Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AWSOMyrzwgNix_d6k2ZQuncL2zc.roa
File: AWSOMyrzwgNix_d6k2ZQuncL2zc.roa (raw, json)
Hash identifier: AFlk9M/u5PP6+u6VckIjwNZgFoi/DAB+lRg2AJeusDk=
Subject key identifier: 01:64:8E:33:2A:F3:C2:03:62:C7:F7:7A:93:66:50:BA:77:0B:DB:37
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F178FC140CB3160FE33A2AD5D9D328B0B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AWSOMyrzwgNix_d6k2ZQuncL2zc.roa
Signing time: Tue 30 Jun 2026 08:05:24 +0000
ROA not before: Tue 30 Jun 2026 08:05:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53667
IP address blocks: 2a09:4500::/29 maxlen: 29
2a09:7500::/29 maxlen: 29
2a0f:3044::/32 maxlen: 32
2a0f:7d05::/32 maxlen: 32
2a10:7500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8f:c1:40:cb:31:60:fe:33:a2:ad:5d:9d:32:8b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 30 08:05:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01648e332af3c20362c7f77a936650ba770bdb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:3c:e2:a0:5b:73:e4:71:56:86:9e:b3:0b:
ba:87:e9:ad:07:59:12:7d:fd:3e:c5:9a:8d:21:14:
4d:a8:6c:2a:ba:b9:95:89:95:d2:57:86:cb:5b:2e:
23:e1:29:0b:60:25:f0:0a:f5:41:39:a3:d8:47:19:
75:87:6b:dc:1f:6f:a0:02:91:cf:bb:e1:ca:a2:6e:
ea:01:c4:52:d7:44:32:34:79:55:6e:3d:e3:b6:22:
0b:09:cd:89:f0:22:c9:66:d3:17:72:bb:36:88:69:
78:30:0e:cd:75:9b:3d:b0:92:92:3a:a7:9c:4b:d4:
03:73:01:f3:f9:c1:39:63:01:92:4d:be:3f:91:c1:
66:55:c5:64:20:44:8b:86:dd:5a:48:47:cd:d6:42:
1e:a2:ec:48:5d:40:60:ce:22:11:4f:f0:a9:62:64:
2b:d4:85:12:81:04:bc:3c:b2:8c:f9:04:62:c4:e0:
e2:08:17:62:7b:0b:ac:ed:59:7c:a7:4b:f2:50:cf:
19:bb:93:b3:15:58:a8:db:26:b6:fd:64:01:25:a6:
9e:5c:ff:70:22:2e:36:52:9b:bc:d7:d5:90:76:0c:
9c:d8:1c:70:2a:14:61:52:14:b2:76:71:3d:9b:c3:
20:f6:28:31:0a:66:05:fb:12:40:4e:98:71:50:98:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:64:8E:33:2A:F3:C2:03:62:C7:F7:7A:93:66:50:BA:77:0B:DB:37
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AWSOMyrzwgNix_d6k2ZQuncL2zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:4500::/29
2a09:7500::/29
2a0f:3044::/32
2a0f:7d05::/32
2a10:7500::/29
Signature Algorithm: sha256WithRSAEncryption
6b:99:d1:a9:13:86:30:80:28:6d:ec:29:29:45:a4:14:29:ba:
7b:b5:bb:04:0e:5b:d9:e4:5b:2d:a8:07:37:9e:e2:8b:48:cc:
17:a3:4d:b5:bb:6f:97:dc:01:da:a1:f4:7d:d9:ef:00:8e:96:
05:d1:d6:2e:7f:32:51:95:46:43:64:ca:28:ad:c7:56:37:99:
10:7b:08:0c:c2:6f:71:0e:f4:2f:2b:61:93:05:61:73:3d:2c:
d3:c7:2d:9c:3f:3c:45:3c:ca:e8:98:2f:50:8f:03:ef:56:50:
11:47:9e:6d:9d:85:d3:c8:e5:48:a6:dc:bd:8c:bf:00:c2:31:
01:a8:5c:53:fa:29:e5:87:16:8f:ae:72:3c:fa:6c:ee:98:4a:
b0:b2:37:9e:3c:75:73:30:8a:bc:f7:ea:b4:c4:c9:be:1a:d7:
d1:84:35:ce:b1:ce:9d:12:21:34:3e:98:39:66:48:97:c6:5b:
3c:f5:90:34:4b:f7:d9:d3:63:19:13:36:4c:94:1b:df:3e:9c:
9c:9b:13:63:21:b8:75:d7:9d:1a:14:2c:be:94:38:b6:49:0d:
8e:c7:ec:9a:ce:93:6f:c8:a2:eb:dd:90:ab:c0:39:3f:0b:d7:
30:77:a5:70:4c:fb:13:7c:7c:7b:53:15:b5:4f:a2:db:d8:45:
c9:f1:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:21 2026 by rpki-client