Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: wNfmq70XzkEwnZ+/AJfv7Of1gCjdAnXOl+nMfz8mAGE=
Subject key identifier: A1:E8:3F:54:21:0F:2A:4E:72:13:9B:20:DB:9E:5E:08:A0:D3:B4:56
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 35FDAA98AF13D759A813A75AFDF95B19C4B34599
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
Signing time: Fri 31 Oct 2025 12:52:37 +0000
ROA not before: Fri 31 Oct 2025 12:47:37 +0000
ROA not after: Fri 30 Oct 2026 12:52:37 +0000
asID: 61138
IP address blocks: 5.253.84.0/22 maxlen: 24
5.253.86.0/24 maxlen: 24
27.0.232.0/22 maxlen: 24
81.31.208.0/21 maxlen: 24
83.142.30.0/23 maxlen: 24
85.90.220.0/23 maxlen: 24
89.39.210.0/23 maxlen: 24
94.24.108.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
103.68.108.0/22 maxlen: 24
103.68.108.0/24 maxlen: 24
103.204.192.0/22 maxlen: 24
103.214.68.0/22 maxlen: 24
103.230.140.0/22 maxlen: 24
104.167.16.0/23 maxlen: 24
118.91.184.0/22 maxlen: 24
144.48.80.0/22 maxlen: 24
160.202.132.0/22 maxlen: 24
168.222.240.0/24 maxlen: 24
185.90.62.0/23 maxlen: 24
185.99.132.0/22 maxlen: 24
185.121.160.0/22 maxlen: 24
185.121.168.0/22 maxlen: 24
185.121.168.0/24 maxlen: 24
185.121.176.0/22 maxlen: 24
185.147.32.0/22 maxlen: 24
185.195.238.0/23 maxlen: 24
185.214.172.0/22 maxlen: 24
185.236.212.0/22 maxlen: 24
194.58.64.0/23 maxlen: 24
195.184.246.0/23 maxlen: 24
2a06:1280::/32 maxlen: 48
2a06:a000:100::/40 maxlen: 48
2a06:a004::/32 maxlen: 48
2a06:a006::/32 maxlen: 48
2a06:a007::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:fd:aa:98:af:13:d7:59:a8:13:a7:5a:fd:f9:5b:19:c4:b3:45:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 31 12:47:37 2025 GMT
Not After : Oct 30 12:52:37 2026 GMT
Subject: CN=A1E83F54210F2A4E72139B20DB9E5E08A0D3B456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:7f:2d:17:52:b6:9a:67:57:f2:bf:50:b8:
da:55:b4:fe:a1:44:e1:de:4d:5e:7c:20:10:86:22:
78:83:a4:a5:47:71:42:ab:fa:d8:dd:a0:67:1f:5b:
49:34:94:b6:90:b7:51:f0:7e:93:1b:23:2b:be:e7:
53:e3:be:d1:c4:16:0b:66:98:2b:1e:44:24:d5:09:
7a:90:38:36:c0:f5:4a:11:19:74:49:d1:fa:4a:6d:
80:a9:ad:f3:3f:f4:08:40:83:43:4e:07:4c:e2:eb:
3b:96:11:4d:e6:dd:80:03:b3:d0:92:10:ed:91:70:
4e:17:37:e6:9a:9e:88:5e:6f:a6:d8:c2:a1:27:2e:
2c:ba:ac:35:d2:fa:a8:cf:17:ee:a0:34:d1:02:82:
02:b6:f2:05:56:8c:0f:97:c4:25:2e:bc:0c:bb:59:
e3:b6:ed:68:dd:08:d3:ee:cb:da:97:95:cf:70:fd:
89:29:b4:40:6b:cf:9d:21:cc:41:4e:79:92:68:fb:
63:c7:41:86:8b:46:54:ea:0d:08:ac:8b:a5:a1:91:
6c:62:10:c9:b3:55:ea:f8:fd:d0:48:c7:f7:41:8c:
64:36:8a:24:76:3e:60:38:e0:1a:72:c4:c7:b6:a9:
50:6e:e3:96:ce:3f:95:ed:83:03:2e:ed:a4:0c:17:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E8:3F:54:21:0F:2A:4E:72:13:9B:20:DB:9E:5E:08:A0:D3:B4:56
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/22
27.0.232.0/22
81.31.208.0/21
83.142.30.0/23
85.90.220.0/23
89.39.210.0/23
94.24.108.0/23
94.26.24.0/23
103.68.108.0/22
103.204.192.0/22
103.214.68.0/22
103.230.140.0/22
104.167.16.0/23
118.91.184.0/22
144.48.80.0/22
160.202.132.0/22
168.222.240.0/24
185.90.62.0/23
185.99.132.0/22
185.121.160.0/22
185.121.168.0/22
185.121.176.0/22
185.147.32.0/22
185.195.238.0/23
185.214.172.0/22
185.236.212.0/22
194.58.64.0/23
195.184.246.0/23
IPv6:
2a06:1280::/32
2a06:a000:100::/40
2a06:a004::/32
2a06:a006::/31
Signature Algorithm: sha256WithRSAEncryption
06:2d:dd:49:50:23:51:5d:87:a7:a6:5b:9f:de:da:1b:e5:32:
d8:95:33:86:38:70:a6:88:0b:b7:38:5d:a0:4a:3a:7c:fe:cf:
c7:f3:af:99:fe:70:ab:84:b6:c5:33:1e:ef:df:77:75:54:f8:
b1:f7:8a:59:d6:1c:99:73:5b:f6:d6:02:18:bf:b6:63:a5:01:
6a:20:a2:80:c1:29:1d:b6:41:dc:ca:08:56:18:e4:46:54:23:
f9:f3:3a:5a:ac:6c:2d:f2:6a:dd:46:30:1d:dc:ea:d3:40:c2:
ec:dd:65:89:87:15:e4:b0:d3:cc:83:fc:bd:b1:42:ed:e9:86:
7a:af:67:eb:54:cb:74:ee:5d:4d:13:09:68:3d:0d:f8:0e:a5:
6e:c6:06:1c:e5:34:12:ae:fc:78:a0:d0:c7:ae:0c:e2:f4:09:
d3:87:1b:fc:1c:a4:ad:55:57:b2:bd:f0:87:82:1c:e9:8a:e3:
df:72:20:9d:0b:db:fe:7c:4a:d7:64:b1:f6:b9:b9:24:8d:95:
f7:9e:ee:60:5e:8b:a7:13:f2:07:1d:62:0f:b2:a1:0b:38:86:
f7:c8:7f:3c:52:b8:03:30:35:37:6d:eb:2c:a2:0b:68:c0:73:
32:84:0a:06:a0:66:4b:96:ef:83:ad:59:8e:ae:0d:ef:61:e6:
a0:69:8e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:47 2025 by rpki-client