
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353030303a3a2f34302d3438203d3e20323034343634.roa
File: 326131343a373538313a353030303a3a2f34302d3438203d3e20323034343634.roa (raw, json)
Hash identifier: iX4wPM/6sDOW8le1PV8VkU2A66lR0wXIuy2x6iH6jSw=
Subject key identifier: 24:17:CA:D7:8E:5E:8E:47:04:7E:97:1F:36:3D:E7:16:FA:28:E7:5B
Certificate issuer: /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial: 27539BE2A10EACAAA090D4A5349E46C384A519EC
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353030303a3a2f34302d3438203d3e20323034343634.roa
Signing time: Sun 01 Nov 2026 03:45:54 +0000
ROA not before: Sun 01 Nov 2026 03:40:54 +0000
ROA not after: Sun 31 Oct 2027 03:45:54 +0000
asID: 204464
IP address blocks: 2a14:7581:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:53:9b:e2:a1:0e:ac:aa:a0:90:d4:a5:34:9e:46:c3:84:a5:19:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Validity
Not Before: Nov 1 03:40:54 2026 GMT
Not After : Oct 31 03:45:54 2027 GMT
Subject: CN=2417CAD78E5E8E47047E971F363DE716FA28E75B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:12:63:a9:05:86:67:0c:17:70:5a:d7:96:
4d:1a:53:bf:ba:d8:7e:28:5e:38:d2:da:bb:bf:d9:
a7:84:2e:ec:93:ec:ac:37:a2:23:fb:40:10:f5:79:
7e:79:1c:2f:92:a6:30:4f:bc:fd:c9:df:56:b8:72:
e0:ba:bf:35:73:5e:da:cf:5d:16:0d:f1:b5:b0:24:
91:12:9e:d8:9b:df:4f:4f:68:2e:d4:6f:85:49:e9:
ab:cd:fd:11:d2:f7:ca:e0:48:34:41:8f:73:df:98:
a0:db:e9:e9:52:6a:a6:f7:e3:43:6a:d3:52:85:1a:
1e:49:cb:fb:f7:0c:4a:e3:7e:27:be:1d:b7:54:f3:
0b:28:22:79:35:9d:c4:ec:c3:be:e5:16:d9:a2:00:
20:14:e2:eb:66:51:2f:a2:b9:e3:75:e1:9d:6c:c6:
3a:d9:64:2b:63:21:72:b5:4a:7c:4c:83:f9:2b:06:
b5:e7:ac:2f:55:db:27:56:55:dd:91:dc:40:45:42:
cd:7b:6e:f4:9c:90:22:51:63:3f:4d:c7:61:45:79:
20:05:fc:2b:7f:92:9f:2c:67:7e:fd:2c:2d:0a:f1:
f0:16:78:0c:b1:79:1f:4d:2b:75:6d:cd:57:33:4a:
a5:5d:36:8c:dc:f8:c2:b6:46:05:d5:c9:35:47:62:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:17:CA:D7:8E:5E:8E:47:04:7E:97:1F:36:3D:E7:16:FA:28:E7:5B
X509v3 Authority Key Identifier:
keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353030303a3a2f34302d3438203d3e20323034343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5000::/40
Signature Algorithm: sha256WithRSAEncryption
68:56:b4:4b:a2:c6:ed:97:1d:fd:60:9b:9c:19:59:3e:eb:d6:
4f:ae:6e:f1:c3:8c:aa:51:6d:cf:bc:a3:a7:2b:79:cb:21:fb:
1a:6d:d5:8a:6c:9c:f2:8f:1c:4a:0b:7d:82:d9:87:7d:c7:c3:
73:95:dc:2d:4f:6e:65:4c:20:b7:17:20:27:cc:cd:e9:e3:88:
b4:b1:3a:f2:ba:eb:7e:12:17:48:27:81:2d:55:a2:c5:87:27:
35:72:03:af:a4:ee:d9:55:49:23:1f:65:ed:50:b1:c3:20:ba:
fe:c8:df:24:03:b5:f9:0f:76:bb:d9:68:c7:eb:08:54:31:35:
5b:86:50:32:1c:eb:ff:8f:23:f0:f4:4f:d1:7b:13:fa:cb:6c:
21:67:10:e9:2d:70:a1:d9:fb:b1:c7:70:ca:6c:c9:78:e0:c6:
95:90:e5:bf:44:53:36:43:7d:73:22:e4:43:62:94:ff:d7:85:
6c:c5:50:f9:08:7c:09:28:cb:bd:ce:5d:18:0c:f4:00:2b:1b:
72:74:2e:8b:b6:87:f4:28:b9:f5:85:9a:18:eb:eb:1c:9c:08:
e5:17:a4:9c:7b:d8:0d:16:18:ef:ec:af:15:dd:5f:6d:9d:25:
d6:ca:00:5c:5d:90:70:72:90:f5:57:15:bb:d0:e7:7f:4f:2a:
65:fd:69:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:57 2026 by rpki-client