba:6a:51:9f:
41:00:83:f0:b5:8d:93:0c:e1:88:81:7a:08:b7:4a:
2a:3d:4c:b5:e3:9a:24:d0:6e:98:57:c2:ce:a7:f9:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:32:69:00:FB:3F:32:19:D5:0F:2B:0E:9F:E4:E8:48:4C:C8:42:1E
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/22
27.0.232.0/22
81.31.208.0/21
83.142.30.0/23
85.90.220.0/23
85.155.224.0/21
89.39.210.0/23
89.187.68.0/23
94.24.108.0/23
94.26.24.0/23
103.68.108.0/22
103.109.234.0/23
103.137.192.0/23
103.139.88.0/23
103.141.12.0/23
103.146.102.0/23
103.151.40.0/23
103.204.192.0/22
103.208.84.0/22
103.214.68.0/22
103.230.140.0/22
103.254.60.0/22
111.235.150.0/23
118.91.184.0/22
143.246.136.0/22
144.48.80.0/22
160.202.132.0/22
168.222.240.0/22
185.90.62.0/23
185.99.132.0/22
185.121.160.0/22
185.121.168.0/22
185.121.176.0/22
185.147.32.0/22
185.195.236.0/24
185.195.238.0/23
185.214.172.0/22
185.236.212.0/22
194.58.64.0/23
195.184.246.0/23
199.47.240.0/22
202.50.52.0/22
206.53.0.0/22
206.245.166.0/23
IPv6:
2a06:1280::/32
2a06:a006::/32
Signature Algorithm: sha256WithRSAEncryption
0d:53:d5:ae:f8:a8:69:4c:52:7b:72:de:7c:db:ec:99:b5:af:
07:70:b8:bd:82:bc:23:4a:96:87:bc:e6:b5:6c:d3:56:ca:74:
b0:11:50:e7:79:e9:6d:02:ab:8e:b4:79:45:7b:9e:85:ea:b6:
c4:ab:a4:13:0c:a6:fc:2f:13:53:9a:27:b0:ab:4b:e2:0d:33:
90:3b:6a:be:84:27:8d:4b:ec:55:18:a7:e8:eb:01:ee:79:f5:
a0:ab:ba:37:d2:82:db:95:d7:84:5d:3d:ca:04:4c:52:23:48:
ef:22:14:cc:12:cf:fd:22:fe:44:61:36:b3:91:0a:9b:51:ef:
cf:f0:07:c8:b4:5a:d9:e1:73:e5:86:48:3f:41:d5:90:30:66:
7e:da:f1:13:aa:bd:e7:a2:4f:40:ac:59:a2:70:56:23:4a:5c:
37:11:b8:3b:23:7e:e4:78:99:f6:7e:2e:35:81:22:47:60:65:
64:8c:6e:62:a7:99:cb:4c:f9:45:b1:f7:42:5b:e1:ec:dc:ec:
99:64:de:cb:5a:95:76:29:15:8c:b9:7d:75:83:5e:2a:b1:ae:
f7:66:cb:65:c8:72:c4:64:56:5a:b2:bc:0c:c7:d3:3a:a6:e5:
8d:ec:ac:da:d8:52:4e:4e:05:7a:ba:51:07:51:ad:cd:3d:1a:
b1:57:1a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:24 2026 by rpki-client