Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/HWAM-MP9Ze0w76qcATO1xRJuWtc.roa
File: HWAM-MP9Ze0w76qcATO1xRJuWtc.roa (raw, json)
Hash identifier: TaCCd0Xt7zh78QinemtfXlY1Vqciias4lUqG0PdBamI=
Subject key identifier: 1D:60:0C:F8:C3:FD:65:ED:30:EF:AA:9C:01:33:B5:C5:12:6E:5A:D7
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 01A10598ECF7AE97AB363D7A6F599929B937
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/HWAM-MP9Ze0w76qcATO1xRJuWtc.roa
Signing time: Sun 04 Oct 2026 06:27:50 +0000
ROA not before: Sun 04 Oct 2026 06:27:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.114.40.0/24 maxlen: 24
212.114.41.0/24 maxlen: 24
212.114.45.0/24 maxlen: 24
212.114.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:98:ec:f7:ae:97:ab:36:3d:7a:6f:59:99:29:b9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Oct 4 06:27:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d600cf8c3fd65ed30efaa9c0133b5c5126e5ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a4:a5:fb:9f:79:ae:91:55:c8:2b:30:fc:31:
f5:4d:8e:8d:91:84:c2:52:8e:8d:53:a9:4d:be:9d:
b6:b0:5c:1f:5c:d6:d6:41:5a:96:4e:b0:26:b9:6b:
f3:2d:66:f0:2c:5a:1e:99:15:93:59:1e:b1:6a:a1:
50:01:c6:81:0a:69:8d:72:80:2d:1c:22:db:cf:1f:
73:a0:58:1e:41:14:32:7d:e6:ae:96:52:2a:16:bf:
b5:3e:c1:f2:db:98:32:ee:be:92:50:e2:18:45:0f:
63:b5:3a:8a:7e:f2:1d:ad:53:1b:f4:d0:a6:78:fc:
a5:29:07:4a:d0:e8:9d:4a:77:52:7a:8b:18:82:7d:
6d:03:5d:6e:42:98:83:62:12:9c:56:88:7c:f1:0d:
fc:a3:bc:fc:7c:a9:d7:4d:a6:ef:bf:3b:70:b3:e0:
9d:29:0e:89:5c:d6:36:2a:1c:ee:e3:40:78:6b:24:
4b:2b:5c:b9:d1:a8:3e:ef:d1:37:d3:95:e5:e4:73:
34:25:1a:68:5c:23:d7:a0:61:ba:33:b5:d8:12:e4:
49:47:62:03:cb:b7:4b:08:41:80:93:97:0a:6f:cc:
e3:2a:cd:bc:f8:db:eb:09:5c:0c:d9:0f:8a:39:10:
b7:48:c4:e8:1b:3d:e2:bc:0a:b1:53:11:cf:fc:88:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:60:0C:F8:C3:FD:65:ED:30:EF:AA:9C:01:33:B5:C5:12:6E:5A:D7
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/HWAM-MP9Ze0w76qcATO1xRJuWtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.114.40.0/23
212.114.45.0-212.114.46.255
Signature Algorithm: sha256WithRSAEncryption
69:af:91:fa:ca:ec:83:c0:9d:81:94:d5:11:38:38:f8:8a:23:
0d:0e:02:b4:e3:61:f5:82:4c:e8:56:1f:63:80:d6:a2:e3:0c:
58:34:dc:a9:0b:91:10:61:aa:5b:a8:68:37:3d:af:3f:a6:57:
56:49:a4:ef:1c:67:c4:8a:90:4e:f8:82:f4:84:3f:87:cf:a2:
ec:37:c3:93:b7:64:2b:2b:d1:2a:0f:44:1a:1e:66:47:55:24:
8f:97:b4:c3:1a:bb:17:0d:f8:60:c2:81:3a:7d:3d:66:4a:75:
ef:60:67:ba:8b:d3:76:c1:c8:c1:77:30:39:ac:d1:cc:1a:55:
97:47:21:45:24:93:30:ad:94:1f:6e:e6:25:ff:b8:27:d8:73:
22:d3:b6:92:26:4a:39:3f:b0:b2:ab:5a:22:96:ba:e1:45:c3:
03:5e:fc:16:c0:31:5d:55:a9:7f:c8:70:d3:6f:bb:87:fc:ac:
d7:f1:19:07:79:34:94:80:c3:e6:94:6d:96:20:6a:cc:ee:f8:
e3:94:f6:40:c2:58:57:d1:dc:5b:15:3d:ae:71:7e:c9:79:96:
87:bb:d4:de:13:34:e8:9e:71:3c:5d:25:0a:77:63:e0:25:5b:
1e:4c:26:c0:b8:6a:d8:56:f4:04:78:38:a3:60:21:20:eb:3b:
a5:73:db:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 25 07:53:19 2026 by rpki-client