Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ahe-2Z5fMyAOkNi_EAF1EYlFjEY.roa
File: ahe-2Z5fMyAOkNi_EAF1EYlFjEY.roa (raw, json)
Hash identifier: p1DQVuc/H1txZA0H/S4ZDm+6tljX8SKbpsg2alHl3MA=
Subject key identifier: 6A:17:BE:D9:9E:5F:33:20:0E:90:D8:BF:10:01:75:11:89:45:8C:46
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 01A15E4FFFA9DB0F3F1C240D9C16338F46A2
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ahe-2Z5fMyAOkNi_EAF1EYlFjEY.roa
Signing time: Wed 21 Oct 2026 11:54:23 +0000
ROA not before: Wed 21 Oct 2026 11:54:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199527
IP address blocks: 84.46.203.0/24 maxlen: 24
86.38.128.0/24 maxlen: 24
86.38.163.0/24 maxlen: 24
185.189.152.0/24 maxlen: 24
213.252.208.0/24 maxlen: 24
213.252.209.0/24 maxlen: 24
213.252.242.0/24 maxlen: 24
213.252.250.0/24 maxlen: 24
213.252.251.0/24 maxlen: 24
213.252.253.0/24 maxlen: 24
2a00:f501:a001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:4f:ff:a9:db:0f:3f:1c:24:0d:9c:16:33:8f:46:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 21 11:54:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a17bed99e5f33200e90d8bf1001751189458c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:36:da:29:55:1e:89:2f:d0:7b:9a:2e:64:
a4:d5:be:75:88:c5:28:e4:67:d9:fb:17:b7:e3:7c:
05:17:71:0a:0f:c3:d3:70:1c:e6:3c:8f:ed:b6:b3:
55:57:24:77:55:3b:9f:2c:6f:41:b7:97:c6:9a:1c:
62:27:2a:5b:87:31:43:4c:73:cf:fc:8b:b6:c3:ed:
d2:93:1f:6a:0d:3a:75:10:7d:f0:e3:9f:c9:dc:d2:
ab:07:74:09:13:5b:b8:4b:e4:e6:2e:28:d5:d4:67:
70:5f:e6:d9:cf:ec:00:8f:0b:33:8c:73:71:a9:76:
71:e4:17:d7:23:3e:a2:0a:6d:ca:71:04:32:18:75:
3e:bc:1a:c0:72:9e:00:b1:15:4d:c4:e7:03:51:51:
74:ff:b5:72:cd:dd:d5:83:70:aa:32:91:c2:e4:e6:
90:6b:a8:c9:68:e5:97:4f:38:ca:84:f9:0e:da:c5:
2f:bb:22:50:2d:c3:03:17:8f:f9:f7:da:77:50:ae:
27:41:e0:56:a2:15:46:cf:af:be:70:f9:e4:23:a0:
5d:3f:11:84:37:66:4f:cf:c6:57:5a:31:c2:b4:4e:
19:7c:ac:3f:8f:12:f9:cb:58:c8:85:68:e3:fb:74:
e3:9c:5d:db:b0:65:0c:26:f5:dd:73:4a:3b:56:14:
76:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:17:BE:D9:9E:5F:33:20:0E:90:D8:BF:10:01:75:11:89:45:8C:46
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ahe-2Z5fMyAOkNi_EAF1EYlFjEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.203.0/24
86.38.128.0/24
86.38.163.0/24
185.189.152.0/24
213.252.208.0/23
213.252.242.0/24
213.252.250.0/23
213.252.253.0/24
IPv6:
2a00:f501:a001::/48
Signature Algorithm: sha256WithRSAEncryption
a9:3b:ad:18:3e:99:2a:33:4a:8d:5f:85:0f:f6:c3:e0:5b:32:
38:c9:89:3f:34:6e:5b:83:dc:ea:30:79:2f:86:b5:17:13:eb:
c9:42:7a:0a:2a:e3:e3:78:99:07:2f:4e:da:6a:bc:85:2a:22:
71:63:f8:f3:49:83:ae:82:f0:56:38:bf:2a:1d:cc:aa:51:19:
07:8f:1c:4a:8d:60:a5:7a:bb:a3:b1:d1:98:b3:33:7d:2a:dc:
50:56:56:f1:46:4d:34:1a:ef:20:df:10:a0:fc:aa:9f:dd:a0:
ef:94:3c:9f:d0:87:26:7b:c5:25:22:19:b3:f4:05:df:b3:57:
6c:04:34:b4:35:1c:55:9e:f3:7f:53:a2:ea:7f:30:27:3c:77:
98:af:bd:a2:fe:7d:a6:f2:c3:b4:96:3e:e5:3c:61:ce:73:a5:
db:f4:f3:79:0f:fc:74:6e:a8:9a:67:32:b4:50:a4:aa:8b:d8:
bc:9f:09:f2:4c:6b:9a:fa:14:d2:c5:3a:bf:c5:58:ae:af:f9:
2c:cb:bf:02:be:05:4e:e8:e5:15:bf:0e:9f:9d:8a:d2:f7:6e:
55:be:af:10:ae:4c:46:18:4b:ff:6c:be:7b:09:b5:89:b7:5f:
ce:c1:cd:11:5a:85:2e:2a:e5:df:75:92:fb:52:e3:53:8a:11:
f9:27:86:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:53:42 2026 by rpki-client