
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538303a656330303a3a2f34302d3438203d3e20323034343634.roa
File: 326131343a373538303a656330303a3a2f34302d3438203d3e20323034343634.roa (raw, json)
Hash identifier: MQTJTwawVpjTikXSAYl16k5OpJk/FStKUf4+T7/H41U=
Subject key identifier: 62:5B:5A:3F:AF:E3:AD:C6:06:12:64:54:AE:6D:B0:BB:4D:7D:A6:63
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 7729E0D74318CEEAB6C7C6AB259A0D8CCB9E37FC
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538303a656330303a3a2f34302d3438203d3e20323034343634.roa
Signing time: Sun 01 Nov 2026 03:46:05 +0000
ROA not before: Sun 01 Nov 2026 03:41:05 +0000
ROA not after: Sun 31 Oct 2027 03:46:05 +0000
asID: 204464
IP address blocks: 2a14:7580:ec00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:29:e0:d7:43:18:ce:ea:b6:c7:c6:ab:25:9a:0d:8c:cb:9e:37:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Nov 1 03:41:05 2026 GMT
Not After : Oct 31 03:46:05 2027 GMT
Subject: CN=625B5A3FAFE3ADC606126454AE6DB0BB4D7DA663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:2f:42:6b:ec:67:18:92:96:ef:e8:6a:19:
e6:a9:b6:6d:43:70:36:fe:7e:26:c4:57:eb:74:96:
96:b4:cd:e8:e5:e3:ac:92:d8:e9:f3:5e:7f:56:25:
70:08:3d:7b:5d:0c:b7:13:48:40:d8:4d:67:1f:d8:
f3:6c:8f:77:35:83:a9:41:d9:8e:37:ec:87:8d:4b:
8a:cd:1e:73:9e:5d:ad:2c:b2:97:08:4c:cf:9e:c7:
41:8c:56:90:df:22:92:2b:d6:14:7c:f9:f1:c9:6c:
c0:01:29:f2:9d:d7:52:e8:50:55:4d:b8:31:aa:8a:
81:97:39:06:f8:6f:91:24:1a:08:30:9a:0b:1f:13:
a4:30:ff:d0:5a:4a:ae:9c:22:d8:21:a4:49:55:5d:
07:33:f5:9a:f7:85:ea:3d:40:d8:6d:fa:c0:e1:e2:
8f:ce:ab:e9:4f:b2:a1:e9:bd:15:46:a6:fc:04:e3:
7f:38:00:47:0e:c5:81:c1:76:23:f7:65:01:11:24:
13:61:52:fd:48:1f:c5:fe:5a:27:1c:5d:01:b1:04:
b9:74:35:b0:ca:65:bf:e8:f8:11:cb:a5:1a:f8:6f:
e7:55:39:de:40:45:e9:09:84:da:05:2d:cc:57:c6:
1d:b8:b0:fa:22:dd:3d:91:7a:b7:ce:f8:f8:71:9e:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5B:5A:3F:AF:E3:AD:C6:06:12:64:54:AE:6D:B0:BB:4D:7D:A6:63
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538303a656330303a3a2f34302d3438203d3e20323034343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ec00::/40
Signature Algorithm: sha256WithRSAEncryption
7d:ea:5a:cd:6b:b6:68:a4:ce:73:c9:1f:1b:8a:7d:26:22:90:
de:02:64:c8:33:a1:50:66:3c:6e:b0:a4:f9:6f:71:ec:15:4f:
85:02:c7:2c:fb:0a:9c:db:e2:53:1b:58:a9:bb:be:7a:c8:86:
7f:66:49:ae:24:d1:37:c9:f4:fe:42:3c:3e:b8:28:72:69:b2:
ae:b0:f4:bf:33:72:ef:b3:ad:bd:d3:6e:82:b3:77:43:75:92:
e8:a9:a1:f2:d6:c2:6d:4d:4e:38:15:db:8c:3c:49:fd:56:75:
4c:56:a7:7f:81:83:be:f3:e5:8c:f8:0b:62:11:cb:d3:b9:e8:
e4:e3:08:12:80:e9:9c:36:a3:67:f4:a7:e3:ee:98:5c:75:93:
d5:08:07:f5:67:a6:bc:18:e8:22:3c:34:29:d7:c9:e7:a3:05:
a4:2c:21:79:3a:78:59:34:30:fb:6a:fd:fc:aa:89:8e:62:6a:
b9:55:0a:b1:3d:51:a6:1d:39:cb:b1:7a:a4:47:68:9d:c1:0c:
c7:20:57:6c:a5:d1:ee:24:39:ed:be:8d:0f:75:f9:ef:e5:a9:
db:8c:c3:db:56:2a:5e:fb:bb:61:7b:9d:bc:f5:f2:b5:0a:0a:
cf:48:a5:48:89:df:78:50:89:eb:28:26:e9:ca:18:3a:71:d7:
9d:8a:0b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:59 2026 by rpki-client